Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          hQROmB3VcPChbUBTopMlMvzapsTLpbPOOCVjfzedoGQ=
Subject key identifier:   B7:27:3E:CE:58:35:24:D2:E8:68:3A:81:67:76:23:9C:C8:E4:40:30
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       01984B53E4BB1A96797C7E2525DE7DF418B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 10:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:45 +0000
Files and hashes:         1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
                          2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: Ou1vpXxDq00R6xxfEH8MSdL2zj6vhJ8oVhLWIvbw33o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:e4:bb:1a:96:79:7c:7e:25:25:de:7d:f4:18:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: Jul 27 10:00:45 2025 GMT
            Not After : Jul 28 10:00:45 2025 GMT
        Subject: CN=b7273ece583524d2e8683a816776239cc8e44030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:ca:4e:e8:e6:dc:86:06:38:a9:36:95:08:
                    84:f1:31:9f:1b:e5:31:34:5b:aa:0f:45:6f:53:ee:
                    fc:89:5f:d1:37:91:f2:1e:31:59:74:96:6b:a4:3a:
                    d8:8a:79:5d:1f:4e:c2:0e:50:f0:00:f2:c9:88:f3:
                    b3:8c:6d:be:0d:8d:81:d0:12:e7:32:e0:6f:bd:5e:
                    fd:a7:30:88:43:96:af:65:ae:ee:a6:6c:62:ca:7c:
                    0d:90:58:a1:2f:48:4e:e7:49:60:af:e0:7d:68:47:
                    d1:eb:08:30:30:95:00:a0:c8:64:6e:da:72:a0:74:
                    3f:fe:87:ad:c0:ae:b8:a5:24:98:5e:04:12:9a:fb:
                    06:b4:35:2f:8d:83:d8:ee:b1:5c:00:ff:10:f2:fe:
                    f3:f1:c9:20:9c:8b:62:a5:8b:6f:f5:a9:98:90:c3:
                    80:11:b0:8a:04:61:e9:3f:60:e5:f8:28:9f:8f:8d:
                    79:d6:7c:b5:a6:56:a2:f8:2f:d8:b2:35:4c:3a:8e:
                    fb:e0:84:1e:b7:ba:f9:4f:83:61:15:77:70:3f:ad:
                    8c:cc:24:0c:63:7f:2c:47:df:0e:26:52:43:5b:c1:
                    84:4a:5a:4b:ee:9d:c0:40:e3:91:08:f8:16:c7:11:
                    cd:37:a6:bd:a5:7a:97:be:d2:53:3a:74:b4:b8:63:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:27:3E:CE:58:35:24:D2:E8:68:3A:81:67:76:23:9C:C8:E4:40:30
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f9:dc:93:f4:6f:46:c6:c5:ad:bd:9e:97:a7:1a:48:df:5e:
         79:f8:cc:81:94:89:40:9e:31:bb:19:5e:c9:7b:29:ce:02:3c:
         69:6e:da:f0:d1:77:c3:0d:30:3b:01:13:51:42:1f:b5:c8:ab:
         c9:79:d3:14:b5:4a:dc:23:8d:f4:90:26:af:98:18:08:dd:f7:
         7a:71:7e:0a:44:54:72:c4:bd:b7:6e:e3:12:93:29:f9:5a:58:
         1a:f2:08:e6:08:0b:07:7e:05:bc:1b:9b:38:94:3d:55:13:07:
         f2:1b:62:c7:ef:21:a5:6e:cd:6d:15:1e:e3:97:d5:63:09:83:
         e8:4f:f6:77:a1:a4:8d:ef:d7:8c:fb:79:c9:b4:36:ff:93:47:
         1a:44:b5:e9:2f:d2:5f:07:c8:81:07:81:97:77:88:0f:cf:ce:
         83:d7:a2:0f:f6:be:7f:83:5a:61:2b:74:cd:e1:2d:78:46:11:
         9d:05:cb:e7:32:5f:e6:8e:6c:32:70:e9:98:05:4b:fc:13:6c:
         08:48:d4:4d:fb:70:b7:e4:d9:25:86:b1:c7:73:5f:ff:49:22:
         a9:26:b3:41:2f:6c:bf:1d:6b:82:42:1c:cc:d0:2f:06:fa:bc:
         16:08:a9:f9:73:8f:2a:7b:b6:d3:fc:f5:4c:db:0c:0f:7d:e1:
         27:46:99:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU+S7GpZ5fH4lJd599BiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjUwNzI3MTAwMDQ1WhcNMjUwNzI4MTAwMDQ1WjAzMTEwLwYDVQQD
EyhiNzI3M2VjZTU4MzUyNGQyZTg2ODNhODE2Nzc2MjM5Y2M4ZTQ0MDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonLKTujm3IYGOKk2lQiE8TGfG+Ux
NFuqD0VvU+78iV/RN5HyHjFZdJZrpDrYinldH07CDlDwAPLJiPOzjG2+DY2B0BLn
MuBvvV79pzCIQ5avZa7upmxiynwNkFihL0hO50lgr+B9aEfR6wgwMJUAoMhkbtpy
oHQ//oetwK64pSSYXgQSmvsGtDUvjYPY7rFcAP8Q8v7z8ckgnItipYtv9amYkMOA
EbCKBGHpP2Dl+Cifj4151ny1plai+C/YsjVMOo774IQet7r5T4NhFXdwP62MzCQM
Y38sR98OJlJDW8GESlpL7p3AQOORCPgWxxHNN6a9pXqXvtJTOnS0uGM0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcnPs5YNSTS6Gg6gWd2I5zI5EAwMB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPnck/Rv
RsbFrb2el6caSN9eefjMgZSJQJ4xuxleyXspzgI8aW7a8NF3ww0wOwETUUIftcir
yXnTFLVK3CON9JAmr5gYCN33enF+CkRUcsS9t27jEpMp+VpYGvII5ggLB34FvBub
OJQ9VRMH8htix+8hpW7NbRUe45fVYwmD6E/2d6Gkje/XjPt5ybQ2/5NHGkS16S/S
XwfIgQeBl3eID8/Og9eiD/a+f4NaYSt0zeEteEYRnQXL5zJf5o5sMnDpmAVL/BNs
CEjUTftwt+TZJYaxx3Nf/0kiqSazQS9svx1rgkIczNAvBvq8Fgip+XOPKnu20/z1
TNsMD33hJ0aZ2A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:53:50 2025 by rpki-client