Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File:                     AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier:          LLPI7IqiYX7jeDciDVmkJ5jVam9+suaoNgs1HYkw3Ts=
Subject key identifier:   45:88:7C:0A:DC:DA:14:20:72:27:3F:59:19:38:15:94:4F:7B:22:38
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer:       /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial:       019873E37B755C6D6B58F641D508B1E74910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number:          0AB3
Signing time:             Mon 04 Aug 2025 07:02:24 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:24 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:24 +0000
Files and hashes:         1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: Wx5HUnr9CE8Rib3/f3c+lGftL61N24/AqwnlxShXjuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:7b:75:5c:6d:6b:58:f6:41:d5:08:b1:e7:49:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
        Validity
            Not Before: Aug  4 07:02:24 2025 GMT
            Not After : Aug  5 07:02:24 2025 GMT
        Subject: CN=45887c0adcda142072273f59193815944f7b2238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:86:69:05:67:5c:dc:cb:66:95:f0:60:c5:
                    c2:1f:bd:f6:26:00:22:ba:57:4c:da:5e:fd:f0:0d:
                    59:b3:f3:f8:4a:9d:54:e1:f3:23:9e:88:c7:42:ca:
                    8d:81:4b:d9:2b:4d:79:db:83:ed:a7:a6:15:c3:f0:
                    5a:6c:bf:5a:ff:96:a5:f2:ad:20:a1:6b:41:ce:b4:
                    a3:b2:d4:e8:78:f9:6d:4b:9e:09:62:9b:d6:8f:d5:
                    0f:de:75:80:5c:db:8b:6f:e9:00:23:d0:ea:d6:ea:
                    5c:17:6f:96:38:3d:b2:ff:82:30:fb:1b:51:15:73:
                    bb:a0:1e:95:5a:34:31:42:89:ae:bb:f3:f7:db:73:
                    b4:db:c7:4f:f1:34:14:53:34:5a:33:b5:ea:48:2d:
                    7f:e7:51:59:7a:a9:f6:07:fd:d6:6c:0a:b6:9f:ea:
                    54:a4:be:83:20:6a:92:c2:e5:15:02:6d:f9:1d:94:
                    13:fc:ec:2b:01:a7:0a:7d:43:ed:db:b4:8d:75:f5:
                    44:18:4c:92:9b:8b:cf:ef:bb:e0:e9:b2:d7:f3:54:
                    92:95:06:88:0b:a8:13:37:94:6f:a2:7e:6e:8b:f9:
                    04:0b:38:7b:cb:20:86:44:a8:25:3e:aa:74:ab:7c:
                    65:4d:47:03:5d:b2:80:92:48:2e:cf:62:3b:e6:4a:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:88:7C:0A:DC:DA:14:20:72:27:3F:59:19:38:15:94:4F:7B:22:38
            X509v3 Authority Key Identifier:
                keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:71:97:e1:7a:4e:f5:97:f1:81:1d:f0:b0:eb:c8:cc:6a:ac:
         92:1f:c8:89:9f:e6:10:8c:57:e2:c0:df:d4:85:88:a0:09:1c:
         55:92:9e:b8:6f:a7:43:0f:60:4b:73:66:a5:ec:08:b2:38:66:
         fc:06:1a:d4:cb:5f:84:79:ce:a7:01:ea:60:4f:a8:80:c4:68:
         b3:ca:28:f9:92:6f:8b:5a:82:43:7f:cb:2a:7c:93:5d:e8:c6:
         b8:59:38:26:d9:42:95:5a:44:e0:dc:95:3b:c6:a9:32:e3:85:
         c1:66:5c:7f:e6:3b:4c:d5:16:ae:35:73:b4:df:7f:ff:f9:68:
         82:60:1e:b5:0a:7a:b1:65:a2:62:d6:18:4b:62:b5:1b:72:f7:
         55:72:7e:71:e3:3d:19:44:09:fe:ad:94:17:71:80:00:d2:a8:
         47:ed:22:b4:c5:fb:b8:03:f6:df:9c:59:72:8d:2e:c2:97:0d:
         72:32:9d:d9:e7:0f:79:62:3a:ea:5a:27:5c:1b:ca:05:90:58:
         91:29:81:0b:15:6d:5a:55:d6:d7:46:a2:69:10:b7:f7:aa:19:
         2e:3d:b4:60:39:c8:74:34:46:aa:05:33:67:c7:4b:4c:62:78:
         12:a4:f8:58:85:d7:52:6b:3c:09:3f:c7:41:39:3f:6b:8d:8d:
         eb:46:03:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43t1XG1rWPZB1Qix50kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjVmMTZkYTYwNjc4M2YzMDFmNzA4YTVlNmI0ZmQ1ZmZk
NDMyZTgwHhcNMjUwODA0MDcwMjI0WhcNMjUwODA1MDcwMjI0WjAzMTEwLwYDVQQD
Eyg0NTg4N2MwYWRjZGExNDIwNzIyNzNmNTkxOTM4MTU5NDRmN2IyMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRGGaQVnXNzLZpXwYMXCH732JgAi
uldM2l798A1Zs/P4Sp1U4fMjnojHQsqNgUvZK01524Ptp6YVw/BabL9a/5al8q0g
oWtBzrSjstToePltS54JYpvWj9UP3nWAXNuLb+kAI9Dq1upcF2+WOD2y/4Iw+xtR
FXO7oB6VWjQxQomuu/P323O028dP8TQUUzRaM7XqSC1/51FZeqn2B/3WbAq2n+pU
pL6DIGqSwuUVAm35HZQT/OwrAacKfUPt27SNdfVEGEySm4vP77vg6bLX81SSlQaI
C6gTN5Rvon5ui/kECzh7yyCGRKglPqp0q3xlTUcDXbKAkkguz2I75kpXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWIfArc2hQgcic/WRk4FZRPeyI4MB8GA1UdIwQY
MBaAFABl8W2mBng/MB9wil5rT9X/1DLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQxYzYtYWFhOC00MjUwLWE3ZWMt
YTRhMjhiZmE0ODhlLzEvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNDQxYzYtYWFhOC00MjUwLWE3ZWMtYTRhMjhiZmE0ODhl
LzEvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXGX4XpO
9ZfxgR3wsOvIzGqskh/IiZ/mEIxX4sDf1IWIoAkcVZKeuG+nQw9gS3NmpewIsjhm
/AYa1MtfhHnOpwHqYE+ogMRos8oo+ZJvi1qCQ3/LKnyTXejGuFk4JtlClVpE4NyV
O8apMuOFwWZcf+Y7TNUWrjVztN9///logmAetQp6sWWiYtYYS2K1G3L3VXJ+ceM9
GUQJ/q2UF3GAANKoR+0itMX7uAP235xZco0uwpcNcjKd2ecPeWI66lonXBvKBZBY
kSmBCxVtWlXW10aiaRC396oZLj20YDnIdDRGqgUzZ8dLTGJ4EqT4WIXXUms8CT/H
QTk/a42N60YDzA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:30 2025 by rpki-client