Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File:                     RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier:          rrs6CUhBiE2KsjLus9PfVCcjynHVuSUUqdgJu3HdYJI=
Subject key identifier:   D4:AF:DA:B5:29:B5:D6:AA:BD:4A:76:10:C2:60:11:06:90:F6:07:B3
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer:       /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial:       01987E2EA05768ABF57F9A16D6AAF801C767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number:          08EB
Signing time:             Wed 06 Aug 2025 07:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:41 +0000
Files and hashes:         1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
                          2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: QPiqKWZhLD0nCxAKGjYtm2cGOiO1MsmhsnXT7sJpDJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:a0:57:68:ab:f5:7f:9a:16:d6:aa:f8:01:c7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
        Validity
            Not Before: Aug  6 07:00:41 2025 GMT
            Not After : Aug  7 07:00:41 2025 GMT
        Subject: CN=d4afdab529b5d6aabd4a7610c260110690f607b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:4e:8f:6e:ac:03:cf:55:62:0f:9a:43:e5:
                    16:dc:e0:bf:58:49:75:ef:a2:77:74:af:0b:56:e1:
                    fa:1b:84:64:d7:5c:a8:e5:62:ee:e4:86:90:f0:73:
                    b8:70:9b:00:8c:f1:c3:1f:51:9f:29:1c:38:45:c5:
                    0f:26:27:00:9d:5b:5c:b3:8c:b1:0c:e6:2c:27:6c:
                    5a:b5:5c:5e:05:03:b6:d2:b2:45:da:d2:57:66:86:
                    b1:12:28:2a:f6:4f:04:81:70:2b:69:32:52:e9:70:
                    c3:c3:c3:47:d3:aa:24:40:dd:25:15:a5:63:6a:95:
                    1f:f2:25:8f:b4:e1:1c:f3:d8:7e:6e:d2:58:39:7a:
                    55:b3:f6:82:81:42:86:4b:47:e1:d1:8b:4e:58:ed:
                    bb:06:ce:e6:4c:ae:a0:7e:87:46:57:5f:7d:78:d3:
                    88:1e:0b:43:fa:47:5a:29:17:d0:7a:86:dd:f8:29:
                    c9:b4:b5:36:2c:7a:75:1d:8e:06:38:da:5d:bd:86:
                    36:05:1f:ac:19:7b:ed:f5:85:83:93:62:4e:b2:1d:
                    e0:d6:59:e5:e0:61:15:af:35:9a:a5:07:6a:e1:f1:
                    9f:0e:3a:24:93:cd:5f:f4:35:51:de:51:d2:f3:77:
                    80:45:f7:8f:04:2d:49:b3:0c:29:eb:e4:3b:65:8d:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:DA:B5:29:B5:D6:AA:BD:4A:76:10:C2:60:11:06:90:F6:07:B3
            X509v3 Authority Key Identifier:
                keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:cc:7c:3f:fe:90:ac:16:6a:29:ad:40:2a:41:99:7c:9b:59:
         c3:af:d8:32:12:0c:57:bd:fb:6d:45:3c:16:11:0e:1c:2b:be:
         4a:dd:f0:11:40:5b:d4:7f:78:54:68:b1:75:10:9b:75:37:f9:
         2c:a1:a9:34:63:03:82:1d:2b:9c:6a:c0:6a:52:64:b4:f8:d4:
         38:1a:0e:04:84:66:28:63:7a:d6:b3:db:2f:e0:e5:fd:5a:f7:
         d1:c6:2e:fc:15:cc:dc:9e:11:e5:bc:1a:f7:75:ae:13:dd:a8:
         ac:9f:22:08:3e:86:ef:5d:91:d9:69:c2:c0:a2:d6:cc:73:65:
         f0:86:30:88:81:24:4a:64:5a:14:65:75:fe:20:29:55:75:40:
         21:eb:27:ef:a2:78:45:80:a2:a9:b1:a1:85:0a:41:fd:62:da:
         c4:fe:41:19:46:29:86:bc:29:c6:9d:15:13:df:e7:ee:17:36:
         bb:16:76:9d:ff:75:1d:c4:e4:b3:3b:21:1b:50:ec:98:34:3a:
         3a:82:5c:31:e8:51:a7:e3:53:6f:98:96:8d:54:93:4f:be:e9:
         4f:80:e2:f7:d8:30:a4:ea:e5:99:71:cd:bc:8f:c3:a6:fc:c9:
         1e:fc:60:f9:51:b4:2f:64:db:e6:32:cd:98:a9:3f:4b:7f:f2:
         71:f1:41:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LqBXaKv1f5oW1qr4AcdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4
MjdlZTkwHhcNMjUwODA2MDcwMDQxWhcNMjUwODA3MDcwMDQxWjAzMTEwLwYDVQQD
EyhkNGFmZGFiNTI5YjVkNmFhYmQ0YTc2MTBjMjYwMTEwNjkwZjYwN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzBOj26sA89VYg+aQ+UW3OC/WEl1
76J3dK8LVuH6G4Rk11yo5WLu5IaQ8HO4cJsAjPHDH1GfKRw4RcUPJicAnVtcs4yx
DOYsJ2xatVxeBQO20rJF2tJXZoaxEigq9k8EgXAraTJS6XDDw8NH06okQN0lFaVj
apUf8iWPtOEc89h+btJYOXpVs/aCgUKGS0fh0YtOWO27Bs7mTK6gfodGV199eNOI
HgtD+kdaKRfQeobd+CnJtLU2LHp1HY4GONpdvYY2BR+sGXvt9YWDk2JOsh3g1lnl
4GEVrzWapQdq4fGfDjokk81f9DVR3lHS83eARfePBC1Jswwp6+Q7ZY0JMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSv2rUptdaqvUp2EMJgEQaQ9gezMB8GA1UdIwQY
MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt
Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz
LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsx8P/6Q
rBZqKa1AKkGZfJtZw6/YMhIMV737bUU8FhEOHCu+St3wEUBb1H94VGixdRCbdTf5
LKGpNGMDgh0rnGrAalJktPjUOBoOBIRmKGN61rPbL+Dl/Vr30cYu/BXM3J4R5bwa
93WuE92orJ8iCD6G712R2WnCwKLWzHNl8IYwiIEkSmRaFGV1/iApVXVAIesn76J4
RYCiqbGhhQpB/WLaxP5BGUYphrwpxp0VE9/n7hc2uxZ2nf91HcTkszshG1DsmDQ6
OoJcMehRp+NTb5iWjVSTT77pT4Di99gwpOrlmXHNvI/DpvzJHvxg+VG0L2Tb5jLN
mKk/S3/ycfFB1A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:45 2025 by rpki-client