Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File:                     aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier:          38t5wHMAUhAQ3p+ygbX1jQae8p/l+OUYv6a/ZrctKqk=
Subject key identifier:   BF:19:FD:9A:B1:1E:A5:61:46:F5:3B:7D:CD:B1:5E:CD:5F:58:5A:49
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer:       /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial:       019879AE2C66822713E3999F1A43A46928B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number:          0106
Signing time:             Tue 05 Aug 2025 10:01:54 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:54 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:54 +0000
Files and hashes:         1: JCGWxFZOAT1PTlX2DjX3MLahTGI.roa (hash: reYZrRa8EPjXUGiI4oowhgBkUivqPdhb4h9UUwslPxE=)
                          2: UwSX5skbnYWCODti--d_CrlRLPQ.roa (hash: /UxS/W2x6BIK1JMEkMqtBl0tDdobykbVlNGkDRtr4R0=)
                          3: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: ONqgyt3TVy0y/26ViA+qaL1jmhljJbn0rWMGuahJqM8=)
                          4: ud9hdz8A9-yuIWSXWqDOgAOBfUQ.roa (hash: B1LppG18R5D0wHDpyfZIdH9KuHVBFC1jhEVgoPDOgNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:2c:66:82:27:13:e3:99:9f:1a:43:a4:69:28:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
        Validity
            Not Before: Aug  5 10:01:54 2025 GMT
            Not After : Aug  6 10:01:54 2025 GMT
        Subject: CN=bf19fd9ab11ea56146f53b7dcdb15ecd5f585a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:cb:f5:ca:20:c7:24:df:cc:ca:f3:a3:85:
                    5f:ec:78:78:a4:e2:e1:60:df:a1:e2:ab:b4:5e:9f:
                    ef:f8:2c:2d:4a:cb:c5:bc:58:d8:45:73:da:d1:5b:
                    4e:7a:d2:34:3c:b1:8c:f2:35:c2:52:19:f4:af:55:
                    84:6a:0f:fe:01:fa:9a:71:ef:2b:60:e7:f1:59:53:
                    e3:a3:a3:84:fd:c7:40:fb:3b:56:e6:5b:3c:a4:9c:
                    48:e2:a7:35:2c:26:34:12:41:91:d0:4a:2c:1d:09:
                    4d:51:69:ac:13:5a:af:0a:9a:0d:89:53:e3:37:74:
                    cd:1d:57:45:e4:af:b8:15:2f:84:2d:e1:78:ca:1a:
                    66:f8:07:06:d9:be:a8:4f:52:4d:f3:8d:19:0a:ec:
                    e6:09:f2:5e:97:fa:42:d0:87:0f:03:4f:b6:a3:59:
                    22:04:11:3f:dd:5a:8e:5e:e4:e9:73:60:4d:ba:21:
                    70:bf:7d:c2:72:5c:e5:33:0f:da:f2:c3:5d:a5:6b:
                    99:5f:59:ce:c0:a6:42:43:8e:04:33:82:79:79:cd:
                    fa:a3:8b:3f:58:3b:da:9f:f2:6b:15:b2:b9:a7:5b:
                    ee:c0:2c:15:8c:2c:2f:c2:38:eb:78:a7:1f:9e:d6:
                    57:dc:e2:49:02:01:38:b6:48:92:46:1e:22:0b:14:
                    e2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:19:FD:9A:B1:1E:A5:61:46:F5:3B:7D:CD:B1:5E:CD:5F:58:5A:49
            X509v3 Authority Key Identifier:
                keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:62:e5:c2:82:ba:4c:a3:6d:5b:c2:f4:df:76:32:80:76:7b:
         91:a9:7e:8d:08:b3:fc:25:17:02:14:16:4d:7d:41:85:53:12:
         c5:e4:b3:c7:d1:6d:7e:20:35:ed:33:cd:18:a4:3c:d3:b0:f5:
         fa:e1:6a:9b:b1:ac:99:f0:8a:05:64:95:6a:f7:93:9c:e8:86:
         bf:1e:77:42:3d:5c:f2:6e:9d:16:75:83:fd:5f:34:b0:69:0c:
         d5:33:96:dd:a1:05:38:1b:91:8b:58:e2:4a:d1:bf:3f:9d:c7:
         5f:3a:37:f9:36:e4:b9:9f:c2:8f:39:8d:c0:80:9e:e5:5d:c9:
         a4:9e:e8:b3:32:c5:c2:91:c0:fc:16:03:40:be:0f:0c:cf:75:
         a2:bb:4e:66:ba:73:ed:02:f7:20:f9:df:72:d7:c9:d5:e1:a8:
         ba:97:fa:38:5f:ad:4a:b4:03:ab:98:80:98:4a:21:45:45:e2:
         2c:a9:d1:8c:d9:52:fe:9f:35:80:ce:dc:ca:95:90:61:95:bd:
         05:e8:b1:1e:53:10:01:90:66:5e:82:91:1f:00:31:46:30:77:
         22:e8:dd:2f:7d:ef:ba:a8:05:b2:df:5a:9f:32:16:13:50:6b:
         73:cc:37:9f:e7:fd:bd:67:d7:9a:f8:5c:77:d9:13:4a:5d:98:
         c7:b9:1a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rixmgicT45mfGkOkaSi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh
NzFjNGIwHhcNMjUwODA1MTAwMTU0WhcNMjUwODA2MTAwMTU0WjAzMTEwLwYDVQQD
EyhiZjE5ZmQ5YWIxMWVhNTYxNDZmNTNiN2RjZGIxNWVjZDVmNTg1YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFPL9cogxyTfzMrzo4Vf7Hh4pOLh
YN+h4qu0Xp/v+CwtSsvFvFjYRXPa0VtOetI0PLGM8jXCUhn0r1WEag/+Afqace8r
YOfxWVPjo6OE/cdA+ztW5ls8pJxI4qc1LCY0EkGR0EosHQlNUWmsE1qvCpoNiVPj
N3TNHVdF5K+4FS+ELeF4yhpm+AcG2b6oT1JN840ZCuzmCfJel/pC0IcPA0+2o1ki
BBE/3VqOXuTpc2BNuiFwv33CclzlMw/a8sNdpWuZX1nOwKZCQ44EM4J5ec36o4s/
WDvan/JrFbK5p1vuwCwVjCwvwjjreKcfntZX3OJJAgE4tkiSRh4iCxTiOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8Z/ZqxHqVhRvU7fc2xXs1fWFpJMB8GA1UdIwQY
MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt
YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm
LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGLlwoK6
TKNtW8L033YygHZ7kal+jQiz/CUXAhQWTX1BhVMSxeSzx9FtfiA17TPNGKQ807D1
+uFqm7GsmfCKBWSVaveTnOiGvx53Qj1c8m6dFnWD/V80sGkM1TOW3aEFOBuRi1ji
StG/P53HXzo3+TbkuZ/CjzmNwICe5V3JpJ7oszLFwpHA/BYDQL4PDM91ortOZrpz
7QL3IPnfctfJ1eGoupf6OF+tSrQDq5iAmEohRUXiLKnRjNlS/p81gM7cypWQYZW9
BeixHlMQAZBmXoKRHwAxRjB3IujdL33vuqgFst9anzIWE1Brc8w3n+f9vWfXmvhc
d9kTSl2Yx7kajA==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:18:02 2025 by rpki-client