Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
File:                     fSW-cEBtOB5yXT4r7xL2qPPdglc.mft (raw, json)
Hash identifier:          Jwjdz3NQL6masl2B2gM6YpTyTi8g0t2RJt64o3DsN6c=
Subject key identifier:   D4:8C:53:4F:86:B4:1B:45:EB:73:E3:9E:04:CB:A3:47:93:40:2F:DB
Authority key identifier: 7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57
Certificate issuer:       /CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
Certificate serial:       019847ADD06668B4746BE314A67041AA8328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
Manifest number:          10BE
Signing time:             Sat 26 Jul 2025 17:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:30 +0000
Files and hashes:         1: 9EqEs9kwmY_afaGGWiQxlVt0aF4.roa (hash: 9tO3YJsoJl/Lblpr3bNKOp6wQ25w+0SVWvdi5BP+Als=)
                          2: fSW-cEBtOB5yXT4r7xL2qPPdglc.crl (hash: K7ePxeAibQfV/39u6PDLy/MggbDBrg8eUABb/+PCOik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:d0:66:68:b4:74:6b:e3:14:a6:70:41:aa:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d25be70406d381e725d3e2bef12f6a8f3dd8257
        Validity
            Not Before: Jul 26 17:00:30 2025 GMT
            Not After : Jul 27 17:00:30 2025 GMT
        Subject: CN=d48c534f86b41b45eb73e39e04cba34793402fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:a3:f2:7c:bb:de:99:51:17:87:cc:f0:4b:
                    eb:ad:b2:3c:1d:29:a1:22:e8:a6:5e:26:92:4c:d8:
                    14:f7:82:af:2e:d1:81:cb:12:50:ce:c8:b1:de:06:
                    71:44:0f:94:9c:6b:bd:d8:d8:0e:77:57:c7:00:9e:
                    d1:2d:a8:ee:89:69:e5:ea:08:72:61:63:9a:a9:43:
                    22:72:8d:16:40:27:30:3a:da:03:f8:2f:df:f6:24:
                    d6:f8:e3:65:79:7f:01:55:57:ed:81:48:26:7e:6b:
                    b5:e7:8b:2a:b6:98:f4:6f:3b:e4:24:5e:24:40:14:
                    34:fb:1c:39:2a:8c:05:32:53:a0:13:0d:a8:a2:b3:
                    5b:16:8f:f8:1c:62:5b:f9:e7:f7:13:69:70:6d:ed:
                    e3:5f:e4:26:0e:a5:d6:77:fc:01:04:84:ec:30:ad:
                    f1:7b:39:9e:ce:78:47:ee:c3:a5:1a:5b:72:0d:6f:
                    81:cc:a8:5f:8f:21:38:71:ac:b4:c8:9e:fd:99:7f:
                    b3:26:4d:fc:83:51:c3:68:72:dc:c7:66:a0:d5:33:
                    c5:bf:e5:63:90:1b:b3:cb:7b:03:c8:d2:cd:8d:03:
                    a3:0c:c5:fe:76:ce:95:1d:96:82:e4:17:6a:a3:ef:
                    b3:b8:a5:ac:1a:c9:76:3b:e7:1a:4d:91:88:9e:06:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8C:53:4F:86:B4:1B:45:EB:73:E3:9E:04:CB:A3:47:93:40:2F:DB
            X509v3 Authority Key Identifier:
