Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
File:                     RgxXERGq_A1R5f3ggjC_eLieSkg.mft (raw, json)
Hash identifier:          ot7srA4u82Plwy4WoMchdxc1rFFfH+d0D3uWIzADa20=
Subject key identifier:   C5:92:28:98:B4:43:5B:5E:4C:05:AC:B0:98:61:18:29:8F:38:EF:10
Authority key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48
Certificate issuer:       /CN=460c571111aafc0d51e5fde08230bf78b89e4a48
Certificate serial:       019881687B712DD0D84C9707A5DB5D79AE9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 22:02:44 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:44 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:44 +0000
Files and hashes:         1: RgxXERGq_A1R5f3ggjC_eLieSkg.crl (hash: jvc0ZpY59hTGj7y/HHWVBmNmj34gMpN0/67DNt+DPBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:7b:71:2d:d0:d8:4c:97:07:a5:db:5d:79:ae:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460c571111aafc0d51e5fde08230bf78b89e4a48
        Validity
            Not Before: Aug  6 22:02:44 2025 GMT
            Not After : Aug  7 22:02:44 2025 GMT
        Subject: CN=c5922898b4435b5e4c05acb0986118298f38ef10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:0f:f9:19:a6:30:de:ed:04:08:c9:1a:aa:
                    3b:81:6b:d8:8f:56:1c:75:51:24:aa:90:78:9a:bc:
                    2b:41:3e:1e:d0:0a:22:be:fc:4b:b4:a2:ec:2b:80:
                    af:bf:2e:e7:3e:62:bc:ab:33:70:7b:5f:51:76:0f:
                    9c:f3:15:b7:7c:6f:cf:75:78:18:14:d1:94:b3:71:
                    c9:b5:c6:c5:b7:11:c0:f5:21:50:5d:8b:5b:50:e1:
                    f9:04:b4:ff:8e:11:cf:7a:69:8b:35:dc:1a:e2:eb:
                    b9:fc:91:d1:ed:07:b4:9c:06:b1:3e:3c:59:86:ba:
                    37:34:b3:e2:1f:da:ea:a7:02:91:94:54:9d:1c:0f:
                    f8:ca:5f:dd:a4:c5:d7:d0:40:4d:4f:62:3f:cb:d3:
                    44:a0:2e:5e:ec:52:f3:db:78:6f:6e:24:e2:c8:51:
                    49:08:76:af:b3:77:ee:66:54:48:cc:7c:a3:77:e8:
                    b2:24:ac:a7:07:9e:bf:3d:05:27:80:79:85:8f:01:
                    0c:3c:cd:a7:ad:4f:25:e0:bf:a6:38:d6:0b:c6:5e:
                    92:c5:4d:81:33:c6:54:16:17:ea:07:38:6c:3f:6f:
                    d6:26:49:ab:bd:09:06:9c:fc:8b:c7:b7:fc:7e:f3:
                    4b:ca:b7:d8:e5:85:af:91:5d:27:86:18:67:d5:b5:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:92:28:98:B4:43:5B:5E:4C:05:AC:B0:98:61:18:29:8F:38:EF:10
            X509v3 Authority Key Identifier:
                keyid:46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:46:78:2f:f5:43:e6:12:7f:03:02:70:55:1b:87:0f:ac:a0:
         b9:a1:91:1b:af:34:2a:f1:5a:dc:af:ee:aa:f7:57:ce:1b:a6:
         e3:24:51:05:ac:f6:3c:33:ca:27:c0:3d:8e:18:fa:3a:63:dd:
         bc:13:62:25:36:ea:83:ba:8c:23:88:65:d3:06:9a:63:2d:e6:
         74:8f:33:2f:d8:3d:ac:d9:43:b3:b9:6b:c9:cb:82:e5:7a:e7:
         9c:cc:60:dc:97:bc:dd:e9:f0:82:db:ec:a6:c6:a9:71:1c:23:
         35:e1:bf:39:1f:9a:e1:9a:7e:27:c8:2d:9e:f4:99:7e:4a:02:
         75:45:70:f6:74:06:7f:fa:2e:cb:41:6a:b3:e3:96:70:5f:52:
         ba:39:a7:49:fd:7c:2e:ac:70:f1:c8:6b:17:46:0e:2b:5e:ba:
         cc:94:d3:0b:c7:78:90:b8:ca:fa:bb:ff:56:1e:2c:bf:70:f4:
         02:55:c1:7a:3a:ba:e0:2d:39:a1:2e:76:ca:2b:7c:da:2f:b2:
         2f:ec:15:b2:a7:72:08:88:ef:af:85:88:76:92:a0:0b:31:6b:
         5f:3d:c4:7b:48:38:c9:1c:5d:ed:0e:1c:19:13:27:5d:ce:0d:
         4e:0f:25:2e:4f:4b:f9:e2:90:6f:bd:87:56:81:a3:36:f0:b0:
         61:0f:8c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaHtxLdDYTJcHpdtdea6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGM1NzExMTFhYWZjMGQ1MWU1ZmRlMDgyMzBiZjc4Yjg5
ZTRhNDgwHhcNMjUwODA2MjIwMjQ0WhcNMjUwODA3MjIwMjQ0WjAzMTEwLwYDVQQD
EyhjNTkyMjg5OGI0NDM1YjVlNGMwNWFjYjA5ODYxMTgyOThmMzhlZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsMP+RmmMN7tBAjJGqo7gWvYj1Yc
dVEkqpB4mrwrQT4e0AoivvxLtKLsK4Cvvy7nPmK8qzNwe19Rdg+c8xW3fG/PdXgY
FNGUs3HJtcbFtxHA9SFQXYtbUOH5BLT/jhHPemmLNdwa4uu5/JHR7Qe0nAaxPjxZ
hro3NLPiH9rqpwKRlFSdHA/4yl/dpMXX0EBNT2I/y9NEoC5e7FLz23hvbiTiyFFJ
CHavs3fuZlRIzHyjd+iyJKynB56/PQUngHmFjwEMPM2nrU8l4L+mONYLxl6SxU2B
M8ZUFhfqBzhsP2/WJkmrvQkGnPyLx7f8fvNLyrfY5YWvkV0nhhhn1bX5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWSKJi0Q1teTAWssJhhGCmPOO8QMB8GA1UdIwQY
MBaAFEYMVxERqvwNUeX94IIwv3i4nkpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQt
YmQyZmZmNWI4ODQ5LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wNjllOTUtMGFjMi00YzI3LTgyYjQtYmQyZmZmNWI4ODQ5
LzEvUmd4WEVSR3FfQTFSNWYzZ2dqQ19lTGllU2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEZ4L/VD
5hJ/AwJwVRuHD6yguaGRG680KvFa3K/uqvdXzhum4yRRBaz2PDPKJ8A9jhj6OmPd
vBNiJTbqg7qMI4hl0waaYy3mdI8zL9g9rNlDs7lrycuC5XrnnMxg3Je83enwgtvs
psapcRwjNeG/OR+a4Zp+J8gtnvSZfkoCdUVw9nQGf/ouy0Fqs+OWcF9SujmnSf18
Lqxw8chrF0YOK166zJTTC8d4kLjK+rv/Vh4sv3D0AlXBejq64C05oS52yit82i+y
L+wVsqdyCIjvr4WIdpKgCzFrXz3Ee0g4yRxd7Q4cGRMnXc4NTg8lLk9L+eKQb72H
VoGjNvCwYQ+MYQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:31 2025 by rpki-client