Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File:                     aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier:          fUvYVihRwZUZ3Q0HaSuNpDDt/Ifeqhx1eYir1Y899lE=
Subject key identifier:   1D:D4:27:DD:36:69:E5:FF:59:6A:1A:DC:66:32:0F:AB:77:0B:B9:10
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer:       /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial:       019885432CEFA237EA90A2AA0EF06A385B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number:          161C
Signing time:             Thu 07 Aug 2025 16:00:28 +0000
Manifest this update:     Thu 07 Aug 2025 16:00:28 +0000
Manifest next update:     Fri 08 Aug 2025 16:00:28 +0000
Files and hashes:         1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: aaD3Gz5FebYOQIYWMT8gab+8N2ycSLqaE0JEbnB+rbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:43:2c:ef:a2:37:ea:90:a2:aa:0e:f0:6a:38:5b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
        Validity
            Not Before: Aug  7 16:00:28 2025 GMT
            Not After : Aug  8 16:00:28 2025 GMT
        Subject: CN=1dd427dd3669e5ff596a1adc66320fab770bb910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:06:fb:76:a8:11:ba:73:aa:ba:90:ef:08:
                    3c:d9:92:bf:a2:a9:ee:58:27:9a:cd:94:98:1a:c0:
                    99:f5:3e:ac:4d:58:bb:07:04:26:8b:0a:89:bc:54:
                    9f:dc:af:18:ec:2b:1e:b1:52:b1:e3:21:5f:82:f0:
                    fc:53:ad:47:cb:22:7d:b9:da:bc:f3:00:6e:bb:73:
                    1d:f9:3d:ba:43:fe:0d:8a:9e:ee:a4:49:16:95:db:
                    9c:e4:2d:bb:bf:e5:a6:6d:79:44:82:bb:06:65:4f:
                    b2:01:72:c7:42:9a:77:6e:a7:ca:3b:ec:95:e6:1a:
                    25:23:b6:01:98:71:f8:6f:a5:98:cd:47:27:c1:d9:
                    cc:28:f4:36:cb:20:8b:16:08:05:9d:a9:b1:0f:f5:
                    74:d7:28:bd:86:9b:dc:36:3f:95:46:c2:b6:35:b6:
                    53:a1:55:d9:b9:ee:e3:01:57:e2:4b:7f:26:46:2f:
                    62:82:8e:7a:6b:e2:e1:3e:c3:d9:99:fb:e6:f9:95:
                    9e:a7:87:b3:ee:f5:c3:db:ac:c6:b7:1e:9f:8d:24:
                    5c:65:15:06:3d:d3:64:49:bb:c2:f9:51:32:56:ae:
                    68:33:72:31:a9:a8:2e:bf:4f:52:17:15:8c:fa:eb:
                    26:de:64:9b:84:a2:eb:f5:1a:68:30:93:05:34:cf:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:27:DD:36:69:E5:FF:59:6A:1A:DC:66:32:0F:AB:77:0B:B9:10
            X509v3 Authority Key Identifier:
                keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:84:35:e1:87:c0:68:d0:77:68:50:01:d6:14:f4:00:d3:
         c9:27:59:52:18:b1:a0:74:f4:dd:1a:18:93:12:02:b8:f0:c8:
         ce:e8:b1:5a:10:59:74:72:30:a8:69:23:ea:94:f2:f8:6c:ea:
         ae:a2:ca:36:7b:03:01:b6:ee:e6:cf:0c:9b:a0:87:14:3d:87:
         4e:d2:93:55:8e:5e:07:3c:cd:2f:fe:ad:cc:6e:00:e6:15:d2:
         89:14:b9:f1:7d:16:e1:1b:5a:bd:73:f8:f2:e0:7c:a5:b9:1d:
         a4:3b:f7:f2:62:d6:c5:c2:d1:5f:8b:45:f7:e2:42:e3:57:91:
         5a:ca:c5:cf:1a:54:b8:a0:6a:91:d5:99:20:eb:4f:e4:c3:64:
         79:bf:82:09:c5:a3:0b:6b:24:99:9c:56:b9:b5:90:39:0e:41:
         5f:34:5f:a3:88:23:2a:3f:8b:a5:3d:f3:28:45:1a:21:48:ef:
         fa:60:d7:9d:b5:bf:a4:72:d2:4f:bf:b3:9d:7c:a1:7a:7c:dd:
         a6:94:2b:d9:51:9d:e1:52:18:4d:a7:4a:6c:da:29:84:6e:d9:
         e1:5f:62:cf:48:27:ed:a8:10:58:4e:01:99:55:7b:b6:d5:e6:
         66:dd:8e:91:61:d3:e0:57:fd:84:d0:48:e6:3d:77:59:74:9e:
         34:6d:0f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQyzvojfqkKKqDvBqOFsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MjlhNTg4NmYyZjRlOTdkYmRkNWYwOWU4ODk2NjBjM2I2
ZTEzM2IwHhcNMjUwODA3MTYwMDI4WhcNMjUwODA4MTYwMDI4WjAzMTEwLwYDVQQD
EygxZGQ0MjdkZDM2NjllNWZmNTk2YTFhZGM2NjMyMGZhYjc3MGJiOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGEG+3aoEbpzqrqQ7wg82ZK/oqnu
WCeazZSYGsCZ9T6sTVi7BwQmiwqJvFSf3K8Y7CsesVKx4yFfgvD8U61HyyJ9udq8
8wBuu3Md+T26Q/4Nip7upEkWlduc5C27v+WmbXlEgrsGZU+yAXLHQpp3bqfKO+yV
5holI7YBmHH4b6WYzUcnwdnMKPQ2yyCLFggFnamxD/V01yi9hpvcNj+VRsK2NbZT
oVXZue7jAVfiS38mRi9igo56a+LhPsPZmfvm+ZWep4ez7vXD26zGtx6fjSRcZRUG
PdNkSbvC+VEyVq5oM3Ixqaguv09SFxWM+usm3mSbhKLr9RpoMJMFNM8qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3UJ902aeX/WWoa3GYyD6t3C7kQMB8GA1UdIwQY
MBaAFGkppYhvL06X291fCeiJZgw7bhM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82ZGNjMDctZDJhMy00ZTk0LTg0NmEt
MjYxZmJiYzkzMDY2LzEvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82ZGNjMDctZDJhMy00ZTk0LTg0NmEtMjYxZmJiYzkzMDY2
LzEvYVNtbGlHOHZUcGZiM1Y4SjZJbG1ERHR1RXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafmENeGH
wGjQd2hQAdYU9ADTySdZUhixoHT03RoYkxICuPDIzuixWhBZdHIwqGkj6pTy+Gzq
rqLKNnsDAbbu5s8Mm6CHFD2HTtKTVY5eBzzNL/6tzG4A5hXSiRS58X0W4RtavXP4
8uB8pbkdpDv38mLWxcLRX4tF9+JC41eRWsrFzxpUuKBqkdWZIOtP5MNkeb+CCcWj
C2skmZxWubWQOQ5BXzRfo4gjKj+LpT3zKEUaIUjv+mDXnbW/pHLST7+znXyhenzd
ppQr2VGd4VIYTadKbNophG7Z4V9iz0gn7agQWE4BmVV7ttXmZt2OkWHT4Ff9hNBI
5j13WXSeNG0PTg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:33 2025 by rpki-client