Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File:                     X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier:          mV5S+C1jZlNzpfuktBLIyVAQjg3JvKLDvtVtH6CMolc=
Subject key identifier:   0A:D2:81:AF:AC:78:FE:55:E6:82:4D:8C:E2:E9:83:FB:43:28:C2:E2
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer:       /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial:       0198469B00EE659BBC6EBE6DF614DB17087E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number:          0B0F
Signing time:             Sat 26 Jul 2025 12:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:20 +0000
Files and hashes:         1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: mr8yeh9fKijA4ZWl59HbJMkGJpuKS2NTOBfukT2AeSQ=)
                          2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:00:ee:65:9b:bc:6e:be:6d:f6:14:db:17:08:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
        Validity
            Not Before: Jul 26 12:00:20 2025 GMT
            Not After : Jul 27 12:00:20 2025 GMT
        Subject: CN=0ad281afac78fe55e6824d8ce2e983fb4328c2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:f9:ba:17:f0:f9:62:07:1e:9a:a9:cf:30:
                    74:c2:4b:32:8a:f9:28:45:a6:f0:98:bc:58:17:49:
                    89:ad:ce:b4:7c:3a:7c:2a:fc:d9:db:31:71:1d:9b:
                    10:af:92:39:b1:f8:40:91:1f:e2:e8:33:77:10:f9:
                    bb:86:50:03:ec:99:83:22:4a:91:e8:b4:6f:81:5e:
                    9a:61:c6:34:cf:69:c2:87:21:61:38:7f:cf:6a:1b:
                    66:56:72:0a:70:5b:ab:f9:56:14:6f:80:cb:22:15:
                    13:4d:0b:1e:cb:8a:3c:e3:53:de:58:35:a2:f6:87:
                    aa:45:07:a3:bb:12:1d:62:9e:ca:8a:52:b3:5c:e4:
                    55:87:6b:c6:6c:73:dd:c2:9e:7d:2e:cb:c5:39:35:
                    08:e4:0c:a5:8f:07:4a:b4:94:89:19:eb:91:6c:c7:
                    40:91:c4:05:d4:33:32:61:00:04:68:42:47:9d:d4:
                    de:00:08:e2:2f:8c:12:fc:0d:6d:b2:59:d4:ec:d8:
                    ff:84:ef:73:60:aa:fb:db:85:c1:00:7c:61:03:a7:
                    80:7e:be:09:02:8d:ba:06:1a:be:bc:1f:31:a5:7d:
                    ed:d9:fe:02:cc:85:2f:de:af:cc:d0:be:9c:cf:c9:
                    04:90:55:b3:aa:99:96:8f:df:4a:ae:93:58:85:49:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:81:AF:AC:78:FE:55:E6:82:4D:8C:E2:E9:83:FB:43:28:C2:E2
            X509v3 Authority Key Identifier:
                keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:14:fd:07:fa:d0:47:f0:1e:19:1a:0d:45:48:42:c6:6b:
         54:e1:ad:d2:f8:50:4e:1a:82:f1:81:e9:71:ee:9d:15:ee:47:
         4a:93:51:0a:29:46:6a:25:1b:f7:2d:88:e6:91:b2:db:1b:aa:
         26:f1:b9:51:db:b9:87:46:a4:64:0f:4e:56:72:25:20:f8:c4:
         7d:95:1a:21:82:af:a9:5b:78:60:56:20:55:63:a1:df:55:2c:
         3a:cb:6f:4c:95:d5:4c:81:9a:81:6a:5e:87:08:e6:37:fe:6a:
         49:77:9e:04:12:79:17:04:af:4d:a3:ae:46:50:e8:03:d6:cc:
         a6:a6:3f:67:5b:34:72:03:e8:4a:a0:bf:7d:16:47:1c:89:68:
         48:a4:0d:a1:a6:1e:c7:0b:a3:9a:f3:ab:c0:32:b3:2b:f4:07:
         7b:6c:15:b5:ca:b9:3c:3e:46:eb:97:b6:0f:95:a4:74:bb:99:
         4e:bc:7e:4d:55:93:ed:15:a6:dc:6f:1b:4e:2d:01:84:85:88:
         87:a0:b3:94:c6:ef:79:31:8b:af:7b:68:37:8b:ad:4e:4c:86:
         c0:d5:b4:51:05:5d:e4:3f:f3:14:05:b0:b8:f3:6b:03:8b:c3:
         4e:f9:59:07:67:4c:4b:a5:e1:49:29:b8:7f:33:29:bc:97:a2:
         fe:c6:d5:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmwDuZZu8br5t9hTbFwh+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmFiMGQzOWZiNjk3OWZlNGQzZDI0ODNhMDFiZGQzYzkz
YmVjZWYwHhcNMjUwNzI2MTIwMDIwWhcNMjUwNzI3MTIwMDIwWjAzMTEwLwYDVQQD
EygwYWQyODFhZmFjNzhmZTU1ZTY4MjRkOGNlMmU5ODNmYjQzMjhjMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq35uhfw+WIHHpqpzzB0wksyivko
RabwmLxYF0mJrc60fDp8KvzZ2zFxHZsQr5I5sfhAkR/i6DN3EPm7hlAD7JmDIkqR
6LRvgV6aYcY0z2nChyFhOH/PahtmVnIKcFur+VYUb4DLIhUTTQsey4o841PeWDWi
9oeqRQejuxIdYp7KilKzXORVh2vGbHPdwp59LsvFOTUI5AyljwdKtJSJGeuRbMdA
kcQF1DMyYQAEaEJHndTeAAjiL4wS/A1tslnU7Nj/hO9zYKr724XBAHxhA6eAfr4J
Ao26Bhq+vB8xpX3t2f4CzIUv3q/M0L6cz8kEkFWzqpmWj99KrpNYhUnOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArSga+seP5V5oJNjOLpg/tDKMLiMB8GA1UdIwQY
MBaAFF+6sNOftpef5NPSSDoBvdPJO+zvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAt
MzBkZjYyNDI5ZGYwLzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYzUyNGUtMTJiOC00ZGNjLThmMTAtMzBkZjYyNDI5ZGYw
LzEvWDdxdzA1LTJsNV9rMDlKSU9nRzkwOGs3N084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcgU/Qf6
0EfwHhkaDUVIQsZrVOGt0vhQThqC8YHpce6dFe5HSpNRCilGaiUb9y2I5pGy2xuq
JvG5Udu5h0akZA9OVnIlIPjEfZUaIYKvqVt4YFYgVWOh31UsOstvTJXVTIGagWpe
hwjmN/5qSXeeBBJ5FwSvTaOuRlDoA9bMpqY/Z1s0cgPoSqC/fRZHHIloSKQNoaYe
xwujmvOrwDKzK/QHe2wVtcq5PD5G65e2D5WkdLuZTrx+TVWT7RWm3G8bTi0BhIWI
h6CzlMbveTGLr3toN4utTkyGwNW0UQVd5D/zFAWwuPNrA4vDTvlZB2dMS6XhSSm4
fzMpvJei/sbV+A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:50 2025 by rpki-client