Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          tSBzKMMZ0iE9lbBSApq1g1FMIPqH1Dp6UzVGLtBafbQ=
Subject key identifier:   EC:F2:40:3A:0B:DF:D4:A0:13:37:C0:2B:46:3E:87:1B:F1:DF:F5:34
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       0199239FBD5063B591404ACFE2A8B31C1D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          106A
Signing time:             Sun 07 Sep 2025 10:01:35 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:35 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:35 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: FP4pykdSsSZgGIGnjYKK9TqnsoxF/zzt+ilswc/vRp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:bd:50:63:b5:91:40:4a:cf:e2:a8:b3:1c:1d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Sep  7 10:01:35 2025 GMT
            Not After : Sep  8 10:01:35 2025 GMT
        Subject: CN=ecf2403a0bdfd4a01337c02b463e871bf1dff534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:2d:96:73:23:c7:a1:ba:aa:10:46:e2:6b:
                    d8:47:f2:f8:64:36:94:3b:aa:3f:bf:a4:1a:ce:be:
                    b9:b7:94:39:f0:ff:b2:66:4a:52:72:d0:7a:e9:1b:
                    33:51:f5:e1:cc:58:00:fb:bf:cd:1b:79:57:15:9d:
                    f5:2f:ae:c3:e9:0a:1f:f2:f3:05:7c:85:5f:d3:7b:
                    a7:85:ab:9f:39:26:fa:8d:11:20:a2:ad:81:a5:4d:
                    68:db:d3:ad:ae:4a:df:3f:b0:a9:4e:43:19:cf:4b:
                    19:ea:7c:a6:dd:f5:9e:ed:0f:f0:a7:6d:13:61:f6:
                    ee:70:64:d5:25:ce:21:5e:78:a4:3c:ac:f8:fa:94:
                    9f:3e:f9:92:88:ce:f0:fc:88:b4:ae:9d:1f:cc:7f:
                    89:81:1a:f9:0d:b2:96:e4:ce:19:2a:fa:29:f6:d8:
                    6a:67:dd:a9:16:90:24:98:81:8c:14:aa:b9:2d:34:
                    29:bd:b2:1a:02:ec:82:62:6e:37:03:ee:0e:f3:34:
                    77:2e:4b:0d:da:ee:fb:a3:ac:46:0e:22:7a:e1:d5:
                    40:27:72:cd:80:77:43:c6:4c:94:34:ab:d0:d9:6c:
                    13:67:ff:60:73:c6:9e:a0:31:11:56:9b:dc:f3:b3:
                    95:bf:47:86:86:c5:12:f1:f9:d3:db:47:18:7a:2e:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:40:3A:0B:DF:D4:A0:13:37:C0:2B:46:3E:87:1B:F1:DF:F5:34
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:50:ba:01:ec:f0:f1:6b:70:48:64:47:8f:54:f9:64:b4:da:
         a5:6a:1e:f1:e2:ee:52:d0:00:9f:d7:72:a9:3c:24:54:cb:49:
         76:be:c1:c8:52:15:80:66:1b:e9:71:6b:40:30:3a:57:8c:ac:
         bb:25:36:1b:f4:1b:7b:71:42:b5:87:e9:a7:2c:ec:7c:fc:d4:
         94:d5:f5:a0:cf:2a:aa:f6:aa:c2:c4:d0:90:bf:6e:1b:06:21:
         13:b4:f1:8b:dc:ad:ce:ae:e5:f6:66:f1:aa:a2:18:75:7a:34:
         fc:82:11:c7:44:f4:95:a6:e9:e2:c1:97:d4:af:c4:0f:c7:c0:
         45:43:ee:a2:b8:f9:f2:b9:54:32:01:9a:ae:6e:a7:9c:85:09:
         88:81:c3:b6:b0:d8:6e:df:e9:e3:05:86:c5:57:ee:33:3d:ea:
         77:ed:b1:b1:14:eb:a5:a8:35:2d:d0:5d:ec:be:1d:9b:a8:00:
         c1:70:c2:6b:6e:c9:d2:b9:f9:0b:97:51:b4:14:1d:9f:f6:24:
         ff:c5:e7:76:91:1c:96:12:7b:ce:5d:79:8e:cc:64:28:3f:e6:
         44:54:41:d2:20:ff:79:0f:1c:ab:37:a2:cb:4d:c6:54:40:2e:
         b9:70:86:58:bc:21:da:87:ee:1f:78:74:98:58:f8:07:13:53:
         62:7f:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:08 2025 by rpki-client