Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
File:                     AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft (raw, json)
Hash identifier:          1NyDitaU1z+OLeyHXbbOeg95hT+oPtI8kogGcMi2bwQ=
Subject key identifier:   6C:EB:3B:D2:45:32:A9:0C:0D:23:91:2F:16:78:21:64:5A:2E:88:20
Authority key identifier: 01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4
Certificate issuer:       /CN=01e622564484649a5a657b45c9d3bb30c789a3e4
Certificate serial:       019A71B85E720C2B172FDC0433613CF2FD3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
Manifest number:          0190
Signing time:             Tue 11 Nov 2025 07:01:39 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:39 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:39 +0000
Files and hashes:         1: AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl (hash: 8g1BI4yTBjaEsbMF2mDzVcZlPTVaIi+wTehyaoBBSAY=)
                          2: I_Z5070VnqjEINScGnrsjIIGhyI.roa (hash: aKnIa9mebw8FwAQj874+YedV1EUpg+SaV2Y+JlM4u6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:5e:72:0c:2b:17:2f:dc:04:33:61:3c:f2:fd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e622564484649a5a657b45c9d3bb30c789a3e4
        Validity
            Not Before: Nov 11 07:01:39 2025 GMT
            Not After : Nov 12 07:01:39 2025 GMT
        Subject: CN=6ceb3bd24532a90c0d23912f167821645a2e8820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:d3:92:bc:b4:14:0f:57:83:06:86:5c:12:
                    b3:93:9f:59:bb:38:c1:0b:03:89:bb:95:8f:f2:e5:
                    7e:4f:ee:bc:89:09:f6:7d:63:82:c9:1e:79:b9:9a:
                    ad:c6:3e:ea:db:e6:0b:aa:f1:53:d8:d8:ab:2e:9a:
                    64:43:ab:3a:75:67:87:7f:ea:97:20:a3:5c:1d:68:
                    c1:ec:3b:6c:57:62:68:73:5c:bd:66:4e:3c:82:3c:
                    ca:75:da:65:7b:ce:cf:36:80:aa:70:15:2c:a2:dc:
                    31:96:da:ab:37:ff:52:82:76:de:77:d1:3b:e1:72:
                    b2:88:70:0c:30:0c:80:10:28:02:34:12:92:17:bc:
                    63:20:55:9a:f4:34:13:ff:57:8a:1b:1a:ac:90:c9:
                    ae:0c:3e:94:d6:7f:9d:99:3f:b4:09:d0:9a:99:d4:
                    1b:9c:0b:10:75:42:b2:4b:bb:b2:81:0e:bb:30:0b:
                    96:0e:68:5f:85:48:b9:0e:4c:03:1a:34:ba:ef:33:
                    63:42:db:ba:37:f0:0e:6e:ca:23:ac:06:15:cc:51:
                    b5:1f:51:8c:cd:ac:bd:79:97:5a:ce:14:b9:d4:22:
                    68:29:02:74:08:b8:d1:3f:8d:b9:d7:e7:ba:13:72:
                    8b:b8:51:2c:76:a7:c5:bf:76:f8:5c:b5:ed:0f:1f:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:3B:D2:45:32:A9:0C:0D:23:91:2F:16:78:21:64:5A:2E:88:20
            X509v3 Authority Key Identifier:
                keyid:01:E6:22:56:44:84:64:9A:5A:65:7B:45:C9:D3:BB:30:C7:89:A3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AeYiVkSEZJpaZXtFydO7MMeJo-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c2f206-219f-4599-8e22-722614cecb09/1/AeYiVkSEZJpaZXtFydO7MMeJo-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5f:1c:94:12:eb:19:41:3b:d4:50:fc:95:87:24:80:3f:ff:
         73:a1:88:24:a9:05:76:38:f3:9b:2e:d3:8a:42:78:cb:3b:26:
         31:18:f1:03:38:bb:ae:39:0f:59:82:af:8d:19:9d:a4:1d:c5:
         35:5a:be:9e:52:bf:23:dc:7e:07:76:e2:8b:94:76:45:8b:17:
         ba:78:c0:c7:51:ae:3f:64:0f:b5:58:3c:ca:11:79:0b:c7:8a:
         71:b8:69:bf:9c:35:a8:26:1d:b7:60:74:84:8b:3f:c1:2d:f6:
         ee:de:9c:a1:74:37:43:a4:49:0d:6b:ca:3f:52:0c:40:d6:8f:
         ca:37:c1:ee:57:23:52:31:86:aa:b6:16:f1:fb:8b:05:24:20:
         4e:50:b3:e1:b5:1d:be:ca:1d:49:38:16:aa:46:b0:d0:28:d9:
         22:8e:b9:65:2b:fe:e5:6e:86:a2:6e:57:af:37:f2:ea:1a:c0:
         1a:f8:68:26:23:8e:f9:c9:44:de:ac:e6:bf:d2:42:41:38:b4:
         7e:c3:91:6b:66:d2:a8:f3:55:4f:d1:d5:c3:ae:f4:2d:18:6d:
         4c:79:77:cf:34:43:4a:03:a1:03:ed:49:b4:b6:eb:d9:f1:73:
         9e:a6:1c:03:b8:7e:16:e2:d8:10:46:fa:1c:b8:7e:c3:a2:81:
         06:eb:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:07 2025 by rpki-client