Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
File:                     AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft (raw, json)
Hash identifier:          ysimFeMYxKKGyHnjo99nbX2ZMBF0PdBBUScDLNxpbTc=
Subject key identifier:   FA:AD:65:19:8A:67:FB:8C:5C:04:62:94:DB:4C:73:C2:FC:EA:84:0A
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Certificate issuer:       /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial:       019849652AABB09523329B9FB201FEB5E20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
Manifest number:          0C9A
Signing time:             Sun 27 Jul 2025 01:00:23 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:23 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:23 +0000
Files and hashes:         1: AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl (hash: fkkv5oQNu73bC0TWkJ37NO6Nwg+YZuRq6G6blv4K2O8=)
                          2: xp3MLkw6oQ1O74Xmt4QPNYMRgUo.roa (hash: /pg5KPvZDcy/WFS+OnIBTt8dSXtHgvFhtv8p2k/BYPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:2a:ab:b0:95:23:32:9b:9f:b2:01:fe:b5:e2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
        Validity
            Not Before: Jul 27 01:00:23 2025 GMT
            Not After : Jul 28 01:00:23 2025 GMT
        Subject: CN=faad65198a67fb8c5c046294db4c73c2fcea840a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:9b:b2:0e:e3:d7:95:37:12:5a:37:5c:c0:
                    ae:72:03:41:6d:5b:30:5a:2c:80:b6:ab:bb:86:98:
                    9d:ee:3e:41:7b:ef:36:b4:c5:a7:91:60:3b:21:a5:
                    67:2d:77:60:e7:17:e8:5a:3e:c3:4b:6f:58:ca:d3:
                    cb:e8:2e:87:85:58:b9:5f:f0:a5:80:70:42:85:30:
                    47:ff:ef:2c:9f:37:35:90:0f:be:3f:fa:7d:61:4d:
                    3f:b1:ba:14:89:02:a9:b4:d9:c3:b1:3a:7d:5b:28:
                    b5:0c:dc:37:a9:53:75:20:6c:f8:f4:14:1c:61:32:
                    3c:37:25:82:aa:14:6d:26:aa:26:39:6e:55:cf:61:
                    27:48:18:8a:ce:45:da:4f:e0:6e:2c:9f:26:ba:80:
                    e8:6e:6c:23:ec:44:ab:45:ce:0f:73:95:ee:07:68:
                    cf:53:23:17:c2:8e:57:fb:8d:a1:4a:b4:37:61:4a:
                    39:28:00:8f:f6:cc:07:a0:89:1b:bc:0a:05:2d:f9:
                    41:ed:b6:1f:b9:f2:5e:5c:16:ed:c8:ab:a8:a5:07:
                    0e:15:ae:16:66:75:da:ff:70:41:ad:04:d7:59:ce:
                    23:87:4f:1f:58:2e:97:2a:76:18:73:fa:14:39:bd:
                    0e:fc:6d:bf:2e:15:d7:ee:76:a5:9c:4f:ab:39:ce:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AD:65:19:8A:67:FB:8C:5C:04:62:94:DB:4C:73:C2:FC:EA:84:0A
            X509v3 Authority Key Identifier:
                keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:64:e4:2f:ae:90:33:be:e2:bd:1b:a3:ee:7e:ef:ec:19:ae:
         10:e4:8a:a5:4b:ca:56:a4:36:4e:ea:f2:c4:fd:a0:49:5c:0f:
         0b:db:92:ba:66:42:de:76:c9:65:bb:1d:fd:85:0f:f8:b6:08:
         ca:70:6d:73:05:8f:88:e6:07:07:53:20:d1:07:b8:62:65:dd:
         98:69:03:e2:42:b1:93:a3:05:ff:78:f0:76:9a:cd:10:a2:f3:
         12:c9:4a:17:98:e3:fc:dd:cb:c0:dd:19:d2:54:e2:2f:c9:ad:
         59:01:06:74:7c:90:26:ae:88:23:57:f3:32:87:7a:be:1a:80:
         dd:86:98:9d:0f:53:c9:9a:d4:c1:24:6a:31:f3:05:7a:1d:df:
         bd:97:0a:6a:f4:b3:d4:cb:f7:17:8a:d3:9f:aa:00:6f:41:7d:
         08:29:6a:8e:f7:4a:4f:66:55:fb:c8:c3:a5:cd:67:7c:6e:89:
         da:a1:38:a1:10:dc:e3:60:e7:1a:05:21:85:df:9e:17:07:00:
         9b:66:5a:3f:e6:b8:d2:74:3a:08:2f:7e:5b:68:ea:f1:4e:f8:
         a2:f2:19:95:de:0f:72:02:6a:50:0a:05:ab:ad:bd:ae:ea:e8:
         e5:5a:6b:2a:39:d4:d4:18:67:aa:88:38:c6:26:78:e2:ce:cd:
         3d:01:7a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:33 2025 by rpki-client