Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File:                     aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier:          xryGu6NNEqIJq7og4lVFgBEssxQDQVeSbN3XOXb60Ww=
Subject key identifier:   CD:3F:92:F4:80:CE:50:69:EA:8F:49:E2:0E:39:BF:A0:27:88:EA:9B
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer:       /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial:       01975911EAF293F8F295855D630F590C644B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number:          1380
Signing time:             Tue 10 Jun 2025 09:00:35 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:35 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:35 +0000
Files and hashes:         1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: mG6OgiehFRM5KANbRl0LehntD42JuRo3QMbyH2Xs/5I=)
                          2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:11:ea:f2:93:f8:f2:95:85:5d:63:0f:59:0c:64:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
        Validity
            Not Before: Jun 10 09:00:35 2025 GMT
            Not After : Jun 11 09:00:35 2025 GMT
        Subject: CN=cd3f92f480ce5069ea8f49e20e39bfa02788ea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:ac:ef:2b:89:67:a8:07:60:12:8c:ec:d8:
                    17:84:8a:4c:12:24:6a:fd:b4:e6:cc:7d:3c:41:eb:
                    1f:ff:8a:f1:28:88:02:00:ae:74:f3:bd:f2:62:ba:
                    3a:8d:c3:c2:20:57:39:1c:0c:82:6a:34:d4:6d:f4:
                    52:a7:14:89:75:f9:37:10:57:e4:91:bb:0f:bd:c6:
                    58:48:ad:ee:68:19:92:c6:59:b9:86:d2:a9:be:2e:
                    c6:f4:88:f7:79:6b:b9:da:05:60:02:3d:c3:f0:00:
                    a3:ad:54:8e:19:56:0d:32:65:a7:bb:4e:ce:67:7c:
                    96:f5:ef:52:73:07:5c:3d:c1:62:8e:aa:81:41:45:
                    b7:7f:af:f0:7e:fd:0e:f9:4a:79:44:12:50:a9:cf:
                    8d:e1:ec:a1:42:50:2f:9a:a6:7c:04:d7:9a:66:e6:
                    90:eb:b2:0d:0b:6a:27:39:5d:e7:18:6e:5b:1d:cd:
                    76:7a:2e:b6:42:d3:50:fb:0f:e0:9a:35:26:6f:f3:
                    40:b6:39:cc:bf:39:16:2d:c8:45:28:a7:71:6a:05:
                    54:84:24:2a:87:ef:0b:18:8d:6c:ed:45:05:4c:39:
                    b8:9a:38:e8:8c:ed:20:9f:58:84:ad:de:e6:ce:1f:
                    41:a9:11:f2:e5:a4:26:a7:06:09:a0:51:15:7d:40:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:92:F4:80:CE:50:69:EA:8F:49:E2:0E:39:BF:A0:27:88:EA:9B
            X509v3 Authority Key Identifier:
                keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:75:e4:b3:83:34:02:92:cc:e1:24:bb:45:fc:44:b9:0c:52:
         f3:b2:0d:d7:23:6f:7f:83:92:cb:31:89:89:0d:df:68:89:a3:
         7e:8f:7f:32:6f:b1:20:e3:43:2e:31:5e:e8:7a:34:eb:05:50:
         06:38:1c:45:2d:bf:4e:b1:ea:a6:3d:07:3b:0d:5e:0c:06:46:
         fc:46:47:45:6a:ef:d9:9c:49:59:e9:31:42:45:6f:0c:4f:c5:
         6a:d1:5e:8c:73:cc:9e:06:36:06:d9:24:6b:72:e9:5c:8b:cd:
         f4:76:f3:72:e0:31:28:c0:92:b7:0a:3f:f5:d1:b8:b6:8f:a1:
         38:1d:13:a6:ee:6b:68:d3:9d:ae:cc:63:49:45:31:87:28:f9:
         50:d3:72:29:df:a5:c9:91:5c:01:07:97:d6:0e:63:83:ca:09:
         63:d0:bd:7b:5e:a1:f2:29:d0:16:23:85:4c:7a:40:1e:68:c4:
         61:3c:b8:74:d6:97:94:88:51:e6:d0:f5:29:c9:30:11:dd:9c:
         53:b8:55:ba:d7:5c:4b:9b:fc:49:3d:99:33:4b:e3:e8:2a:72:
         9a:9e:dc:1c:69:58:5e:af:6f:8b:44:25:d0:c8:07:f4:52:b3:
         cd:7e:99:6b:7f:dd:e7:4c:e3:6b:47:f1:32:b3:58:d9:ca:0a:
         43:4c:65:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZEeryk/jylYVdYw9ZDGRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWU3YmM4ZDMzMTYzY2M0YjZkZGExNzFhMzg3ZmY5ODAy
MmEwZjYwHhcNMjUwNjEwMDkwMDM1WhcNMjUwNjExMDkwMDM1WjAzMTEwLwYDVQQD
EyhjZDNmOTJmNDgwY2U1MDY5ZWE4ZjQ5ZTIwZTM5YmZhMDI3ODhlYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiGs7yuJZ6gHYBKM7NgXhIpMEiRq
/bTmzH08Qesf/4rxKIgCAK50873yYro6jcPCIFc5HAyCajTUbfRSpxSJdfk3EFfk
kbsPvcZYSK3uaBmSxlm5htKpvi7G9Ij3eWu52gVgAj3D8ACjrVSOGVYNMmWnu07O
Z3yW9e9ScwdcPcFijqqBQUW3f6/wfv0O+Up5RBJQqc+N4eyhQlAvmqZ8BNeaZuaQ
67INC2onOV3nGG5bHc12ei62QtNQ+w/gmjUmb/NAtjnMvzkWLchFKKdxagVUhCQq
h+8LGI1s7UUFTDm4mjjojO0gn1iErd7mzh9BqRHy5aQmpwYJoFEVfUAulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0/kvSAzlBp6o9J4g45v6AniOqbMB8GA1UdIwQY
MBaAFGque8jTMWPMS23aFxo4f/mAIqD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMt
OGY1OWNmMDE2NDY2LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMtOGY1OWNmMDE2NDY2
LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnXks4M0
ApLM4SS7RfxEuQxS87IN1yNvf4OSyzGJiQ3faImjfo9/Mm+xIONDLjFe6Ho06wVQ
BjgcRS2/TrHqpj0HOw1eDAZG/EZHRWrv2ZxJWekxQkVvDE/FatFejHPMngY2Btkk
a3LpXIvN9HbzcuAxKMCStwo/9dG4to+hOB0Tpu5raNOdrsxjSUUxhyj5UNNyKd+l
yZFcAQeX1g5jg8oJY9C9e16h8inQFiOFTHpAHmjEYTy4dNaXlIhR5tD1KckwEd2c
U7hVutdcS5v8ST2ZM0vj6Cpymp7cHGlYXq9vi0Ql0MgH9FKzzX6Za3/d50zja0fx
MrNY2coKQ0xlyQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 13:15:35 2025 by rpki-client