Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          k7dNWuR+mbyQHT+zItRBuZu1RdIe6wt/zUsyhvvk1Jo=
Subject key identifier:   90:6A:19:11:83:86:59:FF:DB:47:D1:DD:CA:40:06:08:5E:03:49:7B
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       01987C773392FF3D360194D47169C487D765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          0E8A
Signing time:             Tue 05 Aug 2025 23:00:43 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:43 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:43 +0000
Files and hashes:         1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
                          2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: YnvCMmcePpLmzGJSZA8T44MWM9CbiN35oVVTHARmxWY=)
                          3: iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa (hash: bD+y12vYe0rJphDbgeizPQmjlToeySPQDb7cfEEdLrg=)
                          4: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:33:92:ff:3d:36:01:94:d4:71:69:c4:87:d7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Aug  5 23:00:43 2025 GMT
            Not After : Aug  6 23:00:43 2025 GMT
        Subject: CN=906a1911838659ffdb47d1ddca4006085e03497b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:39:b4:86:f1:07:bf:03:e5:93:26:49:71:
                    a2:9c:fc:e2:95:e9:ed:f3:a0:79:5f:6c:1d:8e:09:
                    53:06:c7:b8:8e:ca:fc:9b:a2:f2:95:fd:b7:b7:ec:
                    3e:19:0a:c2:4a:e3:a8:24:40:df:41:63:81:82:37:
                    52:64:0a:b0:e2:ee:38:30:e4:13:21:5d:79:f9:7e:
                    b8:a1:0b:c5:a1:e5:c0:9b:62:e3:0e:81:de:5c:bc:
                    c9:a4:0f:54:00:0a:bf:a9:2e:01:20:22:d2:87:18:
                    9d:40:6d:0b:cc:3c:c2:7b:8c:ac:1d:15:4a:e7:3e:
                    d9:79:c9:f4:03:ed:45:3d:c1:a4:f2:77:6c:9d:d9:
                    18:61:51:94:6a:f9:4f:e1:61:2e:0c:9f:f2:71:0d:
                    2e:c4:6f:2e:21:ec:0a:cd:3a:1c:7b:a4:21:d0:4f:
                    70:4d:92:d2:5b:9a:0c:b0:bf:97:a3:38:c2:8e:0c:
                    5e:c0:7b:d8:e6:ed:54:2f:13:1a:3d:b3:ee:f3:a4:
                    f9:42:dd:53:5c:38:fe:80:db:99:3e:34:e6:27:fc:
                    26:d2:f5:1d:3e:45:7f:d9:ef:76:99:ed:65:51:da:
                    26:6c:25:bf:b6:2a:c6:3e:fc:9e:d8:a9:d9:64:8e:
                    ff:0f:19:62:39:47:73:52:d0:47:f9:9a:b3:64:84:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6A:19:11:83:86:59:FF:DB:47:D1:DD:CA:40:06:08:5E:03:49:7B
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:35:b4:25:10:7f:d7:27:bd:1b:ba:bb:8e:e5:02:69:56:61:
         4f:d7:26:e0:5e:4a:a8:e8:c5:ac:b1:f0:ff:96:d5:40:2f:d5:
         19:40:96:3b:1e:43:19:66:c6:ff:28:fa:f6:5d:85:8b:3e:79:
         17:21:21:c6:80:12:de:d7:8e:a8:9a:d3:80:a5:3e:40:97:df:
         34:dc:e9:d2:07:c5:32:23:93:b9:b4:d1:b1:db:f7:2a:70:d4:
         74:f3:ea:e6:f1:22:90:88:bc:2c:d4:0e:66:93:c7:7a:1f:2b:
         58:da:7b:6f:57:09:d8:67:37:e6:49:bb:0d:45:f2:53:10:0a:
         25:60:b8:4c:ce:32:ee:a6:ac:96:ee:0a:56:c3:b2:8c:79:2c:
         33:ca:24:0a:3c:b7:25:55:2f:56:63:f1:7b:a6:a9:30:b0:50:
         07:05:09:b5:9b:53:81:19:8f:17:95:54:8f:b5:91:19:47:95:
         54:0e:b6:9a:f5:62:9d:6e:d3:d0:fb:91:2e:84:1e:cd:ee:84:
         4c:e1:5c:cf:a0:db:b7:c3:77:b2:76:c1:20:68:d3:9a:e8:b4:
         ea:10:24:65:bf:cf:91:12:f9:1d:11:f6:9c:8b:2b:99:8c:3a:
         02:8c:54:10:d5:ae:8b:f6:3c:94:d6:96:94:24:a0:c9:99:2d:
         3a:b6:ee:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8dzOS/z02AZTUcWnEh9dlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj
N2M1Y2EwHhcNMjUwODA1MjMwMDQzWhcNMjUwODA2MjMwMDQzWjAzMTEwLwYDVQQD
Eyg5MDZhMTkxMTgzODY1OWZmZGI0N2QxZGRjYTQwMDYwODVlMDM0OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LY5tIbxB78D5ZMmSXGinPzilent
86B5X2wdjglTBse4jsr8m6Lylf23t+w+GQrCSuOoJEDfQWOBgjdSZAqw4u44MOQT
IV15+X64oQvFoeXAm2LjDoHeXLzJpA9UAAq/qS4BICLShxidQG0LzDzCe4ysHRVK
5z7Zecn0A+1FPcGk8ndsndkYYVGUavlP4WEuDJ/ycQ0uxG8uIewKzToce6Qh0E9w
TZLSW5oMsL+XozjCjgxewHvY5u1ULxMaPbPu86T5Qt1TXDj+gNuZPjTmJ/wm0vUd
PkV/2e92me1lUdombCW/tirGPvye2KnZZI7/DxliOUdzUtBH+ZqzZITuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBqGRGDhln/20fR3cpABgheA0l7MB8GA1UdIwQY
MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt
NDMzMmM5NTdhMjJmLzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm
LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATW0JRB/
1ye9G7q7juUCaVZhT9cm4F5KqOjFrLHw/5bVQC/VGUCWOx5DGWbG/yj69l2Fiz55
FyEhxoAS3teOqJrTgKU+QJffNNzp0gfFMiOTubTRsdv3KnDUdPPq5vEikIi8LNQO
ZpPHeh8rWNp7b1cJ2Gc35km7DUXyUxAKJWC4TM4y7qaslu4KVsOyjHksM8okCjy3
JVUvVmPxe6apMLBQBwUJtZtTgRmPF5VUj7WRGUeVVA62mvVinW7T0PuRLoQeze6E
TOFcz6Dbt8N3snbBIGjTmui06hAkZb/PkRL5HRH2nIsrmYw6AoxUENWui/Y8lNaW
lCSgyZktOrbu3g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:10 2025 by rpki-client