Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File:                     r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier:          7vYQIGoykUsJaEuvjxaShaCDKAEIBQGs5RlRSx1yGCQ=
Subject key identifier:   56:A4:B7:63:8A:94:55:3F:1A:90:40:75:24:E8:C7:9B:38:2D:43:60
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer:       /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial:       0198488980734FA789EC3152BBF3BA34C8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number:          A0
Signing time:             Sat 26 Jul 2025 21:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:27 +0000
Files and hashes:         1: Hfyt8Qxc-gVePz7GLADpDZ9etco.roa (hash: uR8oD8fOmYTQyMejXkLhA4C3sZCjQppq7tu7DlOn9C8=)
                          2: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: jc+1cPmjAyYgdtZVApjYi0/cygSmwSWcOByOKk4mTG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:80:73:4f:a7:89:ec:31:52:bb:f3:ba:34:c8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
        Validity
            Not Before: Jul 26 21:00:27 2025 GMT
            Not After : Jul 27 21:00:27 2025 GMT
        Subject: CN=56a4b7638a94553f1a90407524e8c79b382d4360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:45:20:09:e6:dc:1a:f0:58:aa:f0:3e:00:
                    60:0d:e6:5b:ec:00:d3:46:6d:11:43:bf:fa:48:4e:
                    06:d3:3a:30:22:fe:e9:0a:09:d4:55:d0:d6:3d:e5:
                    96:11:72:dc:07:f1:37:fe:0d:f6:4a:aa:c9:be:bc:
                    7e:1c:e2:c0:d0:2e:c4:4e:b3:fc:ab:aa:b6:87:de:
                    f3:3f:13:35:31:e0:95:fa:4b:9e:6a:f2:ff:9a:e2:
                    ff:c2:6b:3d:ee:c4:d4:ef:04:ea:66:23:d1:90:8b:
                    10:24:be:6e:8f:ad:87:33:70:e3:1f:07:0d:d8:98:
                    bf:ab:dd:50:d7:99:59:83:ac:cf:23:a1:37:37:aa:
                    15:57:36:ce:05:c0:f3:cc:83:d6:d8:91:bc:67:06:
                    f2:98:4c:7f:a6:70:26:72:df:eb:aa:3a:b1:a3:b3:
                    23:64:40:d6:75:7b:20:5c:fe:a4:c4:80:55:94:cf:
                    17:57:52:5b:42:af:b2:e3:4e:7a:df:4a:9b:df:11:
                    6f:7e:48:8c:96:74:d0:60:14:80:b0:38:43:a2:65:
                    f4:44:b0:41:73:98:63:79:d6:5b:46:19:67:6d:76:
                    46:d4:71:28:66:09:fd:f5:14:5d:24:c8:7d:74:ac:
                    7b:0a:3b:ce:d0:96:30:cd:ac:c2:6c:16:6d:51:f7:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:B7:63:8A:94:55:3F:1A:90:40:75:24:E8:C7:9B:38:2D:43:60
            X509v3 Authority Key Identifier:
                keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:2f:75:1b:7b:e2:d9:d0:e8:19:c9:28:33:f4:7c:0e:40:
         0c:f8:89:a5:f9:6b:bc:ce:3f:19:01:df:3d:cc:7d:5c:1b:f7:
         00:b0:dd:f9:76:86:fa:d5:77:7d:10:d6:f5:0f:8c:3b:10:bc:
         bc:60:70:f9:91:62:67:5c:68:90:8b:fa:ca:d6:87:b6:62:90:
         c8:11:b5:8d:27:dc:83:a1:eb:40:6c:33:a6:0a:7b:1f:57:38:
         26:4e:f7:66:70:25:1f:51:8d:4a:26:21:ef:c9:12:14:bc:06:
         8a:7e:e1:81:4c:7d:78:76:52:8f:c0:c5:ab:c3:73:4a:62:b3:
         2c:42:05:68:81:af:95:52:06:dc:d3:02:55:83:ae:dc:9e:68:
         ef:e4:bc:4b:fa:1d:2a:b2:fb:d4:b5:2a:21:75:21:3f:c2:04:
         4c:e0:84:08:5d:c5:cd:16:1b:54:16:4e:80:89:91:08:35:17:
         8b:ad:52:5e:31:ce:30:22:89:2c:2e:4a:d8:87:41:a8:79:d2:
         6e:a1:e5:41:17:5a:be:48:e9:a5:9b:f7:9a:2a:20:f2:81:71:
         ea:b6:bf:3f:f5:84:16:f3:d1:04:33:ff:37:0e:b5:2a:51:37:
         93:09:41:f8:1b:9f:1b:b0:85:3e:1f:9e:1b:02:4c:50:74:f2:
         81:c4:24:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiYBzT6eJ7DFSu/O6NMjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmMyYmU3YmY0MjgyZTFjZDY5MDhmMjg5YTc5Y2VjMGE1
ZGY0MmUwHhcNMjUwNzI2MjEwMDI3WhcNMjUwNzI3MjEwMDI3WjAzMTEwLwYDVQQD
Eyg1NmE0Yjc2MzhhOTQ1NTNmMWE5MDQwNzUyNGU4Yzc5YjM4MmQ0MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8NFIAnm3BrwWKrwPgBgDeZb7ADT
Rm0RQ7/6SE4G0zowIv7pCgnUVdDWPeWWEXLcB/E3/g32SqrJvrx+HOLA0C7ETrP8
q6q2h97zPxM1MeCV+kueavL/muL/wms97sTU7wTqZiPRkIsQJL5uj62HM3DjHwcN
2Ji/q91Q15lZg6zPI6E3N6oVVzbOBcDzzIPW2JG8ZwbymEx/pnAmct/rqjqxo7Mj
ZEDWdXsgXP6kxIBVlM8XV1JbQq+y405630qb3xFvfkiMlnTQYBSAsDhDomX0RLBB
c5hjedZbRhlnbXZG1HEoZgn99RRdJMh9dKx7CjvO0JYwzazCbBZtUfebEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFakt2OKlFU/GpBAdSTox5s4LUNgMB8GA1UdIwQY
MBaAFK9sK+e/QoLhzWkI8omnnOwKXfQuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt
MGQ4ZWJjZTg2Y2FjLzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj
LzEvcjJ3cjU3OUNndUhOYVFqeWlhZWM3QXBkOUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMEvdRt7
4tnQ6BnJKDP0fA5ADPiJpflrvM4/GQHfPcx9XBv3ALDd+XaG+tV3fRDW9Q+MOxC8
vGBw+ZFiZ1xokIv6ytaHtmKQyBG1jSfcg6HrQGwzpgp7H1c4Jk73ZnAlH1GNSiYh
78kSFLwGin7hgUx9eHZSj8DFq8NzSmKzLEIFaIGvlVIG3NMCVYOu3J5o7+S8S/od
KrL71LUqIXUhP8IETOCECF3FzRYbVBZOgImRCDUXi61SXjHOMCKJLC5K2IdBqHnS
bqHlQRdavkjppZv3miog8oFx6ra/P/WEFvPRBDP/Nw61KlE3kwlB+BufG7CFPh+e
GwJMUHTygcQkrg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:05 2025 by rpki-client