Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          KZjs/oxKDFkYFSRlPkLvV1UMKni1UsGgk9tO/8RlywY=
Subject key identifier:   48:9B:C3:56:C4:06:C6:1A:63:33:8C:80:69:D2:AB:29:22:B3:0C:5C
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       019854FC7B2703AC1D5180DB9D14D20B6A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          1608
Signing time:             Tue 29 Jul 2025 07:01:29 +0000
Manifest this update:     Tue 29 Jul 2025 07:01:29 +0000
Manifest next update:     Wed 30 Jul 2025 07:01:29 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 42OQYWkRD1aJCzrs9a+zezo8L697z/KpahYGl/vUEaM=)
                          2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fc:7b:27:03:ac:1d:51:80:db:9d:14:d2:0b:6a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Jul 29 07:01:29 2025 GMT
            Not After : Jul 30 07:01:29 2025 GMT
        Subject: CN=489bc356c406c61a63338c8069d2ab2922b30c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:04:13:d9:f9:4d:6b:0e:75:70:be:59:a3:
                    96:c1:0b:22:dd:3f:0f:08:c1:55:36:60:b3:15:3b:
                    16:dc:3f:50:7e:7c:c0:f2:db:1c:f4:09:0c:94:74:
                    94:a2:b2:b5:e8:bb:ed:42:e7:c9:5f:23:71:37:92:
                    7e:4c:1d:81:19:8b:90:14:9a:b4:d8:e2:33:2e:bf:
                    79:a6:e2:8e:46:18:92:e0:16:d2:d1:41:ce:c4:d3:
                    ed:91:88:21:99:5f:e9:24:4d:bb:d3:32:09:ea:38:
                    ef:a0:9c:56:6b:5e:c0:6e:1c:2f:6a:a2:ad:7b:10:
                    10:16:de:f3:af:6d:3c:d7:32:31:43:df:df:8a:c2:
                    7e:17:f5:0a:96:2e:4d:67:f6:88:6b:88:01:89:24:
                    b4:d1:9f:99:30:5c:ff:c8:4e:82:02:86:6f:50:7a:
                    cd:40:98:8e:af:a7:46:fd:42:c9:23:d3:7d:a9:72:
                    9d:9e:87:c0:4f:ac:67:14:f4:87:2e:e3:67:f9:41:
                    d4:5e:39:89:90:51:16:f9:f0:a5:c1:67:76:a5:c4:
                    cf:64:f5:39:f0:37:bf:d8:3c:64:0b:c1:ba:47:44:
                    21:eb:dc:27:4b:4d:70:b7:40:5a:b2:44:40:3f:c0:
                    be:45:ae:e5:60:c9:b6:f6:8a:57:2f:ac:f6:a5:74:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:C3:56:C4:06:C6:1A:63:33:8C:80:69:D2:AB:29:22:B3:0C:5C
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:8d:22:a4:12:37:27:6a:e8:8a:f3:55:94:a8:3d:3d:6a:
         78:a5:d9:83:53:2d:d1:77:b7:d2:4f:f5:b6:43:d9:96:96:d9:
         c1:61:7a:60:6e:91:d0:a1:49:c7:61:9c:3a:55:63:0b:12:98:
         29:78:7b:25:31:b6:1d:9e:cc:d5:5a:ac:ab:bc:7c:39:b8:05:
         b8:d8:65:02:71:46:42:5b:62:a1:91:2b:8d:13:d6:3b:47:f1:
         6d:97:40:84:d0:92:21:40:0c:fc:bf:f5:e2:43:3e:34:e7:78:
         f4:b0:6f:35:18:97:11:c4:50:bc:c4:34:70:57:bd:c8:70:43:
         61:e3:a0:19:1d:c7:60:95:62:60:bf:61:4b:37:ac:8c:a7:40:
         2e:82:cd:32:96:65:b0:9e:ff:11:d3:56:ea:27:1b:31:98:8d:
         f7:e9:c0:8e:81:8b:70:61:71:c0:62:20:48:76:e3:fb:8b:4c:
         97:45:ef:27:d1:d6:7a:4e:97:24:0b:15:c8:ad:af:2b:30:e4:
         52:36:d1:ab:f6:0e:60:14:0d:ad:78:7e:f2:c0:aa:ab:8f:6b:
         23:d9:ab:b2:d1:94:26:2d:b9:29:9f:be:21:98:6d:84:11:50:
         30:9e:f2:cc:07:6d:3f:40:37:22:d6:4d:05:57:dc:4a:2a:08:
         13:3b:55:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/HsnA6wdUYDbnRTSC2pdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjUwNzI5MDcwMTI5WhcNMjUwNzMwMDcwMTI5WjAzMTEwLwYDVQQD
Eyg0ODliYzM1NmM0MDZjNjFhNjMzMzhjODA2OWQyYWIyOTIyYjMwYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiywEE9n5TWsOdXC+WaOWwQsi3T8P
CMFVNmCzFTsW3D9QfnzA8tsc9AkMlHSUorK16LvtQufJXyNxN5J+TB2BGYuQFJq0
2OIzLr95puKORhiS4BbS0UHOxNPtkYghmV/pJE270zIJ6jjvoJxWa17AbhwvaqKt
exAQFt7zr2081zIxQ9/fisJ+F/UKli5NZ/aIa4gBiSS00Z+ZMFz/yE6CAoZvUHrN
QJiOr6dG/ULJI9N9qXKdnofAT6xnFPSHLuNn+UHUXjmJkFEW+fClwWd2pcTPZPU5
8De/2DxkC8G6R0Qh69wnS01wt0BaskRAP8C+Ra7lYMm29opXL6z2pXQOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEibw1bEBsYaYzOMgGnSqykiswxcMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk2NIqQS
Nydq6IrzVZSoPT1qeKXZg1Mt0Xe30k/1tkPZlpbZwWF6YG6R0KFJx2GcOlVjCxKY
KXh7JTG2HZ7M1Vqsq7x8ObgFuNhlAnFGQltioZErjRPWO0fxbZdAhNCSIUAM/L/1
4kM+NOd49LBvNRiXEcRQvMQ0cFe9yHBDYeOgGR3HYJViYL9hSzesjKdALoLNMpZl
sJ7/EdNW6icbMZiN9+nAjoGLcGFxwGIgSHbj+4tMl0XvJ9HWek6XJAsVyK2vKzDk
UjbRq/YOYBQNrXh+8sCqq49rI9mrstGUJi25KZ++IZhthBFQMJ7yzAdtP0A3ItZN
BVfcSioIEztVeQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:43:34 2025 by rpki-client