Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File:                     AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier:          plWJoTjLBpUH3tk7+HOu+iCfsr6QoJlrHOepjXmUs1k=
Subject key identifier:   6A:28:03:BA:A8:5B:A5:BF:44:6B:E3:72:E0:E8:69:17:F8:D2:66:59
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer:       /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial:       0198499C30644F0E7432076F15FDCFD24891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 02:00:29 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:29 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:29 +0000
Files and hashes:         1: 0hK3wBSxWrzCK9XVRCjqAk7iR3E.roa (hash: Mgc0oHHsHOO9ITKbdZfi4fNvcPC7tfyysZUz/pdAbRc=)
                          2: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: pozg5eqhMlJayAEQzME4lIw8yDB01DDeOUfeyL1mahE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:30:64:4f:0e:74:32:07:6f:15:fd:cf:d2:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
        Validity
            Not Before: Jul 27 02:00:29 2025 GMT
            Not After : Jul 28 02:00:29 2025 GMT
        Subject: CN=6a2803baa85ba5bf446be372e0e86917f8d26659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0a:9a:44:f8:82:94:35:be:8e:40:e6:a2:d8:
                    1c:5d:ae:23:cc:66:65:7e:2d:6b:1e:9f:1f:bf:9d:
                    23:b9:45:74:dc:78:24:be:f4:6f:7e:03:4a:83:69:
                    b2:55:6d:b4:d0:d3:01:59:e4:da:46:76:3b:f6:b2:
                    79:da:24:fa:5f:2a:e0:46:4e:8a:09:83:40:e4:db:
                    9f:36:5e:fc:3c:ee:ab:f5:ea:0c:18:0a:aa:a1:bc:
                    9e:46:d2:c1:e6:89:c6:77:5b:ec:39:0b:2b:88:43:
                    72:b1:5b:fc:ad:d0:6c:0a:8b:ef:1c:c9:d8:6d:36:
                    40:2f:b0:ee:3a:a9:59:75:78:65:56:aa:e5:dd:1e:
                    4e:26:6d:3d:51:63:e8:76:96:57:63:aa:0c:f6:a8:
                    d5:0f:e9:f1:36:02:9c:61:0d:10:d9:2f:6a:1b:1a:
                    54:aa:2e:d4:dc:2b:85:c4:e2:92:0c:9c:7a:6a:c3:
                    eb:06:94:cb:ac:b8:86:d5:b4:f1:6b:58:6d:e8:20:
                    3a:d1:19:41:56:13:fa:4e:f4:c4:e4:cb:9c:5c:84:
                    8c:85:37:1c:ec:d0:32:6a:8a:7a:99:5e:59:c4:c6:
                    51:60:4b:04:79:23:e2:c4:98:7c:97:b7:9a:83:51:
                    76:51:ac:4c:83:35:bb:89:96:64:11:e3:88:08:d8:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:28:03:BA:A8:5B:A5:BF:44:6B:E3:72:E0:E8:69:17:F8:D2:66:59
            X509v3 Authority Key Identifier:
                keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:24:ea:f4:95:07:3f:25:c1:91:3c:6b:d7:d4:6c:23:a4:
         a0:66:67:08:74:6c:3f:da:b5:2b:17:ff:d3:1e:d0:c5:ea:ec:
         93:c9:a6:ee:3a:6d:77:5e:7f:04:bf:28:03:18:50:a0:93:d1:
         73:4c:f6:a1:a9:fc:29:3a:db:85:a5:63:3b:79:ec:db:78:5a:
         13:eb:17:0d:b5:ed:4c:ab:8e:f6:19:c0:de:1a:fe:86:b3:43:
         ff:f4:b4:dd:d0:7c:b8:e6:92:63:78:97:67:d3:5f:93:16:a9:
         9e:78:0c:98:f2:04:04:a0:ef:2f:31:c7:d0:ba:aa:95:c1:5c:
         19:e2:93:bb:28:44:0e:b2:69:d8:f0:e5:3b:b8:73:53:57:46:
         66:c3:64:3a:6e:42:b6:92:52:74:b1:5c:12:39:ac:f1:32:5a:
         9f:bf:7a:a8:75:cd:f9:11:61:cb:ff:fb:1f:20:62:3a:1a:c2:
         85:ef:a5:3b:2d:0b:24:c5:ba:d5:5d:f0:d0:32:25:62:16:a9:
         ca:53:01:01:71:ba:cc:6d:cf:43:8e:31:ba:e7:10:f4:94:3b:
         28:02:af:30:ac:b2:d7:34:7e:db:66:93:43:15:b4:ab:7b:5d:
         6c:a0:ee:49:f8:57:d9:45:f5:00:ac:e6:32:c1:4b:3a:da:d6:
         91:76:14:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnDBkTw50MgdvFf3P0kiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjNmYTJhYjg5MDFiNDE1ZTEwODM4ODcyYzYzZDlmMGNl
MTM2YWQwHhcNMjUwNzI3MDIwMDI5WhcNMjUwNzI4MDIwMDI5WjAzMTEwLwYDVQQD
Eyg2YTI4MDNiYWE4NWJhNWJmNDQ2YmUzNzJlMGU4NjkxN2Y4ZDI2NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswqaRPiClDW+jkDmotgcXa4jzGZl
fi1rHp8fv50juUV03HgkvvRvfgNKg2myVW200NMBWeTaRnY79rJ52iT6XyrgRk6K
CYNA5NufNl78PO6r9eoMGAqqobyeRtLB5onGd1vsOQsriENysVv8rdBsCovvHMnY
bTZAL7DuOqlZdXhlVqrl3R5OJm09UWPodpZXY6oM9qjVD+nxNgKcYQ0Q2S9qGxpU
qi7U3CuFxOKSDJx6asPrBpTLrLiG1bTxa1ht6CA60RlBVhP6TvTE5MucXISMhTcc
7NAyaop6mV5ZxMZRYEsEeSPixJh8l7eag1F2UaxMgzW7iZZkEeOICNiIiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGooA7qoW6W/RGvjcuDoaRf40mZZMB8GA1UdIwQY
MBaAFAGz+iq4kBtBXhCDiHLGPZ8M4TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYt
ODFlY2I0OTBmYjg2LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS80MmJkYTYtYTVkYS00NzFiLWEzYmYtODFlY2I0OTBmYjg2
LzEvQWJQNktyaVFHMEZlRUlPSWNzWTlud3poTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQngk6vSV
Bz8lwZE8a9fUbCOkoGZnCHRsP9q1Kxf/0x7Qxersk8mm7jptd15/BL8oAxhQoJPR
c0z2oan8KTrbhaVjO3ns23haE+sXDbXtTKuO9hnA3hr+hrND//S03dB8uOaSY3iX
Z9NfkxapnngMmPIEBKDvLzHH0LqqlcFcGeKTuyhEDrJp2PDlO7hzU1dGZsNkOm5C
tpJSdLFcEjms8TJan796qHXN+RFhy//7HyBiOhrChe+lOy0LJMW61V3w0DIlYhap
ylMBAXG6zG3PQ44xuucQ9JQ7KAKvMKyy1zR+22aTQxW0q3tdbKDuSfhX2UX1AKzm
MsFLOtrWkXYUJA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:39:40 2025 by rpki-client