Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          7oi8ymjM/m38g6pjMtImZlJKrFgaCAAZ+T6p9s8R+mQ=
Subject key identifier:   52:16:05:60:5C:F3:A1:6D:64:4A:3E:D0:0D:04:9A:0B:2C:68:92:31
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       019921B044F7801362F4EEE803532CC866E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          08C0
Signing time:             Sun 07 Sep 2025 01:00:23 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:23 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:23 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: lEyizGDJ9HpspwYx5LjwJbm/u31fiHpAVTpxuo57pj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:44:f7:80:13:62:f4:ee:e8:03:53:2c:c8:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Sep  7 01:00:23 2025 GMT
            Not After : Sep  8 01:00:23 2025 GMT
        Subject: CN=521605605cf3a16d644a3ed00d049a0b2c689231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:82:14:cb:ca:0b:14:d2:d6:be:e3:f3:ea:
                    d6:70:fa:5c:98:7c:ae:96:0a:80:67:14:b1:bd:2c:
                    67:8f:db:f3:66:e3:84:ab:26:2f:ef:28:6b:5b:71:
                    be:e3:d3:11:e3:13:be:b3:61:09:1d:5d:cd:8e:1d:
                    3c:aa:de:63:3a:6e:62:30:2b:76:0b:fb:cc:02:ee:
                    fb:4d:2d:5b:3c:c6:4a:28:63:c7:a1:f3:65:a6:6f:
                    09:c8:0c:da:ed:d0:f5:01:e1:12:70:65:d9:dd:59:
                    0d:da:ad:30:ce:4d:53:b6:d0:92:a5:af:1b:36:d0:
                    11:7f:a6:7f:e0:ba:8e:e1:9c:54:ad:04:cf:6f:1b:
                    c6:34:f4:8b:cb:ac:5a:9d:61:f9:f2:6d:ee:79:56:
                    aa:b1:80:36:6b:71:bb:51:d2:ed:18:d0:54:79:e5:
                    b7:29:42:0c:81:65:ba:52:ce:8f:84:ac:28:08:be:
                    42:ca:5f:a9:74:29:07:4d:6c:e2:f3:6a:0b:61:db:
                    98:f1:ad:d8:b1:fa:9d:c3:10:63:0b:7d:40:c0:1b:
                    be:68:f7:06:f5:ee:f3:1c:f3:fa:de:8b:14:af:0b:
                    cd:c9:1c:c0:04:5e:05:f3:81:8d:40:ed:c1:25:2b:
                    e2:e3:cc:d6:bd:bc:f6:08:e3:d4:fe:ef:61:9b:b3:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:16:05:60:5C:F3:A1:6D:64:4A:3E:D0:0D:04:9A:0B:2C:68:92:31
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:43:f4:90:81:4a:64:10:67:ee:b2:89:ea:95:44:e1:d8:ec:
         d7:77:9f:2a:b4:58:47:53:d7:2b:84:e3:84:bc:8a:c9:1d:36:
         c4:89:28:31:02:76:eb:56:fa:e9:8f:39:36:fb:14:f8:1a:8d:
         cf:10:62:e4:3d:9e:54:f2:0e:3c:4d:ff:21:bf:e4:96:3c:18:
         13:dd:70:75:e4:16:50:5c:98:f2:2e:21:1c:ec:7e:42:93:20:
         18:6d:c2:23:66:d4:ea:17:ac:bb:83:fc:f0:a4:61:58:95:18:
         8b:bb:a8:68:2b:aa:b3:d2:e8:6b:56:74:b9:09:b1:b3:36:0d:
         a4:b3:df:3a:22:21:87:8b:26:14:d2:3f:6e:80:be:f5:bc:2b:
         3a:11:30:ec:1d:7a:4e:82:30:c7:8b:21:65:9e:45:16:bf:6a:
         aa:59:67:d0:ea:27:ac:c1:20:b7:89:fe:6f:bc:7f:47:91:40:
         e6:1d:71:b9:ef:c1:0e:62:7a:6e:91:d3:9a:27:3d:95:d8:c2:
         70:c6:32:12:fa:4e:9f:83:bc:27:f6:90:b1:1e:1a:c7:a1:68:
         51:e0:e0:5e:e6:90:88:b7:50:50:0b:21:5d:a8:0b:0f:11:3d:
         93:cc:f7:08:70:fd:6a:e5:d3:bc:8e:23:ef:4a:70:1a:b1:de:
         14:f2:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:36 2025 by rpki-client