Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
File:                     x7cn_mQvVCkYabzx8pF-D1O-vSI.mft (raw, json)
Hash identifier:          BaPM1Q6OwsdeI+K5L/Mqe1Uay3cPh9NJOk1WxPpuboU=
Subject key identifier:   4E:30:F9:E6:13:A3:AC:CB:46:74:1C:56:59:7E:3E:6A:A9:16:F7:87
Authority key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
Certificate issuer:       /CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Certificate serial:       0198752C076A3C7A1DAF1B79F6B6753AC022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
Manifest number:          30
Signing time:             Mon 04 Aug 2025 13:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:16 +0000
Files and hashes:         1: wsRqdf6ProVsQH4skwc-uG0lzUw.roa (hash: FHzK5LDeYtvIBQbuDHKUrWWn8X5KgE2aJxYpJ0xsPOc=)
                          2: x7cn_mQvVCkYabzx8pF-D1O-vSI.crl (hash: acR6lX1EpNBgvlZPTBAKIOW96lby55WLxQmMOBf7sqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:07:6a:3c:7a:1d:af:1b:79:f6:b6:75:3a:c0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
        Validity
            Not Before: Aug  4 13:01:16 2025 GMT
            Not After : Aug  5 13:01:16 2025 GMT
        Subject: CN=4e30f9e613a3accb46741c56597e3e6aa916f787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:dc:1b:3f:4c:f8:cc:43:39:ef:fb:fc:a1:
                    6d:73:6f:29:5f:f1:94:5f:81:73:01:01:10:0b:c0:
                    1e:95:d0:de:07:3f:93:0b:d5:be:8c:70:b8:db:81:
                    bc:c0:1c:8a:41:a8:3a:fa:5d:b2:5b:e8:ee:af:6d:
                    fe:39:8e:7f:3c:56:f2:a0:8f:3d:b2:88:17:55:0c:
                    e9:24:fa:76:12:d3:8e:1c:35:81:7b:86:5b:b9:44:
                    cb:fa:cd:2f:05:7a:f5:25:80:af:88:4a:b1:19:60:
                    b8:ad:4b:f9:73:47:e5:af:7f:a6:92:c1:6e:fb:b7:
                    02:a8:d3:95:29:f9:96:5d:0b:ee:5f:78:13:53:46:
                    05:28:46:01:d8:dd:b1:c4:4a:10:64:ba:ee:4d:24:
                    2e:97:bd:e6:3a:bf:e8:8e:f6:f7:6b:e1:f5:ee:cf:
                    40:9e:f5:6b:b2:32:88:2e:14:e3:2b:53:7c:f9:37:
                    70:3d:04:67:f5:7d:91:7e:7d:b2:17:23:9e:4e:1f:
                    e6:66:91:a1:c5:3f:1c:13:a9:79:ef:32:95:96:9a:
                    f6:c0:ea:56:4c:00:1d:32:f7:1a:98:f5:e0:c8:e7:
                    42:fa:ce:78:55:22:e2:c9:6b:83:87:29:0a:1d:5f:
                    ed:c0:2f:2d:83:f9:ee:e9:c5:1e:e6:b5:08:ae:ad:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:F9:E6:13:A3:AC:CB:46:74:1C:56:59:7E:3E:6A:A9:16:F7:87
            X509v3 Authority Key Identifier:
                keyid:C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:89:26:67:a9:49:b5:64:7a:fb:6b:d4:5b:c6:e1:6b:24:
         2a:a4:7d:39:56:a8:f9:28:c5:51:20:cf:88:9c:98:13:0e:55:
         c4:59:f0:e2:06:40:07:f5:db:fe:04:c2:6b:86:cc:bc:19:17:
         94:61:f0:03:68:00:37:70:dd:30:8d:91:8d:a3:b1:4e:20:2d:
         25:c7:1e:79:07:1e:0f:fe:0e:74:5a:04:fa:fb:6c:62:6f:ed:
         f3:16:7d:74:19:2d:f2:1f:07:c9:62:cb:07:ea:5c:01:39:dd:
         5c:d8:a4:2a:ad:05:e9:39:d0:bc:ba:a0:56:d5:ad:d4:6f:c4:
         6f:0f:82:49:64:dd:55:b5:21:cf:bc:6d:fa:b2:21:4a:06:cc:
         3a:39:3f:d3:18:62:86:06:cc:14:70:4c:63:61:ff:86:43:ee:
         09:e1:e0:2d:28:14:55:5b:79:cc:74:93:33:f9:94:1b:bf:74:
         e7:23:e9:40:16:9c:78:fa:7b:39:c4:bd:ae:12:47:05:4f:42:
         29:4c:11:28:c3:7b:ff:4c:cb:fa:87:ab:46:64:e9:2f:54:ff:
         cf:b5:75:0f:47:1e:03:c8:9e:1d:4b:57:30:e0:61:5c:76:c1:
         05:10:db:7d:fb:51:62:6e:ed:97:0e:6e:dd:1b:51:59:4c:b1:
         ae:6a:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:28 2025 by rpki-client