Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
File:                     aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json)
Hash identifier:          QpNPcW+Cs8oa5jp5IQtzq2Y1faP681dRl6CB9JW8tm0=
Subject key identifier:   CF:2A:CF:4E:53:AC:CD:47:BA:F5:DE:CB:E6:67:C5:B0:8E:44:91:49
Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5
Certificate issuer:       /CN=696193e55638864ed69cd947b750f321674a64a5
Certificate serial:       01984889815CE17BC64FEF7C5530F4395AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
Manifest number:          054C
Signing time:             Sat 26 Jul 2025 21:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:27 +0000
Files and hashes:         1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: g7BOw2ScfPupGfSIyKzZ8QQm5hlbsbBBqlqRIFMOisw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:81:5c:e1:7b:c6:4f:ef:7c:55:30:f4:39:5a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696193e55638864ed69cd947b750f321674a64a5
        Validity
            Not Before: Jul 26 21:00:27 2025 GMT
            Not After : Jul 27 21:00:27 2025 GMT
        Subject: CN=cf2acf4e53accd47baf5decbe667c5b08e449149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:68:35:a5:70:66:36:27:46:b3:c2:d6:75:
                    76:ba:7c:31:a7:6a:5d:a3:ad:29:61:3e:60:c4:a4:
                    d2:f0:71:86:e5:8f:5c:9d:61:23:d2:65:f0:b5:80:
                    c8:bf:f4:dd:63:57:31:2c:61:17:bb:c6:da:38:ec:
                    d4:07:bb:c6:8a:05:eb:e3:00:e3:57:9c:57:ee:be:
                    51:39:f8:5e:57:63:cd:44:21:03:2d:d4:68:08:ca:
                    94:23:d6:53:6a:b4:ea:19:47:bb:b8:80:f6:6b:7a:
                    e1:00:e7:40:60:74:49:85:9d:d7:54:7e:f0:04:2f:
                    d4:0b:89:55:73:62:39:ac:52:ab:41:86:61:d3:11:
                    1f:af:50:57:dc:25:ba:5d:ff:84:eb:b4:28:b9:16:
                    5d:6f:91:43:45:1b:de:cc:40:75:c1:cc:04:76:35:
                    b6:f5:76:2b:08:f9:ac:56:2e:57:05:60:96:9f:78:
                    8c:5f:42:89:d7:08:c3:49:8f:5b:2c:79:db:93:3e:
                    a6:6c:0a:6a:85:ec:09:bd:d9:84:de:61:e0:f6:e1:
                    c6:50:d5:ca:4f:ae:95:a1:eb:5f:da:f1:58:36:80:
                    84:ba:0f:64:8a:33:34:5c:f2:d1:26:ac:06:1c:6c:
                    1b:7f:3e:2e:08:11:59:e1:f1:27:9b:80:e0:d0:a9:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2A:CF:4E:53:AC:CD:47:BA:F5:DE:CB:E6:67:C5:B0:8E:44:91:49
            X509v3 Authority Key Identifier:
                keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:78:c8:ac:84:9a:74:a8:f0:dc:9c:c2:c5:51:26:7a:c9:
         1d:7c:0f:f6:ba:3b:21:7f:7e:77:8e:c9:d9:76:b5:70:cd:e3:
         00:95:ce:88:50:b0:8e:c4:ba:7a:4b:b5:91:69:16:fe:7b:d3:
         a3:d8:1e:87:11:35:6e:ac:6c:f4:23:3f:64:99:43:01:c5:4e:
         04:37:24:4f:b1:a1:38:8a:d3:b1:a2:5e:05:37:a4:1c:b5:be:
         9d:13:ca:87:22:ea:a2:78:78:60:37:63:f6:4a:6c:ff:13:b8:
         7f:1c:66:5a:b0:7a:61:ae:e2:0a:04:d6:8e:a0:0f:51:8f:14:
         53:ba:d7:cc:ed:e0:8c:51:08:9f:da:27:8b:6f:d2:59:58:7e:
         a8:67:1c:cd:ad:f9:92:de:72:6f:fb:48:ef:d4:e7:fe:0c:31:
         0a:f3:9d:c1:ba:97:66:60:3d:40:2c:4a:b7:40:6c:37:b1:56:
         16:3c:8c:83:2c:b8:87:3e:4d:93:aa:91:c3:5f:03:8d:bb:8e:
         6f:c3:ed:cf:a4:f3:80:a0:4c:e0:d9:83:ac:5d:9a:86:19:d1:
         84:e6:38:f5:b1:e5:f2:32:81:75:74:4e:f0:9e:52:02:00:00:
         40:cf:1b:24:fc:a9:37:bb:8c:1c:b6:49:45:31:0b:22:95:3e:
         90:dd:0f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiYFc4XvGT+98VTD0OVqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0
YTY0YTUwHhcNMjUwNzI2MjEwMDI3WhcNMjUwNzI3MjEwMDI3WjAzMTEwLwYDVQQD
EyhjZjJhY2Y0ZTUzYWNjZDQ3YmFmNWRlY2JlNjY3YzViMDhlNDQ5MTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWNoNaVwZjYnRrPC1nV2unwxp2pd
o60pYT5gxKTS8HGG5Y9cnWEj0mXwtYDIv/TdY1cxLGEXu8baOOzUB7vGigXr4wDj
V5xX7r5ROfheV2PNRCEDLdRoCMqUI9ZTarTqGUe7uID2a3rhAOdAYHRJhZ3XVH7w
BC/UC4lVc2I5rFKrQYZh0xEfr1BX3CW6Xf+E67QouRZdb5FDRRvezEB1wcwEdjW2
9XYrCPmsVi5XBWCWn3iMX0KJ1wjDSY9bLHnbkz6mbApqhewJvdmE3mHg9uHGUNXK
T66Voetf2vFYNoCEug9kijM0XPLRJqwGHGwbfz4uCBFZ4fEnm4Dg0KmfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8qz05TrM1HuvXey+ZnxbCORJFJMB8GA1UdIwQY
MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt
N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3
LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5t4yKyE
mnSo8NycwsVRJnrJHXwP9ro7IX9+d47J2Xa1cM3jAJXOiFCwjsS6eku1kWkW/nvT
o9gehxE1bqxs9CM/ZJlDAcVOBDckT7GhOIrTsaJeBTekHLW+nRPKhyLqonh4YDdj
9kps/xO4fxxmWrB6Ya7iCgTWjqAPUY8UU7rXzO3gjFEIn9oni2/SWVh+qGccza35
kt5yb/tI79Tn/gwxCvOdwbqXZmA9QCxKt0BsN7FWFjyMgyy4hz5Nk6qRw18DjbuO
b8Ptz6TzgKBM4NmDrF2ahhnRhOY49bHl8jKBdXRO8J5SAgAAQM8bJPypN7uMHLZJ
RTELIpU+kN0P/Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:08 2025 by rpki-client