Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          8PrOKF6OSCV2WSOrJHPb01x7Q5zI+KEDWXaq91aZCFk=
Subject key identifier:   B4:86:29:76:1A:40:9E:92:03:D8:F6:CC:3C:F8:02:66:1B:9E:17:AF
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       01982823263EFC44A332E708C4E393B0A42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0774
Signing time:             Sun 20 Jul 2025 14:00:48 +0000
Manifest this update:     Sun 20 Jul 2025 14:00:48 +0000
Manifest next update:     Mon 21 Jul 2025 14:00:48 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: DOXcEhhyxEo1SLoQIDglZWL06V1w7evSKouwzs2CtF0=)
                          2: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
                          3: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
                          4: UVQCO4c7gPlnbnFsrZBocsgkaAA.roa (hash: V8RmBYoHKxTziStv8rsl1Lst5+68+msyqJhDWqugaio=)
                          5: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:23:26:3e:fc:44:a3:32:e7:08:c4:e3:93:b0:a4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Jul 20 14:00:48 2025 GMT
            Not After : Jul 21 14:00:48 2025 GMT
        Subject: CN=b48629761a409e9203d8f6cc3cf802661b9e17af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e2:8f:f4:cf:af:dc:9d:ee:7f:25:f3:17:ea:
                    62:96:5e:8f:73:a2:72:4d:a0:f0:33:e1:44:76:c7:
                    a2:86:4a:d1:25:59:25:03:31:16:6a:c6:51:83:dc:
                    8c:9b:c9:1d:35:86:5b:b9:d1:81:80:41:99:6f:eb:
                    1a:11:bc:25:6d:0a:b3:b0:9f:cd:15:10:4e:8c:26:
                    16:8b:27:f8:58:28:92:9f:fe:c4:32:16:b6:7e:92:
                    bb:49:f3:79:ea:34:4b:ae:6a:33:2a:74:03:d4:36:
                    d2:e4:66:98:5b:40:ae:0c:9e:0e:aa:b3:eb:e6:46:
                    4d:41:83:ea:f7:f5:98:b8:a2:9a:a7:f7:44:df:68:
                    97:4a:f1:88:68:9a:ea:0b:51:37:6a:28:bc:66:7d:
                    07:74:8a:59:1b:08:0d:b3:1a:f2:d3:d2:5a:7b:b6:
                    97:74:cb:5a:0e:6e:81:17:45:97:a4:cf:72:63:b9:
                    3a:20:00:3d:ab:bc:b3:ad:7b:5a:ad:7e:70:66:3f:
                    a4:89:f2:e7:2d:d3:aa:8a:42:3d:a2:7d:e2:85:bc:
                    ab:5c:ea:c9:a0:fe:b6:b9:a1:23:af:66:7f:a7:fa:
                    41:76:d8:43:96:75:b1:d9:06:6e:36:c8:53:4f:60:
                    5c:3f:8b:45:22:e5:d8:d3:00:8a:eb:f5:fd:71:97:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:86:29:76:1A:40:9E:92:03:D8:F6:CC:3C:F8:02:66:1B:9E:17:AF
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:6f:4f:31:d2:38:b3:2e:7f:18:65:d4:37:47:82:47:c2:
         8b:f4:37:ae:77:46:34:67:d4:eb:72:e8:24:39:aa:87:ce:77:
         4f:01:60:57:82:0a:e4:94:65:00:bd:a4:93:85:e0:1d:eb:6b:
         23:11:93:89:20:31:ef:58:47:a2:0c:cd:68:21:c2:63:98:37:
         6c:cd:6c:62:9f:1a:af:a1:50:5a:b5:da:41:d1:3a:99:3e:db:
         f2:5c:5c:9a:d6:44:21:a9:29:af:57:2f:75:41:f8:c5:0b:cb:
         1b:1a:9e:e6:07:97:33:ab:53:96:c2:d8:85:8d:94:56:c4:63:
         ff:82:24:70:cd:54:2e:0c:7a:c1:c5:cb:33:ff:49:01:32:29:
         83:14:09:bc:ec:9c:1f:fb:ac:ab:92:d9:21:fc:ae:92:9f:cf:
         f3:9f:ec:ed:af:50:a3:5b:26:25:29:d5:e1:ab:75:67:6b:24:
         b7:d3:46:1e:79:c5:b1:5d:24:55:63:8f:90:11:fc:3a:13:a6:
         e2:24:77:75:29:93:ba:7e:85:f0:7a:1f:ae:6d:56:c9:b7:86:
         29:29:d0:e4:93:83:9f:d2:0e:60:29:d4:97:64:3c:b8:b3:ed:
         84:5b:fc:e1:c2:cb:08:47:a1:93:6d:26:50:d0:4d:7e:a8:09:
         5c:f6:ac:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgoIyY+/ESjMucIxOOTsKQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjUwNzIwMTQwMDQ4WhcNMjUwNzIxMTQwMDQ4WjAzMTEwLwYDVQQD
EyhiNDg2Mjk3NjFhNDA5ZTkyMDNkOGY2Y2MzY2Y4MDI2NjFiOWUxN2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uKP9M+v3J3ufyXzF+pill6Pc6Jy
TaDwM+FEdseihkrRJVklAzEWasZRg9yMm8kdNYZbudGBgEGZb+saEbwlbQqzsJ/N
FRBOjCYWiyf4WCiSn/7EMha2fpK7SfN56jRLrmozKnQD1DbS5GaYW0CuDJ4OqrPr
5kZNQYPq9/WYuKKap/dE32iXSvGIaJrqC1E3aii8Zn0HdIpZGwgNsxry09Jae7aX
dMtaDm6BF0WXpM9yY7k6IAA9q7yzrXtarX5wZj+kifLnLdOqikI9on3ihbyrXOrJ
oP62uaEjr2Z/p/pBdthDlnWx2QZuNshTT2BcP4tFIuXY0wCK6/X9cZcKqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSGKXYaQJ6SA9j2zDz4AmYbnhevMB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAql5vTzHS
OLMufxhl1DdHgkfCi/Q3rndGNGfU63LoJDmqh853TwFgV4IK5JRlAL2kk4XgHetr
IxGTiSAx71hHogzNaCHCY5g3bM1sYp8ar6FQWrXaQdE6mT7b8lxcmtZEIakpr1cv
dUH4xQvLGxqe5geXM6tTlsLYhY2UVsRj/4IkcM1ULgx6wcXLM/9JATIpgxQJvOyc
H/usq5LZIfyukp/P85/s7a9Qo1smJSnV4at1Z2skt9NGHnnFsV0kVWOPkBH8OhOm
4iR3dSmTun6F8Hofrm1WybeGKSnQ5JODn9IOYCnUl2Q8uLPthFv84cLLCEehk20m
UNBNfqgJXPaswA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:23:36 2025 by rpki-client