Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
File:                     aAkoqR-PfmOX5sZdDgtmKReW01I.mft (raw, json)
Hash identifier:          BaoEP8arOnI9BvKV92AHReB4y/Ns/9gTqaXsK7Ir1pY=
Subject key identifier:   B3:88:CA:29:FF:DD:5B:FD:8E:12:93:23:50:FA:6C:6D:1E:E1:65:D8
Authority key identifier: 68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52
Certificate issuer:       /CN=680928a91f8f7e6397e6c65d0e0b66291796d352
Certificate serial:       0198868CBAAB8574910A22CAC1D734BD073D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
Manifest number:          11E4
Signing time:             Thu 07 Aug 2025 22:00:26 +0000
Manifest this update:     Thu 07 Aug 2025 22:00:26 +0000
Manifest next update:     Fri 08 Aug 2025 22:00:26 +0000
Files and hashes:         1: aAkoqR-PfmOX5sZdDgtmKReW01I.crl (hash: i5yAzgSx/rFtHmdyuc/QWCFsWK6yy5cK49iefdcMd7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:8c:ba:ab:85:74:91:0a:22:ca:c1:d7:34:bd:07:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680928a91f8f7e6397e6c65d0e0b66291796d352
        Validity
            Not Before: Aug  7 22:00:26 2025 GMT
            Not After : Aug  8 22:00:26 2025 GMT
        Subject: CN=b388ca29ffdd5bfd8e12932350fa6c6d1ee165d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:41:6d:be:55:12:96:57:3b:65:e2:d7:df:54:
                    79:96:53:f1:be:fe:4f:5c:a4:4f:80:22:76:c6:94:
                    c3:24:b9:3a:c3:6c:64:95:df:da:80:f8:f6:cb:b4:
                    a4:77:0f:0f:c6:b8:c1:73:67:87:03:5a:dc:58:66:
                    56:59:4a:78:fb:19:2c:84:ca:16:b2:cf:62:6a:c3:
                    3d:6c:7d:55:97:f0:ac:2e:94:84:1c:cd:dc:03:a4:
                    e6:15:89:97:94:90:45:b7:7f:5f:10:fc:51:f8:6e:
                    d1:80:4c:fe:08:2e:ca:92:89:76:ca:0b:51:5f:66:
                    ec:02:ae:18:44:0d:e8:1e:2c:a1:cd:66:0f:02:86:
                    a2:92:6b:09:30:d6:22:50:4d:df:eb:2d:14:e6:9b:
                    9a:a5:bf:2b:e7:2d:f6:aa:15:10:c5:45:76:9b:18:
                    6d:32:96:8b:ea:f3:99:26:c9:03:11:28:59:96:2f:
                    8a:69:ac:b3:f0:e0:09:5a:6d:56:06:78:53:04:fb:
                    47:40:b9:d8:84:f9:bc:b1:49:18:3c:23:7a:5c:d6:
                    8d:09:e7:2a:cd:ad:72:23:84:2f:aa:63:92:15:aa:
                    b0:78:40:ef:a6:d6:e4:69:7f:37:46:0c:81:25:40:
                    84:d9:05:67:14:9a:70:75:70:a4:5b:9d:14:06:a4:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:CA:29:FF:DD:5B:FD:8E:12:93:23:50:FA:6C:6D:1E:E1:65:D8
            X509v3 Authority Key Identifier:
