Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File:                     DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier:          HtbKqxHfRZUia2nBqjN+8PwQYKcx7RqoZce3Hw0Xb9I=
Subject key identifier:   BC:70:C7:63:14:8F:56:BF:41:9E:23:97:41:48:2F:56:B5:39:74:A5
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer:       /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial:       0198A0F21A7B717D28471132C46D272B3705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number:          01F5
Signing time:             Wed 13 Aug 2025 01:01:17 +0000
Manifest this update:     Wed 13 Aug 2025 01:01:17 +0000
Manifest next update:     Thu 14 Aug 2025 01:01:17 +0000
Files and hashes:         1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: ynSwQgqNU+AZIA5AwtvyBvdriiGI4L8eEovH1T73+zY=)
                          2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f2:1a:7b:71:7d:28:47:11:32:c4:6d:27:2b:37:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
        Validity
            Not Before: Aug 13 01:01:17 2025 GMT
            Not After : Aug 14 01:01:17 2025 GMT
        Subject: CN=bc70c763148f56bf419e239741482f56b53974a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:32:04:83:ef:37:c6:f3:77:15:46:ba:b4:
                    06:28:84:01:e2:a8:e5:59:82:46:8f:da:78:60:15:
                    55:8c:63:4d:30:6f:17:a0:66:45:e2:72:5a:1c:2a:
                    3a:5e:c3:2a:9f:26:6d:73:47:48:9b:5d:d7:01:31:
                    07:be:f8:e4:32:a4:96:c5:ca:6b:1a:cc:f0:b8:2a:
                    d2:48:5c:a7:22:84:f2:2b:7c:3e:23:7d:53:f3:15:
                    a6:ef:4c:28:97:e9:66:13:12:72:08:85:79:7e:19:
                    f1:66:9a:ff:61:99:73:47:b1:11:81:40:48:85:9d:
                    11:9e:1d:fd:54:08:39:49:21:25:31:d8:95:af:80:
                    82:2d:54:d8:79:d4:b3:82:ae:ee:c4:eb:5e:fc:77:
                    bd:6d:95:f2:7c:53:da:b4:1e:75:68:1a:f2:74:58:
                    5a:4c:d9:0a:cb:a0:eb:89:50:23:46:c5:f1:33:56:
                    71:21:bc:45:3a:11:7a:43:71:9f:b1:3e:c7:d4:a9:
                    c6:69:32:71:21:7c:a6:3d:e3:29:40:d3:ad:b3:2a:
                    59:3b:14:04:a3:87:49:80:3d:bb:8a:04:89:6b:e6:
                    48:ff:d3:84:ce:b1:aa:06:50:25:a5:ce:f2:1d:f5:
                    c0:fc:a9:6a:6d:b6:e5:86:b9:68:13:e2:82:e6:c4:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:C7:63:14:8F:56:BF:41:9E:23:97:41:48:2F:56:B5:39:74:A5
            X509v3 Authority Key Identifier:
                keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bb:9f:b7:bb:c6:f9:57:d9:d3:c3:cd:54:62:93:b5:62:b6:
         1f:d3:31:f1:90:c3:f5:79:5a:12:fc:45:14:be:66:76:29:04:
         86:1b:c3:fb:dc:e5:70:e1:7c:f4:9f:16:ba:a4:2f:6f:36:eb:
         7d:ff:32:42:04:32:e2:3f:45:fc:79:f9:19:cc:29:2f:5d:33:
         d6:61:5e:72:fb:3e:6e:70:ab:4e:9d:3f:61:f0:72:51:3a:46:
         0e:35:f6:42:f5:27:8b:02:cd:b8:45:a5:06:da:0d:50:a9:85:
         38:f9:00:c4:95:4e:e3:a7:64:41:4a:fc:4f:d9:28:e5:43:f5:
         8c:f0:a0:08:46:2b:ce:6a:1d:2d:ec:af:77:4b:26:9a:f4:c7:
         b1:2e:bb:1c:43:d0:b1:09:ad:c9:c0:28:df:4e:8e:3e:7d:83:
         9c:b1:3a:e6:e7:36:2b:ce:65:07:78:16:6d:f2:b9:46:66:d0:
         b9:c3:a6:58:75:99:9b:d4:1b:c2:74:f0:d2:5e:22:8c:7e:58:
         e4:38:23:c9:54:4c:00:5b:33:a9:06:5f:65:d2:46:7b:5d:e7:
         cf:8d:1c:7a:29:bc:f3:2d:e0:c9:7c:27:66:a9:02:d0:b0:69:
         34:73:be:ec:ca:23:ed:3a:85:3a:e5:b0:b4:a6:ac:be:65:6c:
         79:50:84:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8hp7cX0oRxEyxG0nKzcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz
ZTZhOTgwHhcNMjUwODEzMDEwMTE3WhcNMjUwODE0MDEwMTE3WjAzMTEwLwYDVQQD
EyhiYzcwYzc2MzE0OGY1NmJmNDE5ZTIzOTc0MTQ4MmY1NmI1Mzk3NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx28yBIPvN8bzdxVGurQGKIQB4qjl
WYJGj9p4YBVVjGNNMG8XoGZF4nJaHCo6XsMqnyZtc0dIm13XATEHvvjkMqSWxcpr
GszwuCrSSFynIoTyK3w+I31T8xWm70wol+lmExJyCIV5fhnxZpr/YZlzR7ERgUBI
hZ0Rnh39VAg5SSElMdiVr4CCLVTYedSzgq7uxOte/He9bZXyfFPatB51aBrydFha
TNkKy6DriVAjRsXxM1ZxIbxFOhF6Q3GfsT7H1KnGaTJxIXymPeMpQNOtsypZOxQE
o4dJgD27igSJa+ZI/9OEzrGqBlAlpc7yHfXA/KlqbbblhrloE+KC5sS7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxwx2MUj1a/QZ4jl0FIL1a1OXSlMB8GA1UdIwQY
MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt
ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2
LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbuft7vG
+VfZ08PNVGKTtWK2H9Mx8ZDD9XlaEvxFFL5mdikEhhvD+9zlcOF89J8WuqQvbzbr
ff8yQgQy4j9F/Hn5GcwpL10z1mFecvs+bnCrTp0/YfByUTpGDjX2QvUniwLNuEWl
BtoNUKmFOPkAxJVO46dkQUr8T9ko5UP1jPCgCEYrzmodLeyvd0smmvTHsS67HEPQ
sQmtycAo306OPn2DnLE65uc2K85lB3gWbfK5RmbQucOmWHWZm9QbwnTw0l4ijH5Y
5DgjyVRMAFszqQZfZdJGe13nz40ceim88y3gyXwnZqkC0LBpNHO+7Moj7TqFOuWw
tKasvmVseVCE3w==
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:13 2025 by rpki-client