Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File:                     XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier:          nlr8FIC2OZQ4tJDWleK7PHXrg12qVCOlZyz/2biKPW4=
Subject key identifier:   07:2A:B7:5A:85:C1:94:35:94:0C:E1:B2:F1:1D:DE:E2:40:1D:77:D5
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer:       /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial:       019873742F4ED9029F6D739F126A83352EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number:          1630
Signing time:             Mon 04 Aug 2025 05:00:50 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:50 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:50 +0000
Files and hashes:         1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
                          2: 7jTBlGSOzUArG5VVhBc9-xgZPdQ.roa (hash: yavmUXM6+em4MudJtfPugju27DvKZrSpZnOFW626fug=)
                          3: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
                          4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
                          5: SDCjGiu7HlJmu92riiwnYJVUZkM.roa (hash: dRu22wu3jt3btScf5pPPepbiwZpCNe4LeyeAtOs7QoU=)
                          6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: hOSFBpuf66yNy+TBiNFnCMcTWTadpthB29eqRc3Jt/g=)
                          7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
                          8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:2f:4e:d9:02:9f:6d:73:9f:12:6a:83:35:2e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
        Validity
            Not Before: Aug  4 05:00:50 2025 GMT
            Not After : Aug  5 05:00:50 2025 GMT
        Subject: CN=072ab75a85c19435940ce1b2f11ddee2401d77d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:a6:58:2b:71:a7:18:89:67:d8:47:c1:94:
                    74:fb:f2:0b:6f:3d:e7:52:ce:73:de:f9:9a:13:71:
                    ba:72:8a:a3:fb:3b:bf:c9:4a:6a:48:09:41:eb:48:
                    44:00:51:04:59:a8:2e:59:a7:38:06:7b:a3:d3:54:
                    a0:06:83:a2:43:66:79:b7:03:86:a6:64:5e:3b:26:
                    ee:f7:01:36:83:8f:22:5f:1d:c9:e5:bb:6f:fa:a6:
                    45:d4:72:08:19:f8:17:0b:50:f4:13:54:92:fa:2b:
                    a2:86:d0:81:ee:3f:d1:eb:31:8e:70:77:a3:c6:87:
                    d3:a3:c1:4a:6a:1f:86:81:2c:a1:1b:f4:db:25:b2:
                    65:8e:0e:c3:98:c2:a6:8d:08:a7:ac:79:e4:c4:08:
                    a6:9e:86:ac:08:af:3d:0e:2c:81:c5:1b:fd:79:33:
                    9c:4d:5c:4f:b8:01:85:6e:92:d8:be:ee:e1:de:d3:
                    c6:90:69:3b:f8:d5:d6:80:95:77:2f:60:5b:96:5f:
                    03:d7:9a:6e:87:b2:bd:8e:4b:3a:4e:b5:00:f6:86:
                    ab:93:6e:44:a0:65:af:52:ba:53:01:8e:78:1c:87:
                    14:bb:6e:62:2f:6b:dd:13:87:9b:43:b8:c2:9a:35:
                    27:de:a5:3a:16:b8:ca:d5:74:d4:cd:2b:35:f2:09:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:B7:5A:85:C1:94:35:94:0C:E1:B2:F1:1D:DE:E2:40:1D:77:D5
            X509v3 Authority Key Identifier:
                keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:f8:33:a5:6e:b2:9e:81:87:d8:80:ab:98:1d:f9:39:89:
         ed:51:69:71:1c:b3:a5:0b:77:29:20:27:8d:d0:71:ac:7e:ea:
         c5:15:34:3a:f9:6b:40:b5:bb:54:83:b2:88:c1:1b:36:49:37:
         fd:a3:84:23:06:51:eb:d6:b0:13:e9:5a:4e:2e:e5:4c:09:f3:
         2b:da:b5:54:13:a5:49:4e:e1:21:22:9c:fd:f4:be:f2:89:e8:
         3c:e2:4f:45:a9:7e:2c:32:60:f2:ed:38:33:24:b0:21:f4:03:
         48:71:31:e0:c3:58:e3:ef:1f:e1:3e:38:86:91:8d:68:d5:24:
         ab:6e:2c:6a:60:c9:f4:82:40:63:1d:ea:b9:70:fa:2c:8a:ac:
         ac:8b:fa:bd:2e:81:be:6a:fd:70:6d:cd:66:f6:0a:5d:f3:fe:
         ad:e5:57:11:5c:dd:bc:f1:6e:05:78:64:f1:a2:2e:6f:55:6a:
         69:12:bb:b7:59:e8:28:aa:1c:88:1b:ee:4e:2b:2f:9b:84:eb:
         bd:37:79:d1:ce:b7:35:81:5a:98:62:6d:b2:cc:fd:6e:c6:f7:
         50:4e:1e:9c:8b:e3:be:44:1b:33:b5:2f:ba:06:20:33:cd:50:
         85:ac:97:fb:3e:8c:81:f4:7e:55:ed:4f:4a:ec:aa:10:23:9e:
         7e:d6:06:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdC9O2QKfbXOfEmqDNS65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjUwODA0MDUwMDUwWhcNMjUwODA1MDUwMDUwWjAzMTEwLwYDVQQD
EygwNzJhYjc1YTg1YzE5NDM1OTQwY2UxYjJmMTFkZGVlMjQwMWQ3N2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWOmWCtxpxiJZ9hHwZR0+/ILbz3n
Us5z3vmaE3G6coqj+zu/yUpqSAlB60hEAFEEWaguWac4Bnuj01SgBoOiQ2Z5twOG
pmReOybu9wE2g48iXx3J5btv+qZF1HIIGfgXC1D0E1SS+iuihtCB7j/R6zGOcHej
xofTo8FKah+GgSyhG/TbJbJljg7DmMKmjQinrHnkxAimnoasCK89DiyBxRv9eTOc
TVxPuAGFbpLYvu7h3tPGkGk7+NXWgJV3L2Bbll8D15puh7K9jks6TrUA9oark25E
oGWvUrpTAY54HIcUu25iL2vdE4ebQ7jCmjUn3qU6FrjK1XTUzSs18gngLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcqt1qFwZQ1lAzhsvEd3uJAHXfVMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc34M6Vu
sp6Bh9iAq5gd+TmJ7VFpcRyzpQt3KSAnjdBxrH7qxRU0OvlrQLW7VIOyiMEbNkk3
/aOEIwZR69awE+laTi7lTAnzK9q1VBOlSU7hISKc/fS+8onoPOJPRal+LDJg8u04
MySwIfQDSHEx4MNY4+8f4T44hpGNaNUkq24samDJ9IJAYx3quXD6LIqsrIv6vS6B
vmr9cG3NZvYKXfP+reVXEVzdvPFuBXhk8aIub1VqaRK7t1noKKociBvuTisvm4Tr
vTd50c63NYFamGJtssz9bsb3UE4enIvjvkQbM7UvugYgM81QhayX+z6MgfR+Ve1P
SuyqECOeftYGEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:40 2025 by rpki-client