Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
File:                     xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json)
Hash identifier:          7S9b6PdGZMh0G0x18uTjr4Vm4OyTRJ3Z0P2jo04MBVM=
Subject key identifier:   E7:A4:07:AE:C5:22:D5:14:1F:E5:26:75:46:45:56:8C:72:DF:06:4F
Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54
Certificate issuer:       /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
Certificate serial:       0197C42688F5FE11B85254C0726431654871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
Manifest number:          1314
Signing time:             Tue 01 Jul 2025 04:02:29 +0000
Manifest this update:     Tue 01 Jul 2025 04:02:29 +0000
Manifest next update:     Wed 02 Jul 2025 04:02:29 +0000
Files and hashes:         1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: bvZStNkdn0+aiOy4FoYRBw9Hd4ToN3TMb1EMzzomoO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:26:88:f5:fe:11:b8:52:54:c0:72:64:31:65:48:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754
        Validity
            Not Before: Jul  1 04:02:29 2025 GMT
            Not After : Jul  2 04:02:29 2025 GMT
        Subject: CN=e7a407aec522d5141fe526754645568c72df064f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:c0:9a:04:49:97:3e:b0:2d:5b:75:28:25:
                    ea:15:6f:c6:52:08:36:37:90:53:0d:0b:88:b2:7a:
                    39:e1:fd:ce:39:d0:d9:cd:ad:cc:e5:d4:7f:b5:21:
                    89:f5:72:bd:9a:d9:bb:70:ef:10:dc:bf:5f:8c:f4:
                    e3:a4:8a:64:e5:5d:c8:2e:6a:8d:11:94:e3:c8:46:
                    27:7c:3b:43:44:d2:1b:67:b0:1a:a5:a0:28:62:81:
                    3b:25:70:db:b7:fb:c4:3d:aa:24:d7:13:76:76:19:
                    43:99:54:b8:2a:70:9a:82:aa:58:a0:3d:f2:2f:e1:
                    b2:75:43:10:19:b1:ae:ad:d3:2d:3b:94:f2:70:9c:
                    78:38:50:de:e9:ed:b1:24:8f:84:22:fe:75:11:17:
                    ca:21:b7:ca:8b:8a:1c:7e:c4:dc:74:a9:51:e9:85:
                    e1:db:4d:13:af:f1:90:59:e7:0b:47:66:57:cf:70:
                    aa:1f:61:d2:eb:a7:fd:ec:1d:e2:4f:24:ba:47:b8:
                    88:e4:21:5c:ef:b5:f1:b5:87:61:9a:e6:e6:81:8a:
                    bc:db:e6:a0:5c:7e:a1:4a:7e:cb:a3:9c:fa:24:07:
                    ee:26:aa:47:8f:70:29:d2:a5:1d:8f:ec:8f:87:a7:
                    96:c6:bd:88:6d:87:b2:36:0e:13:9b:47:84:3f:9e:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:07:AE:C5:22:D5:14:1F:E5:26:75:46:45:56:8C:72:DF:06:4F
            X509v3 Authority Key Identifier:
                keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:be:dd:70:67:eb:89:85:cf:b7:f0:80:c7:f7:4e:9d:93:
         cc:93:d5:4d:5e:d3:8f:b6:da:8e:31:9c:6c:3a:ff:b5:41:8f:
         89:ae:c6:f8:4f:95:e0:32:5b:4f:44:ec:6e:91:b6:f9:16:09:
         2b:3f:57:26:10:70:98:5a:26:85:8c:b5:56:0a:00:83:9a:35:
         21:41:e3:67:a9:d7:0b:4a:9f:8d:c1:7d:a0:c9:7b:75:8d:2a:
         13:ce:c1:46:18:d2:be:a3:f8:34:6a:94:a0:08:fb:90:72:f1:
         a6:47:d8:3f:d1:9f:3c:83:83:3c:0b:e2:09:14:21:5c:82:fd:
         5f:eb:f4:41:4c:48:fe:87:5a:94:37:97:cc:11:e9:71:4e:6b:
         b7:13:3f:f2:d6:f8:eb:8f:57:b3:43:bf:71:ec:f1:df:6d:e9:
         6a:ee:ac:f1:9c:07:40:95:d6:7a:ef:c5:2b:a7:4a:b8:fe:8b:
         ba:8f:a5:43:1c:fa:41:bd:11:f5:0c:37:f2:ac:7a:5a:9b:c8:
         30:21:bb:a5:77:4b:a4:e7:a5:46:14:4e:89:b3:2e:cd:c3:2a:
         f7:bf:22:b1:4b:56:c9:54:69:11:b1:ba:0c:7c:08:1d:7a:3c:
         a7:14:b4:05:53:84:2c:7c:be:81:e4:6a:d7:62:19:7b:be:f8:
         14:2e:7a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEJoj1/hG4UlTAcmQxZUhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm
YTI3NTQwHhcNMjUwNzAxMDQwMjI5WhcNMjUwNzAyMDQwMjI5WjAzMTEwLwYDVQQD
EyhlN2E0MDdhZWM1MjJkNTE0MWZlNTI2NzU0NjQ1NTY4YzcyZGYwNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuTAmgRJlz6wLVt1KCXqFW/GUgg2
N5BTDQuIsno54f3OOdDZza3M5dR/tSGJ9XK9mtm7cO8Q3L9fjPTjpIpk5V3ILmqN
EZTjyEYnfDtDRNIbZ7AapaAoYoE7JXDbt/vEPaok1xN2dhlDmVS4KnCagqpYoD3y
L+GydUMQGbGurdMtO5TycJx4OFDe6e2xJI+EIv51ERfKIbfKi4ocfsTcdKlR6YXh
200Tr/GQWecLR2ZXz3CqH2HS66f97B3iTyS6R7iI5CFc77XxtYdhmubmgYq82+ag
XH6hSn7Lo5z6JAfuJqpHj3Ap0qUdj+yPh6eWxr2IbYeyNg4Tm0eEP541RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOekB67FItUUH+UmdUZFVoxy3wZPMB8GA1UdIwQY
MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt
NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3
LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQe+3XBn
64mFz7fwgMf3Tp2TzJPVTV7Tj7bajjGcbDr/tUGPia7G+E+V4DJbT0TsbpG2+RYJ
Kz9XJhBwmFomhYy1VgoAg5o1IUHjZ6nXC0qfjcF9oMl7dY0qE87BRhjSvqP4NGqU
oAj7kHLxpkfYP9GfPIODPAviCRQhXIL9X+v0QUxI/odalDeXzBHpcU5rtxM/8tb4
649Xs0O/cezx323pau6s8ZwHQJXWeu/FK6dKuP6Luo+lQxz6Qb0R9Qw38qx6WpvI
MCG7pXdLpOelRhROibMuzcMq978isUtWyVRpEbG6DHwIHXo8pxS0BVOELHy+geRq
12IZe774FC56/Q==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:32:08 2025 by rpki-client