Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File:                     xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier:          InPvL1+Wo6eHCL5Iq9WqzfzcZ8ZaDpzmY2Dtwk0vnVw=
Subject key identifier:   FE:8D:52:BB:93:2B:54:08:EB:6C:E6:D5:28:11:45:E2:07:D6:45:A1
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer:       /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial:       019848F7AD2662A85F3ECDCAE2B52F2CD9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number:          0C0B
Signing time:             Sat 26 Jul 2025 23:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:47 +0000
Files and hashes:         1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
                          2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: vHGZUBveVroNLIOJfy5BhCy0wdxa3b4TkixhqaU3UiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:ad:26:62:a8:5f:3e:cd:ca:e2:b5:2f:2c:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
        Validity
            Not Before: Jul 26 23:00:47 2025 GMT
            Not After : Jul 27 23:00:47 2025 GMT
        Subject: CN=fe8d52bb932b5408eb6ce6d5281145e207d645a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e8:fa:a8:98:72:2d:d4:c3:54:fa:3d:ef:d2:
                    aa:ca:54:14:76:09:df:c3:24:7d:66:96:bc:1d:83:
                    f6:fb:f9:f0:b5:61:a4:ce:50:3d:94:c4:28:70:8c:
                    d7:91:f6:5c:a4:a3:1e:eb:d3:86:05:a8:cc:d5:ea:
                    a4:12:d4:75:44:78:d7:66:2d:85:83:cf:24:53:ea:
                    f7:af:a3:f5:66:14:bc:8c:c2:c9:a0:4a:3b:5f:13:
                    5f:eb:13:d2:0d:46:00:4c:a9:2e:b2:fc:09:4b:ab:
                    50:84:56:35:94:28:94:e3:4e:e3:f8:a1:f1:00:f7:
                    d1:18:20:4b:99:8a:f0:94:d7:8e:ee:e2:31:a6:a6:
                    53:e8:4a:74:39:35:74:43:64:f3:c3:b6:5f:df:b8:
                    90:55:be:f3:3a:10:3a:c6:36:80:f2:b2:d6:62:01:
                    f3:ac:b2:48:23:ec:c7:a2:ad:9b:d9:b8:8c:ca:d7:
                    a4:71:83:ce:67:ac:18:3e:b6:8b:c7:c2:4b:4e:1c:
                    81:33:b6:01:40:0d:27:45:0b:f1:c4:bb:bd:d5:6f:
                    d6:48:63:b2:df:30:e7:50:bf:0c:61:a2:20:9e:57:
                    95:b1:90:bd:8c:fe:ea:a6:2a:3b:f9:ff:53:03:11:
                    7a:97:e1:14:a5:1a:6f:9d:0a:df:17:4c:b1:20:52:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:52:BB:93:2B:54:08:EB:6C:E6:D5:28:11:45:E2:07:D6:45:A1
            X509v3 Authority Key Identifier:
                keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:92:10:3b:6e:82:80:e8:42:e6:44:92:9b:f8:53:20:42:98:
         76:8d:8f:b3:5d:96:a2:c1:14:62:c4:b8:fd:b0:3a:44:d8:01:
         d5:98:58:42:48:b5:c2:c1:ed:ce:48:41:9c:bf:6c:ff:fb:a4:
         fe:81:3e:b1:ff:04:b1:6a:a5:cf:e4:de:af:6f:9a:52:44:40:
         9b:8f:8d:95:74:e6:b6:28:69:7f:48:be:23:f5:55:38:75:e7:
         1e:49:71:87:0b:99:cf:24:f0:71:db:38:8f:a0:6b:0e:ea:83:
         61:45:9a:57:2e:59:9b:10:a0:70:ad:cb:11:cf:b1:79:e4:86:
         4f:00:5d:fd:fa:3b:f1:85:e6:dc:5d:5f:e2:8d:87:f8:a7:7f:
         17:b0:9c:a8:03:cd:fa:79:90:a3:11:f5:fa:2e:9d:c4:43:18:
         34:5f:11:e2:08:f9:dc:e3:cf:c8:03:4d:2c:e5:18:9d:cf:a4:
         64:aa:10:a4:e2:0a:79:66:09:7b:82:5a:a7:fe:d7:09:53:4d:
         ea:c7:dc:a5:75:77:ad:fa:40:9d:f5:25:2c:6d:ea:85:c9:96:
         7e:b3:d0:2f:23:e3:b8:dc:39:31:90:83:9d:8b:87:8b:aa:14:
         5b:a6:47:68:d9:53:15:6d:1f:20:9d:c0:a1:1d:7a:02:cb:8c:
         55:ae:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:08:28 2025 by rpki-client