Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File:                     xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier:          VDHlQVhtsVdVuszzuNM+cy9tlBTJom7hG++IcvuebpE=
Subject key identifier:   B2:B7:04:DC:1F:8A:5D:3F:80:F5:EC:5A:AB:66:98:D2:10:BF:B2:62
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer:       /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial:       019896A616400ABF69921A568F33BF278075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number:          05F5
Signing time:             Mon 11 Aug 2025 01:02:03 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:03 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:03 +0000
Files and hashes:         1: gAeMHhtFSbcycnERLLnOEpIkAko.roa (hash: e6fugfkqh4EKp2KogcF4JNMD2SRVe0PwewPhIKGPhCE=)
                          2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: cDH2dmsG2b06PpToB92/0T+pu83fm33d7clWLkR1eiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:16:40:0a:bf:69:92:1a:56:8f:33:bf:27:80:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
        Validity
            Not Before: Aug 11 01:02:03 2025 GMT
            Not After : Aug 12 01:02:03 2025 GMT
        Subject: CN=b2b704dc1f8a5d3f80f5ec5aab6698d210bfb262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:a6:6e:f6:e6:ec:a2:73:17:cf:5f:61:8b:
                    25:88:5d:7d:73:7a:ee:88:2e:e8:af:91:9d:28:45:
                    6d:da:67:e2:e1:60:78:89:23:71:0f:30:d0:10:94:
                    4f:69:b4:f6:8f:30:da:0a:3a:b6:6f:c8:91:ae:e1:
                    d4:06:59:45:db:9b:2f:44:58:cf:c4:46:90:cf:29:
                    29:2d:07:11:07:bd:05:6d:0f:af:56:f0:e1:c1:c4:
                    28:eb:7f:b8:d4:d7:0f:3a:1f:65:60:78:7b:f8:b1:
                    92:33:21:40:56:06:78:1c:93:40:06:0c:eb:3c:5e:
                    f9:63:b1:d5:a8:01:bf:c5:f2:6d:e9:1a:6d:27:31:
                    fc:dd:c1:51:4b:94:70:ea:da:d2:68:50:1a:71:1c:
                    c1:6a:0f:16:f8:04:03:1f:50:7c:09:ed:fa:13:5d:
                    3c:4f:ac:49:fe:a4:d0:6d:82:b5:d6:4f:bc:1d:42:
                    ae:3d:fe:18:18:c3:a1:2b:8f:2e:d8:13:5a:e4:f2:
                    42:d8:96:59:0d:0a:79:ef:8c:f7:69:3f:c8:e6:a2:
                    67:e0:bc:30:ef:0b:b9:fe:d0:30:a9:07:9e:c1:50:
                    ea:b5:bf:38:ce:e5:eb:46:6a:45:eb:68:ba:42:74:
                    29:7a:1e:ad:9f:d4:68:ab:96:80:98:58:dc:52:77:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:04:DC:1F:8A:5D:3F:80:F5:EC:5A:AB:66:98:D2:10:BF:B2:62
            X509v3 Authority Key Identifier:
                keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:53:10:7d:67:ea:89:8a:86:c4:17:c6:33:4b:23:83:8b:
         a0:fb:b0:8b:2a:bb:77:b1:38:74:16:b4:c1:a7:fb:eb:95:83:
         bf:1f:6c:d3:f8:16:ce:94:fd:fc:12:37:21:41:ef:5e:67:7f:
         93:3a:c8:d2:79:12:01:fb:78:24:4c:d9:37:1c:21:2f:e6:7f:
         d7:66:3a:7e:3a:ba:87:d5:c0:df:78:10:62:f7:cc:e2:71:ec:
         3e:6c:2f:2d:bc:46:02:75:51:3c:f0:4e:b5:0b:fc:3f:97:73:
         9d:54:4d:cc:38:f1:1c:6f:59:54:11:f7:16:db:2b:e7:50:ed:
         ca:25:c2:0c:ef:79:9e:7a:2b:8a:80:bc:50:fd:49:70:c1:05:
         10:79:0a:0c:cc:e5:d3:57:07:52:2f:39:36:1f:ba:f4:84:3c:
         75:52:a1:b3:bc:0a:d6:f0:f2:99:ae:35:d4:90:73:a6:af:9e:
         3b:bc:0b:2c:8c:3d:d9:cd:25:e3:fb:90:35:43:30:66:c0:15:
         3f:fd:55:fb:1c:15:5b:73:76:42:65:25:5f:29:15:52:06:90:
         6e:06:1d:3d:4a:ba:12:d4:9b:8e:f7:2e:e3:8c:41:f1:7f:c5:
         d0:ec:d0:3e:e5:89:7e:45:14:af:db:bc:fe:b6:3e:7f:3b:72:
         f9:01:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:03 2025 by rpki-client