Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File:                     X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier:          Yc+RBV9SgtY4ERu6HgtjUKaKTTniH8Xk0oTlaotxgQs=
Subject key identifier:   36:62:AA:D4:8F:29:63:29:C9:B7:21:7B:73:43:76:EF:BB:C2:2A:23
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer:       /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial:       01984A4143893BA9B540453BE6F54AA93BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number:          0D29
Signing time:             Sun 27 Jul 2025 05:00:47 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:47 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:47 +0000
Files and hashes:         1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
                          2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: NvPj19K+6uSUYxTDoSwqqeGPx7hgk+Bmq2rJ9DlqoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:43:89:3b:a9:b5:40:45:3b:e6:f5:4a:a9:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
        Validity
            Not Before: Jul 27 05:00:47 2025 GMT
            Not After : Jul 28 05:00:47 2025 GMT
        Subject: CN=3662aad48f296329c9b7217b734376efbbc22a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:3f:09:00:0e:30:05:60:df:e0:e9:a5:8d:
                    71:5e:42:6e:bb:3d:bf:db:26:ea:59:50:3e:f8:54:
                    9a:13:9c:75:04:83:99:a0:bb:4b:89:d6:9d:73:c4:
                    74:1d:da:80:1c:fc:e0:d1:b5:e6:35:6f:39:a8:1c:
                    a0:69:38:2f:bb:24:c1:27:1b:03:af:2d:e9:bf:70:
                    a0:04:28:73:e9:31:2f:30:46:36:9d:30:15:bf:43:
                    d7:4a:d1:5b:f6:83:d6:e9:41:85:99:09:6b:e5:8a:
                    aa:be:1d:bf:68:4c:07:f4:b2:8d:40:66:28:2c:ea:
                    ba:9b:cc:d6:9c:6e:d9:9e:92:b4:37:16:b0:6c:1c:
                    0b:9f:9b:05:4a:07:e4:ee:b6:5a:bb:17:63:a2:49:
                    5b:57:ff:53:38:9d:60:00:9b:3a:0e:40:3e:6d:0a:
                    28:62:30:67:6c:f0:44:78:53:2b:5b:ee:33:7d:3b:
                    1a:1d:f6:ab:18:72:e9:2f:b3:d2:8a:41:e8:e1:88:
                    99:66:f5:1b:c1:f0:26:0a:1c:0a:f8:b7:f9:d9:95:
                    d9:45:02:54:67:47:6c:5f:03:ae:d1:bc:ce:0a:3b:
                    d3:e0:4f:4c:ed:67:7a:da:de:f2:c7:27:bd:a2:b1:
                    c1:ba:97:0f:08:dc:0a:c4:10:84:24:a4:b1:2e:ef:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:62:AA:D4:8F:29:63:29:C9:B7:21:7B:73:43:76:EF:BB:C2:2A:23
            X509v3 Authority Key Identifier:
                keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:59:dc:ca:15:7a:25:94:0d:4c:a1:4b:b5:35:4b:00:86:fa:
         c4:d8:09:9c:bc:6a:29:a1:7a:41:bc:c9:db:ca:cb:eb:04:9f:
         11:e2:00:b8:39:41:07:66:73:f7:a5:f7:8e:08:24:f2:de:0d:
         1a:d0:42:7a:81:7d:d2:0b:a1:2e:c4:68:98:eb:b9:54:99:96:
         f6:5c:1b:1a:bd:42:61:1b:69:41:9f:61:e2:e9:77:6b:13:f9:
         37:21:e6:0d:cf:4b:4f:eb:ff:13:20:7d:3d:74:d9:31:d8:13:
         d1:8f:a6:b0:a7:f5:82:a1:b6:d0:e9:2d:97:74:aa:53:30:74:
         66:90:de:7c:9c:d6:92:54:b4:c1:32:23:81:8e:0b:ee:ee:1e:
         54:e7:69:6f:b4:23:28:e8:67:7b:77:b8:55:36:5d:0a:6d:26:
         e9:2d:b1:68:08:f4:de:db:75:80:00:5d:dd:6b:bf:3d:cd:70:
         49:98:4b:c4:fa:1e:b7:51:58:70:61:2d:ee:2f:54:97:5f:0f:
         7b:2b:36:6e:65:85:fc:5f:54:ef:15:5c:df:75:8e:90:b6:3b:
         ad:ce:f5:58:8b:53:34:c2:66:f7:c9:e1:bf:7a:9c:1b:5b:3c:
         18:3e:6e:9b:6b:85:6b:99:d8:c0:b8:39:c4:fc:aa:ae:c4:e9:
         64:98:94:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQUOJO6m1QEU75vVKqTvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDViMTM0YzA5MTQxMGUzMTQyM2VhYzJjY2FkMGFlZGI4
YTZlYzUwHhcNMjUwNzI3MDUwMDQ3WhcNMjUwNzI4MDUwMDQ3WjAzMTEwLwYDVQQD
EygzNjYyYWFkNDhmMjk2MzI5YzliNzIxN2I3MzQzNzZlZmJiYzIyYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnc/CQAOMAVg3+DppY1xXkJuuz2/
2ybqWVA++FSaE5x1BIOZoLtLidadc8R0HdqAHPzg0bXmNW85qBygaTgvuyTBJxsD
ry3pv3CgBChz6TEvMEY2nTAVv0PXStFb9oPW6UGFmQlr5Yqqvh2/aEwH9LKNQGYo
LOq6m8zWnG7ZnpK0NxawbBwLn5sFSgfk7rZauxdjoklbV/9TOJ1gAJs6DkA+bQoo
YjBnbPBEeFMrW+4zfTsaHfarGHLpL7PSikHo4YiZZvUbwfAmChwK+Lf52ZXZRQJU
Z0dsXwOu0bzOCjvT4E9M7Wd62t7yxye9orHBupcPCNwKxBCEJKSxLu+EFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZiqtSPKWMpybche3NDdu+7wiojMB8GA1UdIwQY
MBaAFF9FsTTAkUEOMUI+rCzK0K7bim7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQt
YTdiZDgzYThmNTZjLzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQtYTdiZDgzYThmNTZj
LzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVncyhV6
JZQNTKFLtTVLAIb6xNgJnLxqKaF6QbzJ28rL6wSfEeIAuDlBB2Zz96X3jggk8t4N
GtBCeoF90guhLsRomOu5VJmW9lwbGr1CYRtpQZ9h4ul3axP5NyHmDc9LT+v/EyB9
PXTZMdgT0Y+msKf1gqG20Oktl3SqUzB0ZpDefJzWklS0wTIjgY4L7u4eVOdpb7Qj
KOhne3e4VTZdCm0m6S2xaAj03tt1gABd3Wu/Pc1wSZhLxPoet1FYcGEt7i9Ul18P
eys2bmWF/F9U7xVc33WOkLY7rc71WItTNMJm98nhv3qcG1s8GD5um2uFa5nYwLg5
xPyqrsTpZJiUDA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:28 2025 by rpki-client