Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File:                     aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier:          k7+KIHoRny7Eh1v8qWe9axJQwMfavEWnqCm9SnzoyGA=
Subject key identifier:   90:C3:1D:E2:01:34:89:0F:D4:C4:DA:6E:3D:D1:BB:D8:D0:A4:92:F1
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer:       /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial:       01975535210FF87B15FE91C270B68FC3095B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number:          137E
Signing time:             Mon 09 Jun 2025 15:00:34 +0000
Manifest this update:     Mon 09 Jun 2025 15:00:34 +0000
Manifest next update:     Tue 10 Jun 2025 15:00:34 +0000
Files and hashes:         1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: Tj/8dt5YJ1/i1tX9Y13KCS+ksB8jQtl5SkUi/TZ6V6Q=)
                          2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:35:21:0f:f8:7b:15:fe:91:c2:70:b6:8f:c3:09:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
        Validity
            Not Before: Jun  9 15:00:34 2025 GMT
            Not After : Jun 10 15:00:34 2025 GMT
        Subject: CN=90c31de20134890fd4c4da6e3dd1bbd8d0a492f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:5d:86:53:1f:18:e0:3c:57:64:d9:4a:48:
                    89:52:f2:db:53:bb:4a:04:37:48:f2:34:93:67:a1:
                    67:ac:d5:90:d6:2d:9b:8f:8b:e5:4b:d1:14:63:ef:
                    e3:27:f0:1b:63:a6:8a:72:8a:2c:f1:2d:33:da:fd:
                    45:0f:96:5a:88:03:a9:68:22:cd:1f:88:26:ca:a0:
                    b1:17:22:56:f4:4b:05:14:31:92:65:9d:7d:d6:60:
                    b9:7b:26:b9:ec:d6:fa:95:0d:d5:34:7c:f7:e9:c6:
                    86:50:a8:c7:bd:9c:22:30:63:9d:c7:89:e6:42:cd:
                    b6:73:41:81:ed:48:2c:6d:51:5b:c8:7b:66:55:7a:
                    93:28:35:75:66:a9:ae:18:a7:3d:07:f7:f1:30:91:
                    a4:e2:5a:e5:26:f0:55:25:43:4e:23:6f:d3:97:f2:
                    b7:60:83:1d:a8:d3:2b:08:7d:94:aa:f8:1f:61:02:
                    d7:d5:9e:be:fd:59:50:ef:25:fd:78:48:d0:66:76:
                    fb:bc:55:44:2c:21:7d:a9:46:69:f0:f1:c7:37:2b:
                    84:1c:90:15:63:11:77:83:66:dd:c6:fd:d4:03:e7:
                    2e:f2:ad:4f:9f:92:39:a9:d2:10:92:00:ff:9d:b6:
                    7c:5a:30:4e:f1:9a:e3:6a:c8:ac:f6:e1:de:22:a2:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C3:1D:E2:01:34:89:0F:D4:C4:DA:6E:3D:D1:BB:D8:D0:A4:92:F1
            X509v3 Authority Key Identifier:
                keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:3a:db:4b:23:e8:d7:fb:22:fc:3d:6c:86:9c:59:db:03:c0:
         f9:bd:cb:8c:11:b0:0c:1f:a4:9b:ab:26:aa:1d:a9:01:c3:e2:
         7b:f0:61:f1:56:99:7a:57:d3:9e:a6:9b:31:63:b2:f5:7f:1a:
         c1:c9:7d:a2:cf:34:25:f1:9c:3e:a2:66:55:c3:b0:6f:68:cf:
         5e:9b:25:95:ae:dc:63:1c:51:bf:34:59:bf:3a:dd:53:f0:af:
         b6:4d:2a:c3:a9:43:2f:af:e6:d9:7e:b3:72:d6:92:93:dd:49:
         2b:2b:7f:7c:d2:3a:27:64:5f:30:23:3d:41:f2:24:de:2e:9e:
         be:46:c7:36:5e:b8:e1:7a:4a:50:8b:96:07:a8:d1:37:d6:ba:
         10:32:92:35:e4:9e:5c:2b:2c:47:fc:d4:9d:51:a6:4c:28:6f:
         e8:61:ab:79:28:55:47:78:9c:a1:ff:41:f5:5b:42:ef:18:3f:
         be:77:19:36:91:f6:d8:14:f0:05:54:4c:56:80:21:50:9a:0c:
         13:ff:3c:ae:24:11:41:fe:47:43:52:79:41:eb:89:52:d7:73:
         4b:51:47:d6:de:4d:8d:93:c8:ac:69:80:f9:83:22:a3:6d:96:
         77:55:d1:99:6e:6f:54:87:d6:35:a8:84:43:dd:50:dc:1f:be:
         4c:ea:e4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVNSEP+HsV/pHCcLaPwwlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWU3YmM4ZDMzMTYzY2M0YjZkZGExNzFhMzg3ZmY5ODAy
MmEwZjYwHhcNMjUwNjA5MTUwMDM0WhcNMjUwNjEwMTUwMDM0WjAzMTEwLwYDVQQD
Eyg5MGMzMWRlMjAxMzQ4OTBmZDRjNGRhNmUzZGQxYmJkOGQwYTQ5MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQZdhlMfGOA8V2TZSkiJUvLbU7tK
BDdI8jSTZ6FnrNWQ1i2bj4vlS9EUY+/jJ/AbY6aKcoos8S0z2v1FD5ZaiAOpaCLN
H4gmyqCxFyJW9EsFFDGSZZ191mC5eya57Nb6lQ3VNHz36caGUKjHvZwiMGOdx4nm
Qs22c0GB7UgsbVFbyHtmVXqTKDV1ZqmuGKc9B/fxMJGk4lrlJvBVJUNOI2/Tl/K3
YIMdqNMrCH2UqvgfYQLX1Z6+/VlQ7yX9eEjQZnb7vFVELCF9qUZp8PHHNyuEHJAV
YxF3g2bdxv3UA+cu8q1Pn5I5qdIQkgD/nbZ8WjBO8Zrjasis9uHeIqJszQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDDHeIBNIkP1MTabj3Ru9jQpJLxMB8GA1UdIwQY
MBaAFGque8jTMWPMS23aFxo4f/mAIqD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMt
OGY1OWNmMDE2NDY2LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMtOGY1OWNmMDE2NDY2
LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjrbSyPo
1/si/D1shpxZ2wPA+b3LjBGwDB+km6smqh2pAcPie/Bh8VaZelfTnqabMWOy9X8a
wcl9os80JfGcPqJmVcOwb2jPXpslla7cYxxRvzRZvzrdU/Cvtk0qw6lDL6/m2X6z
ctaSk91JKyt/fNI6J2RfMCM9QfIk3i6evkbHNl644XpKUIuWB6jRN9a6EDKSNeSe
XCssR/zUnVGmTChv6GGreShVR3icof9B9VtC7xg/vncZNpH22BTwBVRMVoAhUJoM
E/88riQRQf5HQ1J5QeuJUtdzS1FH1t5NjZPIrGmA+YMio22Wd1XRmW5vVIfWNaiE
Q91Q3B++TOrk4g==
-----END CERTIFICATE-----
Generated at Tue Jun 10 01:21:08 2025 by rpki-client