Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File:                     X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier:          CC+OmJmzRrHQhbbAtkdHgaFWe9ATy9g0Ypn1ZSWFwUM=
Subject key identifier:   27:60:83:9C:C7:91:42:80:56:D6:E4:71:83:82:1C:BC:75:8D:6F:04
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer:       /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial:       0198744FBCB7E63CFED3C7A36DAE9760571F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number:          0DB1
Signing time:             Mon 04 Aug 2025 09:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:39 +0000
Files and hashes:         1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
                          2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: DksIJPPjDRF5OEQTc7RXdGU6L5RDn+x+44YmQjU37Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:bc:b7:e6:3c:fe:d3:c7:a3:6d:ae:97:60:57:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
        Validity
            Not Before: Aug  4 09:00:39 2025 GMT
            Not After : Aug  5 09:00:39 2025 GMT
        Subject: CN=2760839cc791428056d6e47183821cbc758d6f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:08:fe:19:d8:04:f7:0b:8b:c7:68:72:89:
                    28:a2:6a:70:7a:f5:f8:71:8b:3d:de:78:68:da:32:
                    72:3a:5d:80:17:25:ee:95:98:bc:3c:63:61:2a:d4:
                    e1:6a:bc:05:ce:d0:a0:2e:16:0e:2a:d4:68:17:47:
                    9f:e1:fd:57:69:b7:7e:53:5e:7f:28:08:4f:ee:97:
                    c7:f5:54:e1:a8:de:a0:e6:a4:ed:df:09:47:c3:f6:
                    78:1b:c9:cf:8e:e8:de:06:0f:1a:92:78:e6:4a:f2:
                    1c:d2:e9:31:81:86:ea:6c:25:08:1d:e5:f6:84:1a:
                    cd:b3:fd:77:5c:22:61:36:50:53:7a:57:9a:e9:f8:
                    ab:30:82:c1:fa:41:62:eb:7f:be:e0:bc:b7:6a:7f:
                    15:03:02:49:6d:fe:18:92:01:71:04:a8:83:d7:eb:
                    5f:ba:d3:b3:af:47:cd:f4:db:70:5f:89:be:3d:91:
                    da:1a:47:cf:a9:56:a5:1f:56:bd:19:2b:5c:9c:0a:
                    11:a7:08:1a:f7:81:9d:3b:0d:5d:7c:33:90:10:43:
                    eb:db:40:c8:14:ed:76:68:2f:f6:d2:bf:e2:4c:19:
                    95:9f:60:f5:3f:83:d5:13:99:aa:91:eb:2a:03:51:
                    17:25:96:c9:05:79:70:e8:ce:38:b5:b8:ab:e9:47:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:83:9C:C7:91:42:80:56:D6:E4:71:83:82:1C:BC:75:8D:6F:04
            X509v3 Authority Key Identifier:
                keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:7f:82:f8:4f:28:06:32:90:10:62:29:21:34:57:2d:3f:
         c6:fb:73:3b:fa:f2:90:9d:bd:8e:7f:94:3c:fc:30:92:e0:dc:
         92:c9:7b:49:07:9f:a1:3a:1a:65:b8:c6:8a:45:be:fd:bd:54:
         46:25:af:d6:a8:f0:f6:ce:45:d6:2e:08:00:45:6d:c1:b5:fe:
         b9:6c:33:c7:4d:57:ad:a2:d4:b5:25:9c:1d:46:c4:56:98:4e:
         ed:c4:80:04:e2:85:f7:1c:06:9c:25:2b:48:26:7e:0e:ef:e4:
         f7:ba:37:c7:5a:af:34:09:23:7a:f8:2e:29:fe:8b:bd:cd:1c:
         73:03:c6:15:a4:8c:8b:c4:3a:b3:b5:e7:11:a0:3f:20:a5:5b:
         73:18:57:cb:b6:46:70:4e:c9:3f:b2:22:9e:0d:d8:81:7b:7b:
         8a:04:26:42:2d:d1:67:ba:99:bb:2d:53:27:d5:2b:06:fb:74:
         61:48:b5:6e:6c:0d:53:9b:f3:a4:77:f0:b5:1a:36:0f:3e:b0:
         68:16:4b:84:43:df:7e:a4:c4:be:fe:44:21:50:64:60:8c:2d:
         50:55:a2:6f:06:f4:ce:2c:29:ba:dc:34:bb:89:d3:b5:9f:c0:
         c9:3c:2e:6c:2e:22:3f:be:83:a9:cf:8b:66:33:ac:50:6f:62:
         de:58:6b:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T7y35jz+08ejba6XYFcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw
ZjkzNzcwHhcNMjUwODA0MDkwMDM5WhcNMjUwODA1MDkwMDM5WjAzMTEwLwYDVQQD
EygyNzYwODM5Y2M3OTE0MjgwNTZkNmU0NzE4MzgyMWNiYzc1OGQ2ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN8I/hnYBPcLi8docokoompwevX4
cYs93nho2jJyOl2AFyXulZi8PGNhKtTharwFztCgLhYOKtRoF0ef4f1Xabd+U15/
KAhP7pfH9VThqN6g5qTt3wlHw/Z4G8nPjujeBg8aknjmSvIc0ukxgYbqbCUIHeX2
hBrNs/13XCJhNlBTelea6firMILB+kFi63++4Ly3an8VAwJJbf4YkgFxBKiD1+tf
utOzr0fN9NtwX4m+PZHaGkfPqValH1a9GStcnAoRpwga94GdOw1dfDOQEEPr20DI
FO12aC/20r/iTBmVn2D1P4PVE5mqkesqA1EXJZbJBXlw6M44tbir6UcBoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdgg5zHkUKAVtbkcYOCHLx1jW8EMB8GA1UdIwQY
MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt
NWUwZTI4MWQ3ZGEzLzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz
LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrd/gvhP
KAYykBBiKSE0Vy0/xvtzO/rykJ29jn+UPPwwkuDcksl7SQefoToaZbjGikW+/b1U
RiWv1qjw9s5F1i4IAEVtwbX+uWwzx01XraLUtSWcHUbEVphO7cSABOKF9xwGnCUr
SCZ+Du/k97o3x1qvNAkjevguKf6Lvc0ccwPGFaSMi8Q6s7XnEaA/IKVbcxhXy7ZG
cE7JP7Iing3YgXt7igQmQi3RZ7qZuy1TJ9UrBvt0YUi1bmwNU5vzpHfwtRo2Dz6w
aBZLhEPffqTEvv5EIVBkYIwtUFWibwb0ziwputw0u4nTtZ/AyTwubC4iP76Dqc+L
ZjOsUG9i3lhr/Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client