Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          mfHtb376ZL/7hRcIfxjLrRFXftTIqUYIqV4jH0hM2LQ=
Subject key identifier:   B7:6B:A6:4D:E5:F3:1A:57:CA:B6:52:5C:33:3B:5D:51:F8:22:8E:E5
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       01984776BA20BE19FC6443171C6B91178F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          029F
Signing time:             Sat 26 Jul 2025 16:00:19 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:19 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:19 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: kQEwoD+FH3u5sHZ0aoIGkMsU/UkETJilzPAu/JmN/Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:ba:20:be:19:fc:64:43:17:1c:6b:91:17:8f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Jul 26 16:00:19 2025 GMT
            Not After : Jul 27 16:00:19 2025 GMT
        Subject: CN=b76ba64de5f31a57cab6525c333b5d51f8228ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:e4:b8:dd:45:0c:a9:b2:b6:cd:ea:42:fa:
                    51:a9:20:f4:29:70:bf:9d:ed:7f:07:ec:39:a0:08:
                    79:8f:c3:6b:59:28:d3:07:9b:68:07:f7:fc:70:c0:
                    b1:a2:dc:f6:23:d1:d0:8d:38:da:dc:d6:b5:79:dc:
                    f2:fc:eb:ae:03:f4:ee:1c:e5:cf:a3:11:b6:82:ae:
                    83:b2:51:e4:26:85:a1:08:74:f5:23:69:c9:f4:af:
                    e0:ef:f8:e0:42:77:d1:6f:1a:a4:23:c1:77:f0:18:
                    3a:a5:56:6f:8d:cd:c6:b7:77:8e:d1:04:49:d7:06:
                    eb:fc:d1:95:55:4d:38:56:7f:82:d6:a2:5a:0e:c5:
                    27:ca:ea:40:bc:32:41:c3:4d:50:ad:08:a3:f9:ca:
                    fb:03:52:83:25:7c:9d:df:a7:4f:9a:ee:3f:a7:7d:
                    2c:d8:ad:24:f8:a4:e1:de:63:93:4e:40:33:37:c9:
                    25:a8:41:f4:ef:d8:b8:14:9e:b5:5a:4d:e3:b7:5f:
                    4c:a6:35:65:1e:eb:90:b8:2f:51:65:ab:54:61:0b:
                    74:05:a9:0a:d6:1f:03:9a:44:89:89:01:69:0e:3a:
                    73:7e:8c:91:07:f5:50:22:10:be:72:59:f4:fc:71:
                    bb:48:09:4d:1d:ef:e7:3b:65:ea:77:39:4f:3c:bf:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6B:A6:4D:E5:F3:1A:57:CA:B6:52:5C:33:3B:5D:51:F8:22:8E:E5
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:68:98:6f:d0:73:fc:bd:f8:46:71:f7:6f:fc:99:95:71:6c:
         6e:b7:ad:20:7c:ee:f4:d0:2e:9f:a8:f2:61:de:41:2d:79:bb:
         5b:29:41:df:6b:48:bd:c3:48:e5:02:a9:02:39:3c:15:8a:26:
         05:63:8d:c2:ba:7f:73:8a:d8:02:44:d1:68:2e:01:a0:f8:5b:
         5c:d8:fe:e3:bc:d8:1e:b4:7b:bb:52:9d:20:ec:25:26:3b:35:
         b7:d4:bc:4f:16:d9:32:4b:dd:d0:91:a4:ba:20:59:a2:d1:36:
         03:cf:cb:62:bb:25:a5:8d:34:34:42:54:95:16:aa:95:4c:e0:
         d8:45:6c:8b:93:76:dd:a7:ec:1a:35:2c:b0:1d:cf:a5:e8:96:
         13:26:0e:bc:6d:a1:c8:ed:df:87:f2:30:6c:32:63:4a:39:0f:
         9d:ca:95:f1:b6:18:7a:b7:85:01:3f:b7:e7:69:24:ad:e0:d3:
         69:db:7a:dd:54:33:23:0f:e0:6b:4e:d1:89:2b:54:fd:ac:12:
         4e:63:86:5c:46:ba:a1:13:c4:7b:02:b6:42:e0:f6:f6:d3:a4:
         d6:6b:b5:d6:d0:b8:3f:9f:2a:54:95:8d:9b:38:18:6d:db:83:
         2e:62:14:e2:48:a9:74:42:65:ec:1c:af:8a:6a:bc:56:c5:01:
         f4:a9:27:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdrogvhn8ZEMXHGuRF49vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMWI2YWRjOTk0OTdmZDFiMzBhMGE0ODJlZGM0MDJiMGM0
ZjBjZjgwHhcNMjUwNzI2MTYwMDE5WhcNMjUwNzI3MTYwMDE5WjAzMTEwLwYDVQQD
EyhiNzZiYTY0ZGU1ZjMxYTU3Y2FiNjUyNWMzMzNiNWQ1MWY4MjI4ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqrkuN1FDKmyts3qQvpRqSD0KXC/
ne1/B+w5oAh5j8NrWSjTB5toB/f8cMCxotz2I9HQjTja3Na1edzy/OuuA/TuHOXP
oxG2gq6DslHkJoWhCHT1I2nJ9K/g7/jgQnfRbxqkI8F38Bg6pVZvjc3Gt3eO0QRJ
1wbr/NGVVU04Vn+C1qJaDsUnyupAvDJBw01QrQij+cr7A1KDJXyd36dPmu4/p30s
2K0k+KTh3mOTTkAzN8klqEH079i4FJ61Wk3jt19MpjVlHuuQuC9RZatUYQt0BakK
1h8DmkSJiQFpDjpzfoyRB/VQIhC+cln0/HG7SAlNHe/nO2XqdzlPPL809QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdrpk3l8xpXyrZSXDM7XVH4Io7lMB8GA1UdIwQY
MBaAFO0batyZSX/RswoKSC7cQCsMTwz4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgt
MmM5NmZiODU1NTdhLzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy80NjkyYzMtYTkwZC00MWI4LWFhZTgtMmM5NmZiODU1NTdh
LzEvN1J0cTNKbEpmOUd6Q2dwSUx0eEFLd3hQRFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2iYb9Bz
/L34RnH3b/yZlXFsbretIHzu9NAun6jyYd5BLXm7WylB32tIvcNI5QKpAjk8FYom
BWONwrp/c4rYAkTRaC4BoPhbXNj+47zYHrR7u1KdIOwlJjs1t9S8TxbZMkvd0JGk
uiBZotE2A8/LYrslpY00NEJUlRaqlUzg2EVsi5N23afsGjUssB3PpeiWEyYOvG2h
yO3fh/IwbDJjSjkPncqV8bYYereFAT+352kkreDTadt63VQzIw/ga07RiStU/awS
TmOGXEa6oRPEewK2QuD29tOk1mu11tC4P58qVJWNmzgYbduDLmIU4kipdEJl7Byv
imq8VsUB9KknBQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:53 2025 by rpki-client