Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File:                     xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier:          lshwinShebtB7RxnhgRiAGLzV8QZeaeAMY557ecNYMc=
Subject key identifier:   F8:F0:8D:6A:BD:02:FA:7F:A2:86:2F:07:BF:4F:83:86:1B:DA:B4:D3
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer:       /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial:       01987A8945607332C7CA51B5D862DA47B4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number:          0679
Signing time:             Tue 05 Aug 2025 14:01:13 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:13 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:13 +0000
Files and hashes:         1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: FTv/ehaJH/b+3ofB+3G/39cAvT1pDnNa3yj1QqBM/r4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:45:60:73:32:c7:ca:51:b5:d8:62:da:47:b4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
        Validity
            Not Before: Aug  5 14:01:13 2025 GMT
            Not After : Aug  6 14:01:13 2025 GMT
        Subject: CN=f8f08d6abd02fa7fa2862f07bf4f83861bdab4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:e8:03:ec:00:e9:23:90:01:f8:fd:fa:6b:
                    be:8f:e6:32:ba:4b:37:69:d9:66:a2:a7:eb:0c:c3:
                    64:ed:c5:8b:ef:a0:46:d7:6d:bf:ee:11:25:bd:56:
                    54:64:c9:d4:bf:91:e8:ee:4c:ea:e2:81:de:76:03:
                    79:34:2c:05:1b:77:cf:77:53:a0:59:dc:fd:b5:45:
                    f7:55:8f:69:13:9b:f2:ed:9c:ed:ae:c7:d3:fc:0e:
                    70:1a:16:2f:c8:e4:53:08:85:af:ef:e5:0c:7e:75:
                    08:c3:77:13:df:99:c5:87:1a:35:b1:23:b0:63:3f:
                    28:5e:67:2b:ec:7e:a2:50:c2:98:29:f4:d8:be:3b:
                    43:3e:0b:03:42:84:bb:60:55:4b:dd:81:d8:0d:35:
                    ec:20:2d:25:57:7e:51:d3:0a:49:98:c5:79:c0:7c:
                    51:23:eb:60:4c:22:3a:8b:c7:98:70:14:76:56:7f:
                    c2:86:7a:31:42:b5:5b:8d:42:50:83:08:a0:d3:8d:
                    95:29:f2:e4:b6:e9:d9:6a:da:0d:e7:e2:c2:89:7c:
                    e4:63:66:34:c3:6c:76:6f:cf:be:23:b8:37:5d:fc:
                    7f:53:fa:7d:46:bd:78:90:c8:a8:be:ea:99:06:7e:
                    6b:e0:a6:25:b2:1e:b1:15:31:a5:a8:0e:cc:59:d8:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:8D:6A:BD:02:FA:7F:A2:86:2F:07:BF:4F:83:86:1B:DA:B4:D3
            X509v3 Authority Key Identifier:
                keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:de:18:74:6f:92:9d:0d:19:11:11:16:60:ad:d5:da:53:
         8f:ad:2c:29:d3:2d:5e:78:db:9a:49:c2:37:22:86:2c:88:8b:
         a5:c3:73:82:6a:f3:bc:b3:fa:f6:3e:eb:d1:73:ae:b2:bb:9f:
         5d:c4:f7:17:64:5f:6f:ef:e6:5b:8d:cc:db:7b:70:83:7e:54:
         e3:99:5a:63:40:15:e2:dd:ae:be:76:ab:7e:02:9a:c9:ab:ae:
         88:a6:69:5a:33:45:d5:b1:ee:11:56:4f:8f:76:13:22:5d:79:
         3f:5d:04:4d:ef:63:7c:63:a7:89:39:c4:18:21:dd:b1:24:5d:
         93:dc:51:a7:ff:60:a1:0b:9b:09:01:cf:05:36:65:23:a1:dc:
         e4:6d:83:29:ef:cf:94:16:52:46:64:ed:76:01:c4:f9:01:5b:
         51:fc:b2:90:36:45:ad:f8:09:fc:8f:00:f3:55:e9:36:a3:27:
         64:5f:2a:40:a7:5f:39:b8:18:8c:31:3a:1a:34:a3:63:53:50:
         e3:27:bc:35:87:cd:82:fb:fd:3a:c8:bf:fe:4e:18:f0:3f:13:
         b6:7d:59:52:39:41:f3:03:0b:4b:7a:08:4b:e0:af:c2:c6:0a:
         38:55:6d:60:f1:b7:25:88:95:af:1c:53:28:a6:a1:6c:26:91:
         34:1e:bf:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iUVgczLHylG12GLaR7SwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjUwODA1MTQwMTEzWhcNMjUwODA2MTQwMTEzWjAzMTEwLwYDVQQD
EyhmOGYwOGQ2YWJkMDJmYTdmYTI4NjJmMDdiZjRmODM4NjFiZGFiNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v3oA+wA6SOQAfj9+mu+j+Yyuks3
adlmoqfrDMNk7cWL76BG122/7hElvVZUZMnUv5Ho7kzq4oHedgN5NCwFG3fPd1Og
Wdz9tUX3VY9pE5vy7ZztrsfT/A5wGhYvyORTCIWv7+UMfnUIw3cT35nFhxo1sSOw
Yz8oXmcr7H6iUMKYKfTYvjtDPgsDQoS7YFVL3YHYDTXsIC0lV35R0wpJmMV5wHxR
I+tgTCI6i8eYcBR2Vn/ChnoxQrVbjUJQgwig042VKfLktunZatoN5+LCiXzkY2Y0
w2x2b8++I7g3Xfx/U/p9Rr14kMiovuqZBn5r4KYlsh6xFTGlqA7MWdgryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjwjWq9Avp/ooYvB79Pg4Yb2rTTMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejveGHRv
kp0NGRERFmCt1dpTj60sKdMtXnjbmknCNyKGLIiLpcNzgmrzvLP69j7r0XOusruf
XcT3F2Rfb+/mW43M23twg35U45laY0AV4t2uvnarfgKayauuiKZpWjNF1bHuEVZP
j3YTIl15P10ETe9jfGOniTnEGCHdsSRdk9xRp/9goQubCQHPBTZlI6Hc5G2DKe/P
lBZSRmTtdgHE+QFbUfyykDZFrfgJ/I8A81XpNqMnZF8qQKdfObgYjDE6GjSjY1NQ
4ye8NYfNgvv9Osi//k4Y8D8Ttn1ZUjlB8wMLS3oIS+CvwsYKOFVtYPG3JYiVrxxT
KKahbCaRNB6/tw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:46 2025 by rpki-client