                keyid:68:09:28:A9:1F:8F:7E:63:97:E6:C6:5D:0E:0B:66:29:17:96:D3:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAkoqR-PfmOX5sZdDgtmKReW01I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eb19cb-ac83-451e-9b54-8be3df89f359/1/aAkoqR-PfmOX5sZdDgtmKReW01I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7e:de:74:dd:7a:2f:46:f8:89:b1:ae:63:92:a0:bc:95:68:
         75:02:b3:4d:92:9a:29:a7:3a:58:6f:14:0a:3c:4b:30:e1:19:
         cc:ca:45:f4:3b:c1:85:5d:e7:5f:ba:75:6e:af:70:db:7e:17:
         d6:ab:95:74:62:0e:9e:3a:97:3e:d1:0a:1b:a0:85:ed:83:c3:
         d2:8a:bd:5c:49:65:02:54:d3:fc:eb:76:cc:80:ad:b7:3f:94:
         39:66:89:ef:a3:8e:a8:dc:3b:89:69:68:fe:6f:bb:a2:ca:d8:
         5d:7f:50:a8:56:7b:61:aa:88:87:36:08:08:28:c5:0e:e7:f8:
         75:51:5f:e3:9a:c3:9b:fa:97:d4:21:68:12:3e:0c:a5:4a:79:
         11:43:ed:49:e8:83:b8:33:fd:b6:04:9a:c7:6e:c9:c0:b8:94:
         42:46:67:f9:2c:9c:2b:26:cc:ce:86:86:63:49:ee:b1:de:f5:
         02:7d:1b:06:4f:ca:e0:77:6e:f4:2f:99:5e:cf:61:63:a5:e9:
         83:3f:9d:2a:aa:14:28:9a:18:9a:f9:51:31:ba:d2:43:4b:22:
         c0:2b:f2:34:f8:45:7f:8d:2e:2d:e3:e2:d9:48:65:2b:06:85:
         e8:9b:52:b9:f6:e1:7d:48:78:f7:a7:d3:2e:b7:5b:18:fc:8e:
         0b:9d:9a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGjLqrhXSRCiLKwdc0vQc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDkyOGE5MWY4ZjdlNjM5N2U2YzY1ZDBlMGI2NjI5MTc5
NmQzNTIwHhcNMjUwODA3MjIwMDI2WhcNMjUwODA4MjIwMDI2WjAzMTEwLwYDVQQD
EyhiMzg4Y2EyOWZmZGQ1YmZkOGUxMjkzMjM1MGZhNmM2ZDFlZTE2NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EFtvlUSllc7ZeLX31R5llPxvv5P
XKRPgCJ2xpTDJLk6w2xkld/agPj2y7Skdw8PxrjBc2eHA1rcWGZWWUp4+xkshMoW
ss9iasM9bH1Vl/CsLpSEHM3cA6TmFYmXlJBFt39fEPxR+G7RgEz+CC7Kkol2ygtR
X2bsAq4YRA3oHiyhzWYPAoaikmsJMNYiUE3f6y0U5puapb8r5y32qhUQxUV2mxht
MpaL6vOZJskDEShZli+Kaayz8OAJWm1WBnhTBPtHQLnYhPm8sUkYPCN6XNaNCecq
za1yI4QvqmOSFaqweEDvptbkaX83RgyBJUCE2QVnFJpwdXCkW50UBqTYGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOIyin/3Vv9jhKTI1D6bG0e4WXYMB8GA1UdIwQY
MBaAFGgJKKkfj35jl+bGXQ4LZikXltNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYjE5Y2ItYWM4My00NTFlLTliNTQt
OGJlM2RmODlmMzU5LzEvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYjE5Y2ItYWM4My00NTFlLTliNTQtOGJlM2RmODlmMzU5
LzEvYUFrb3FSLVBmbU9YNXNaZERndG1LUmVXMDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH7edN16
L0b4ibGuY5KgvJVodQKzTZKaKac6WG8UCjxLMOEZzMpF9DvBhV3nX7p1bq9w234X
1quVdGIOnjqXPtEKG6CF7YPD0oq9XEllAlTT/Ot2zICttz+UOWaJ76OOqNw7iWlo
/m+7osrYXX9QqFZ7YaqIhzYICCjFDuf4dVFf45rDm/qX1CFoEj4MpUp5EUPtSeiD
uDP9tgSax27JwLiUQkZn+SycKybMzoaGY0nusd71An0bBk/K4Hdu9C+ZXs9hY6Xp
gz+dKqoUKJoYmvlRMbrSQ0siwCvyNPhFf40uLePi2UhlKwaF6JtSufbhfUh496fT
LrdbGPyOC52aZQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:04 2025 by rpki-client