Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          q5XmOiKaKzm/KaGkRmaZVDXrvwORXs9mI698iqKmFjM=
Subject key identifier:   B3:7A:71:89:0D:CA:E7:28:89:0F:48:CE:06:A7:8D:60:26:BA:A7:DC
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       019894116EE755257C6AA1FC9CB0C19756C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 13:00:26 +0000
Manifest this update:     Sun 10 Aug 2025 13:00:26 +0000
Manifest next update:     Mon 11 Aug 2025 13:00:26 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: ik/iMf22eqlr6JGbhy0WXdhyOUcjdbKIfgaXxPVZzoA=)
                          2: G3AgkSKzlQVVbdRD6eEypeJ5E5M.roa (hash: 31Wbft135lAj6RvQzASMjBguHP4eX2M1a4vm+r9VPa8=)
                          3: GFf5ZtXrNwa7evWAyQ0ljWbp-B8.roa (hash: 6ayhfX2zhSul3x6Ln+wEAXzm9NXeb8fXoOolYzFQygs=)
                          4: hztSFe2fWRlmTU4tssnBu-y0WeI.roa (hash: k2WLaKga1DftX/wOd3XsZqhZBsK4rGShhnxmdanGvCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:6e:e7:55:25:7c:6a:a1:fc:9c:b0:c1:97:56:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Aug 10 13:00:26 2025 GMT
            Not After : Aug 11 13:00:26 2025 GMT
        Subject: CN=b37a71890dcae728890f48ce06a78d6026baa7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:4b:b1:44:83:b5:c4:38:73:18:05:08:63:
                    95:0b:45:c0:80:87:3a:c3:3a:af:28:0a:78:a3:7b:
                    b8:3e:61:ed:27:00:c9:e2:01:9c:a4:ed:7c:e3:3d:
                    62:2b:f5:56:57:0a:9a:5c:67:e0:b5:54:c6:c8:be:
                    77:22:4e:c4:f3:56:2c:bb:1a:22:d0:3f:ea:36:79:
                    c3:b1:4c:64:15:c8:08:28:e7:a9:b3:04:07:ad:a7:
                    f9:c2:66:5f:12:7e:80:ba:1b:01:96:4f:61:55:6a:
                    e7:ca:fe:6e:40:68:fa:6a:50:37:79:01:80:63:34:
                    a2:b0:8d:54:29:22:4d:f6:af:d6:30:2e:24:65:a2:
                    4c:c2:c3:0c:23:9d:cc:8c:1d:70:68:3b:12:42:db:
                    21:ea:93:a6:79:b7:81:b3:b8:e6:d0:75:24:e6:95:
                    6b:c2:71:bc:71:e2:cf:20:c8:f9:65:9a:fd:ce:d3:
                    9c:e0:d0:1b:6c:10:f5:c8:b9:a2:f8:16:02:2b:ed:
                    c2:c9:a9:47:4b:d9:a4:67:3d:df:7d:a0:da:6b:50:
                    bf:23:f9:cc:85:be:e1:e0:bb:60:c1:c9:26:af:35:
                    b1:79:6f:ec:5d:0c:d3:6c:69:1e:6d:94:6d:ee:27:
                    16:0d:77:92:3c:3d:08:78:db:2a:e2:09:18:20:ed:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7A:71:89:0D:CA:E7:28:89:0F:48:CE:06:A7:8D:60:26:BA:A7:DC
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6a:8b:e3:66:d7:ee:51:92:d0:7a:74:28:d3:f5:94:f5:fd:
         c3:c2:f5:51:5a:68:c6:f5:8b:f8:90:19:5b:43:46:d6:3d:ef:
         17:06:6f:e9:2b:74:4e:13:32:51:08:dd:70:ab:61:32:a7:a8:
         d8:92:30:21:b4:65:0d:66:e3:7c:a4:ce:b6:55:5e:4e:78:dd:
         a4:53:9e:4f:fa:d1:38:79:8b:a8:62:02:ad:36:85:55:a5:b0:
         ee:6c:3a:b0:1a:aa:a3:a5:36:2a:65:0d:ad:43:41:ee:dc:7d:
         ad:a1:76:66:61:d4:b4:63:42:23:10:00:4d:99:93:9e:cb:07:
         a0:81:8b:c5:ed:c2:23:9a:ca:82:db:0c:dc:0b:b3:45:f0:34:
         a4:9f:f4:2f:57:df:5b:30:cd:6d:a1:c9:b6:ba:0a:76:a3:a7:
         4e:f5:0b:48:4b:6a:24:a1:bc:ce:8c:cf:15:96:8f:64:48:79:
         86:56:c9:58:a6:ca:9d:91:c9:68:20:54:f5:3c:64:83:b0:84:
         e3:72:dd:3a:67:91:da:dc:78:d0:9b:8e:5a:da:52:c8:b3:79:
         21:6e:af:c0:54:e9:72:e8:82:bb:82:75:23:7f:d0:dd:2a:94:
         b6:30:d7:a8:0c:08:40:e8:58:e3:f2:48:2b:94:dc:07:57:15:
         9f:d7:ff:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUEW7nVSV8aqH8nLDBl1bEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh
ODJlZDUwHhcNMjUwODEwMTMwMDI2WhcNMjUwODExMTMwMDI2WjAzMTEwLwYDVQQD
EyhiMzdhNzE4OTBkY2FlNzI4ODkwZjQ4Y2UwNmE3OGQ2MDI2YmFhN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqdLsUSDtcQ4cxgFCGOVC0XAgIc6
wzqvKAp4o3u4PmHtJwDJ4gGcpO184z1iK/VWVwqaXGfgtVTGyL53Ik7E81Ysuxoi
0D/qNnnDsUxkFcgIKOepswQHraf5wmZfEn6AuhsBlk9hVWrnyv5uQGj6alA3eQGA
YzSisI1UKSJN9q/WMC4kZaJMwsMMI53MjB1waDsSQtsh6pOmebeBs7jm0HUk5pVr
wnG8ceLPIMj5ZZr9ztOc4NAbbBD1yLmi+BYCK+3CyalHS9mkZz3ffaDaa1C/I/nM
hb7h4LtgwckmrzWxeW/sXQzTbGkebZRt7icWDXeSPD0IeNsq4gkYIO1hdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN6cYkNyucoiQ9IzganjWAmuqfcMB8GA1UdIwQY
MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt
NWEzN2FmNDM5MDRjLzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj
LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWqL42bX
7lGS0Hp0KNP1lPX9w8L1UVpoxvWL+JAZW0NG1j3vFwZv6St0ThMyUQjdcKthMqeo
2JIwIbRlDWbjfKTOtlVeTnjdpFOeT/rROHmLqGICrTaFVaWw7mw6sBqqo6U2KmUN
rUNB7tx9raF2ZmHUtGNCIxAATZmTnssHoIGLxe3CI5rKgtsM3AuzRfA0pJ/0L1ff
WzDNbaHJtroKdqOnTvULSEtqJKG8zozPFZaPZEh5hlbJWKbKnZHJaCBU9Txkg7CE
43LdOmeR2tx40JuOWtpSyLN5IW6vwFTpcuiCu4J1I3/Q3SqUtjDXqAwIQOhY4/JI
K5TcB1cVn9f/NA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:23 2025 by rpki-client