Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          JT5vCcpi5cbr8Pu37AWSpwgYaloKsNj60ipcUl0bCFc=
Subject key identifier:   94:C6:C0:FF:BC:EF:DA:1A:FA:95:02:FD:20:37:7A:F8:E0:75:92:C6
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       019847E484D774A9BA32F2428403DF7695D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          1496
Signing time:             Sat 26 Jul 2025 18:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:15 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: wz9k0wkkNHW+dRnSFfGd9o7K/6kuLetXKV7AH9jJ00E=)
                          2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:84:d7:74:a9:ba:32:f2:42:84:03:df:76:95:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Jul 26 18:00:15 2025 GMT
            Not After : Jul 27 18:00:15 2025 GMT
        Subject: CN=94c6c0ffbcefda1afa9502fd20377af8e07592c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:98:db:db:79:c2:a6:9e:63:ab:fc:6b:52:
                    c2:d1:8a:d4:44:c2:88:c6:12:7e:39:97:36:09:e3:
                    2c:c2:e3:71:b7:28:b4:2a:45:18:26:26:73:81:69:
                    b0:99:8c:42:ba:e3:d0:53:9b:80:3f:ce:4b:0b:aa:
                    1c:5e:59:ca:65:74:95:4d:9b:15:dc:57:cc:5d:ff:
                    ee:ff:88:a9:c3:e2:be:c3:56:d7:b8:39:3d:7a:12:
                    68:b5:5a:ce:46:89:2c:56:37:fb:73:14:b4:f0:8e:
                    5c:b6:57:18:f1:9d:83:f2:c1:df:c8:00:6f:e9:11:
                    07:76:20:df:67:ac:84:da:34:7c:33:99:b8:ed:77:
                    40:b9:50:0c:0b:49:c7:3f:ea:ad:7f:26:b9:7b:06:
                    b4:6b:db:85:1c:79:e3:ee:26:2a:94:c9:0c:75:40:
                    49:f2:39:c5:ac:e0:da:36:1f:df:1f:1f:11:c5:0c:
                    42:7b:a3:4d:b7:73:c7:8a:0c:35:ac:16:50:94:66:
                    fe:37:8f:8b:05:61:30:3c:fb:d8:09:ae:2b:8a:13:
                    59:9d:25:03:1b:ee:ac:a5:5b:4a:4e:39:31:b6:83:
                    de:dc:ab:ce:27:e4:ec:1f:b5:34:49:65:dd:eb:5a:
                    f0:aa:c4:3d:21:8d:b8:a2:7d:bc:18:b2:60:b4:d1:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C6:C0:FF:BC:EF:DA:1A:FA:95:02:FD:20:37:7A:F8:E0:75:92:C6
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:75:0b:65:48:b1:c2:c6:f2:c4:58:fe:68:8a:03:33:c8:
         cb:b1:0e:a2:c0:de:04:e3:57:7c:07:e1:1b:ab:a7:e7:b2:68:
         49:01:23:ce:95:31:ea:fd:35:81:06:34:1c:a3:b9:a8:13:1f:
         68:ef:79:05:16:68:0f:d0:1b:ab:d1:41:e6:84:36:5d:fc:98:
         98:7a:b6:af:d3:73:33:1e:0a:02:99:b3:4b:67:0b:88:8d:93:
         59:8d:26:90:75:08:69:7c:f8:44:e6:06:fd:a6:c2:e2:ba:47:
         7b:49:6f:be:c5:f9:df:91:56:38:bf:d5:f4:f0:46:65:75:a8:
         38:a2:05:a2:72:7c:88:93:c4:4e:13:5d:d1:c9:1e:8e:d8:92:
         18:aa:03:d9:40:45:7a:4f:8b:7a:e0:41:d8:83:bc:71:39:16:
         10:21:b9:7f:e9:ce:2f:c4:8f:89:f6:2d:73:14:95:82:41:91:
         a1:3d:d7:b5:72:0a:39:8a:55:d8:61:5e:0e:e7:1f:a0:ad:7f:
         a7:1a:bb:89:7b:0d:9e:d3:2f:52:e7:a5:10:49:27:e9:ee:36:
         03:3d:8e:fb:3e:e0:53:e4:e7:c1:da:4b:f0:c3:c7:10:31:60:
         94:00:4f:3d:44:20:84:19:b4:fd:58:d1:94:cb:ef:19:a1:a6:
         77:42:91:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5ITXdKm6MvJChAPfdpXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMDU4MWVhYTk2OTAzNmMzM2Y5MmViYzQ4NDRkYzIyYzU1
ZTc1MTMwHhcNMjUwNzI2MTgwMDE1WhcNMjUwNzI3MTgwMDE1WjAzMTEwLwYDVQQD
Eyg5NGM2YzBmZmJjZWZkYTFhZmE5NTAyZmQyMDM3N2FmOGUwNzU5MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq6Y29t5wqaeY6v8a1LC0YrURMKI
xhJ+OZc2CeMswuNxtyi0KkUYJiZzgWmwmYxCuuPQU5uAP85LC6ocXlnKZXSVTZsV
3FfMXf/u/4ipw+K+w1bXuDk9ehJotVrORoksVjf7cxS08I5ctlcY8Z2D8sHfyABv
6REHdiDfZ6yE2jR8M5m47XdAuVAMC0nHP+qtfya5ewa0a9uFHHnj7iYqlMkMdUBJ
8jnFrODaNh/fHx8RxQxCe6NNt3PHigw1rBZQlGb+N4+LBWEwPPvYCa4rihNZnSUD
G+6spVtKTjkxtoPe3KvOJ+TsH7U0SWXd61rwqsQ9IY24on28GLJgtNH1qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTGwP+879oa+pUC/SA3evjgdZLGMB8GA1UdIwQY
MBaAFAMFgeqpaQNsM/kuvEhE3CLFXnUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEt
ZDg0YjJiMWU5MTMzLzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjU1OGItNGE2Yi00ODI3LThmMDEtZDg0YjJiMWU5MTMz
LzEvQXdXQjZxbHBBMnd6LVM2OFNFVGNJc1ZlZFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuB1C2VI
scLG8sRY/miKAzPIy7EOosDeBONXfAfhG6un57JoSQEjzpUx6v01gQY0HKO5qBMf
aO95BRZoD9Abq9FB5oQ2XfyYmHq2r9NzMx4KApmzS2cLiI2TWY0mkHUIaXz4ROYG
/abC4rpHe0lvvsX535FWOL/V9PBGZXWoOKIFonJ8iJPEThNd0ckejtiSGKoD2UBF
ek+LeuBB2IO8cTkWECG5f+nOL8SPifYtcxSVgkGRoT3XtXIKOYpV2GFeDucfoK1/
pxq7iXsNntMvUuelEEkn6e42Az2O+z7gU+TnwdpL8MPHEDFglABPPUQghBm0/VjR
lMvvGaGmd0KRhg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:45 2025 by rpki-client