Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          HNdC7W8pXVWpx2AwSOobFPyWJFFEyO0HvskO6N9Z0Jk=
Subject key identifier:   19:E7:26:A1:25:80:7D:B1:25:A3:84:B4:A9:60:B5:04:C1:04:C5:79
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       019846D266CC67785B4A6C6178A4D9CFE4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0B6B
Signing time:             Sat 26 Jul 2025 13:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:50 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: NQ2D8X7TolaBiVRyTCDA0hJrX9YIgxEEd1DpMVn2iiY=)
                          2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:66:cc:67:78:5b:4a:6c:61:78:a4:d9:cf:e4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: Jul 26 13:00:50 2025 GMT
            Not After : Jul 27 13:00:50 2025 GMT
        Subject: CN=19e726a125807db125a384b4a960b504c104c579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:ea:8c:49:27:2f:63:1f:65:65:be:c9:3f:
                    5a:a9:6f:32:11:11:9a:ae:66:c3:0d:f1:93:d1:4b:
                    c3:b4:e6:13:90:33:96:29:2a:07:3c:18:7b:5c:e2:
                    11:6d:c0:cd:a5:75:60:3c:06:8f:57:ae:a6:07:0a:
                    c8:48:cc:a2:c9:42:36:a6:0f:7c:7f:fe:88:e1:ba:
                    64:56:ce:08:98:97:73:ea:e0:c8:c6:73:d6:71:02:
                    25:7f:02:9c:fe:50:4d:30:6e:86:9f:ed:27:82:fe:
                    e2:64:31:75:e9:c8:e4:bf:32:f3:e7:36:e2:2c:31:
                    80:ef:e6:75:1d:38:79:b8:18:35:78:0c:2e:42:ca:
                    dc:40:8e:4e:8f:2b:71:13:3b:62:f2:2b:45:eb:0b:
                    9e:83:ad:ed:07:9f:a7:bd:0f:06:71:65:84:e0:7d:
                    fb:97:67:18:c5:13:46:ca:a6:84:3f:10:60:eb:a8:
                    86:5d:62:f8:ed:cd:4c:fa:18:0f:9b:85:37:e6:09:
                    d5:91:e3:b1:da:28:52:58:ce:cb:fd:1f:3b:e9:9b:
                    59:90:40:a5:1b:26:7d:b0:99:2a:71:61:b4:b1:05:
                    bb:32:13:fe:70:90:d7:a4:57:7c:a4:45:58:b6:a0:
                    34:87:7a:9d:01:25:ba:80:5b:b2:f9:0f:68:9b:a7:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:26:A1:25:80:7D:B1:25:A3:84:B4:A9:60:B5:04:C1:04:C5:79
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d9:e9:ad:76:a3:60:fc:4c:d0:62:6d:d9:13:a0:71:05:7c:
         4d:cc:c5:8e:d7:15:66:fb:df:82:4f:4e:34:75:d6:71:4d:57:
         30:b3:be:cb:e8:f9:77:d0:8e:07:ef:ae:b2:76:16:a2:96:2d:
         bc:34:df:43:1a:78:e4:1b:67:bb:b7:54:f7:c0:fa:d1:81:b9:
         fc:cf:fa:f7:2e:e6:e0:b2:32:59:b0:bf:c5:16:26:54:b4:68:
         83:65:e6:45:29:21:3f:ca:8e:cb:72:bc:76:51:7f:9a:d4:8a:
         e9:9d:64:8c:af:2f:3e:f3:ce:60:61:b9:b7:aa:de:07:47:be:
         aa:f4:d1:e3:73:9f:0e:fb:e6:be:cb:b0:7c:c7:64:56:7e:bb:
         f4:a1:9b:82:a0:60:ad:48:04:b2:b5:ba:86:4c:1c:11:1f:45:
         2e:01:6a:53:2b:56:2c:be:89:2d:f9:68:ed:68:e5:b8:66:6f:
         fb:16:1b:9d:94:98:d6:4d:74:39:5d:fa:7c:c3:db:5c:02:7c:
         3e:c8:76:48:3f:6c:88:18:bd:6b:f3:2a:cd:f1:08:fb:5b:9f:
         44:1a:06:9f:b6:0c:2f:d2:de:2f:ea:53:6b:00:a7:50:d1:0e:
         a8:1f:b7:f3:f8:a0:49:34:9c:72:e0:1a:b6:ee:04:d1:77:5a:
         82:d2:08:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0mbMZ3hbSmxheKTZz+SjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw
Mjc2YjUwHhcNMjUwNzI2MTMwMDUwWhcNMjUwNzI3MTMwMDUwWjAzMTEwLwYDVQQD
EygxOWU3MjZhMTI1ODA3ZGIxMjVhMzg0YjRhOTYwYjUwNGMxMDRjNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5bqjEknL2MfZWW+yT9aqW8yERGa
rmbDDfGT0UvDtOYTkDOWKSoHPBh7XOIRbcDNpXVgPAaPV66mBwrISMyiyUI2pg98
f/6I4bpkVs4ImJdz6uDIxnPWcQIlfwKc/lBNMG6Gn+0ngv7iZDF16cjkvzLz5zbi
LDGA7+Z1HTh5uBg1eAwuQsrcQI5OjytxEzti8itF6wueg63tB5+nvQ8GcWWE4H37
l2cYxRNGyqaEPxBg66iGXWL47c1M+hgPm4U35gnVkeOx2ihSWM7L/R876ZtZkECl
GyZ9sJkqcWG0sQW7MhP+cJDXpFd8pEVYtqA0h3qdASW6gFuy+Q9om6cT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnnJqElgH2xJaOEtKlgtQTBBMV5MB8GA1UdIwQY
MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt
MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3
LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNnprXaj
YPxM0GJt2ROgcQV8TczFjtcVZvvfgk9ONHXWcU1XMLO+y+j5d9COB++usnYWopYt
vDTfQxp45Btnu7dU98D60YG5/M/69y7m4LIyWbC/xRYmVLRog2XmRSkhP8qOy3K8
dlF/mtSK6Z1kjK8vPvPOYGG5t6reB0e+qvTR43OfDvvmvsuwfMdkVn679KGbgqBg
rUgEsrW6hkwcER9FLgFqUytWLL6JLflo7WjluGZv+xYbnZSY1k10OV36fMPbXAJ8
Psh2SD9siBi9a/MqzfEI+1ufRBoGn7YML9LeL+pTawCnUNEOqB+38/igSTSccuAa
tu4E0XdagtIIxg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:50:28 2025 by rpki-client