                keyid:7D:25:BE:70:40:6D:38:1E:72:5D:3E:2B:EF:12:F6:A8:F3:DD:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSW-cEBtOB5yXT4r7xL2qPPdglc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6a301c-8532-46f0-a33e-eb65f1f46e0b/1/fSW-cEBtOB5yXT4r7xL2qPPdglc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:e3:8e:22:c5:56:a7:86:b6:c3:96:36:c6:50:5b:c4:3a:
         7e:7a:00:66:d0:d8:51:1e:83:2b:b4:53:2c:b7:82:fe:15:b0:
         e3:3c:f3:a4:06:ae:b6:29:f5:2b:e1:78:65:09:ad:73:d8:5a:
         a8:44:c9:ab:50:8e:85:44:f6:84:3a:cb:8c:e5:6c:d0:33:5c:
         a3:06:aa:91:27:13:06:76:16:38:36:32:02:5d:d5:de:18:a4:
         48:e0:a5:ed:dc:ae:cd:84:da:b5:e0:31:6e:3b:45:1d:0b:4f:
         ef:38:14:d2:a6:2a:d7:e6:7c:f5:c1:c5:88:ea:30:cc:50:4b:
         b3:71:f3:97:9c:dd:25:35:6e:b1:3b:90:12:99:95:49:93:fc:
         4f:07:62:87:4f:d5:9b:8d:8b:d2:57:59:ab:83:62:c0:1a:1c:
         cc:6a:e8:30:11:28:db:17:79:65:df:7f:96:6c:8b:e2:a8:3f:
         e1:ed:b9:38:98:30:0e:1b:b1:01:c7:9c:d8:63:e2:53:38:10:
         32:21:7e:13:fd:78:fb:af:4e:38:77:59:ed:4a:dc:6d:22:87:
         f9:50:a8:08:9a:4a:40:eb:a2:e3:47:27:15:a1:f1:a7:66:eb:
         8f:98:74:da:b3:a6:b2:af:d6:8e:de:03:a4:fd:6e:d8:82:ff:
         a7:ba:8a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrdBmaLR0a+MUpnBBqoMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMjViZTcwNDA2ZDM4MWU3MjVkM2UyYmVmMTJmNmE4ZjNk
ZDgyNTcwHhcNMjUwNzI2MTcwMDMwWhcNMjUwNzI3MTcwMDMwWjAzMTEwLwYDVQQD
EyhkNDhjNTM0Zjg2YjQxYjQ1ZWI3M2UzOWUwNGNiYTM0NzkzNDAyZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eaj8ny73plRF4fM8EvrrbI8HSmh
IuimXiaSTNgU94KvLtGByxJQzsix3gZxRA+UnGu92NgOd1fHAJ7RLajuiWnl6ghy
YWOaqUMico0WQCcwOtoD+C/f9iTW+ONleX8BVVftgUgmfmu154sqtpj0bzvkJF4k
QBQ0+xw5KowFMlOgEw2oorNbFo/4HGJb+ef3E2lwbe3jX+QmDqXWd/wBBITsMK3x
ezmeznhH7sOlGltyDW+BzKhfjyE4cay0yJ79mX+zJk38g1HDaHLcx2ag1TPFv+Vj
kBuzy3sDyNLNjQOjDMX+ds6VHZaC5Bdqo++zuKWsGsl2O+caTZGIngZWPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSMU0+GtBtF63PjngTLo0eTQC/bMB8GA1UdIwQY
MBaAFH0lvnBAbTgecl0+K+8S9qjz3YJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2Ut
ZWI2NWYxZjQ2ZTBiLzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS82YTMwMWMtODUzMi00NmYwLWEzM2UtZWI2NWYxZjQ2ZTBi
LzEvZlNXLWNFQnRPQjV5WFQ0cjd4TDJxUFBkZ2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmI3jjiLF
VqeGtsOWNsZQW8Q6fnoAZtDYUR6DK7RTLLeC/hWw4zzzpAautin1K+F4ZQmtc9ha
qETJq1COhUT2hDrLjOVs0DNcowaqkScTBnYWODYyAl3V3hikSOCl7dyuzYTateAx
bjtFHQtP7zgU0qYq1+Z89cHFiOowzFBLs3Hzl5zdJTVusTuQEpmVSZP8Twdih0/V
m42L0ldZq4NiwBoczGroMBEo2xd5Zd9/lmyL4qg/4e25OJgwDhuxAcec2GPiUzgQ
MiF+E/14+69OOHdZ7UrcbSKH+VCoCJpKQOui40cnFaHxp2brj5h02rOmsq/Wjt4D
pP1u2IL/p7qKWQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:53:40 2025 by rpki-client