Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File:                     A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier:          zf9qio3tM5ZZcPUA/NWZTMQ8tBB17SgSUAtC9jUIgfU=
Subject key identifier:   54:54:8A:1A:FD:27:74:B4:5F:9A:AC:F0:E3:8D:18:82:D5:96:C8:51
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer:       /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial:       019923A0337323B945C6122BC50C91E15A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number:          06DC
Signing time:             Sun 07 Sep 2025 10:02:05 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:05 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:05 +0000
Files and hashes:         1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: mZjEAdR7wFxMrfEiSTl6gFydlLalLDa81JilK8Kt0bs=)
                          2: p0cL-vdhY3KSfcwz6s4koNapmbw.roa (hash: 9RImGj5UfNKUq/CzlTB6jfp8TR4Xc1sqYedIB3MDaIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:33:73:23:b9:45:c6:12:2b:c5:0c:91:e1:5a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
        Validity
            Not Before: Sep  7 10:02:05 2025 GMT
            Not After : Sep  8 10:02:05 2025 GMT
        Subject: CN=54548a1afd2774b45f9aacf0e38d1882d596c851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:00:ab:6e:74:f7:b4:08:d4:8f:7a:94:33:
                    e5:b4:05:7d:03:2b:b4:52:25:8f:b6:f0:5b:05:9a:
                    b8:80:db:59:f9:fc:9a:ab:92:be:be:6e:6a:b4:6c:
                    95:f0:1b:66:13:15:12:d4:b4:28:1b:90:0d:b2:88:
                    f6:7d:f7:7e:65:7d:26:94:1d:3f:02:d9:00:89:79:
                    3c:4c:34:6b:f9:65:fd:0d:7c:df:df:99:bc:50:ab:
                    37:ee:5e:7c:f7:03:09:35:c9:30:7c:25:b4:32:38:
                    6f:f2:be:33:f3:95:be:b9:d3:93:fd:6f:53:34:af:
                    89:5a:fa:b8:46:4b:d5:3d:6e:10:79:2f:26:66:04:
                    7e:00:31:ac:66:f8:e1:34:45:e9:da:b1:83:5b:d7:
                    a6:c1:ce:0a:4a:2f:49:1e:c5:08:2e:40:96:57:67:
                    b9:7d:44:55:d0:f7:8a:88:4a:e7:c3:56:bd:3c:1c:
                    3a:e2:fb:7e:42:c9:3e:40:50:35:af:5c:41:46:e3:
                    6b:09:80:19:96:8b:cb:f2:83:05:84:b8:42:79:05:
                    8e:fe:85:a9:8c:86:19:02:ff:03:21:0e:ff:92:26:
                    8e:97:78:01:4a:92:ba:1f:69:41:22:40:0e:04:1d:
                    5a:e3:f7:c9:48:93:99:ab:7a:0c:18:91:e0:8b:3f:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:8A:1A:FD:27:74:B4:5F:9A:AC:F0:E3:8D:18:82:D5:96:C8:51
            X509v3 Authority Key Identifier:
                keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e3:28:a0:a3:9c:58:3f:98:1b:35:08:5c:60:d7:25:3a:02:
         28:fc:cf:58:bf:d5:8e:74:75:e6:8c:57:28:33:77:13:c1:fc:
         34:81:56:bd:1a:14:0c:4d:ae:19:03:79:98:53:2e:27:d6:60:
         33:1a:52:18:4b:48:df:e6:70:11:a0:88:7d:d3:0b:21:48:5f:
         10:52:9d:8a:58:32:24:c2:43:65:8a:74:c5:42:f5:21:1a:b0:
         48:5d:42:24:34:b4:74:06:6a:bd:48:9f:9e:37:26:94:25:bb:
         56:d8:ac:7d:fe:ed:0e:f1:45:87:ce:c6:2f:73:e6:26:a8:5c:
         0c:c0:cb:27:7a:01:a7:fe:fc:17:86:67:c9:3b:cd:1e:79:3b:
         d2:09:50:e0:5e:b3:43:9d:01:fa:82:58:84:1e:3b:62:5f:51:
         49:1b:2a:97:d8:1d:15:ac:dc:de:22:50:c3:22:89:2e:b2:3a:
         c3:9d:67:47:96:ec:12:ce:da:da:b9:d5:fa:c4:ed:9e:b4:40:
         7b:70:49:2f:8c:fa:5a:79:35:a2:a0:f7:d4:32:c1:21:65:d2:
         ea:6d:63:52:87:7c:1f:6b:2b:90:6b:b1:e8:99:32:e0:22:33:
         77:b1:87:b1:2b:bf:14:bf:46:30:3d:83:d6:7c:4b:51:9e:5a:
         fa:5f:cb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoDNzI7lFxhIrxQyR4VoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTgzMWY3YmEzZGUyZmJlZjE2ZDQ2NDlmZDQ4NjBjMTVl
OWQ2YzMwHhcNMjUwOTA3MTAwMjA1WhcNMjUwOTA4MTAwMjA1WjAzMTEwLwYDVQQD
Eyg1NDU0OGExYWZkMjc3NGI0NWY5YWFjZjBlMzhkMTg4MmQ1OTZjODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zQAq25097QI1I96lDPltAV9Ayu0
UiWPtvBbBZq4gNtZ+fyaq5K+vm5qtGyV8BtmExUS1LQoG5ANsoj2ffd+ZX0mlB0/
AtkAiXk8TDRr+WX9DXzf35m8UKs37l589wMJNckwfCW0Mjhv8r4z85W+udOT/W9T
NK+JWvq4RkvVPW4QeS8mZgR+ADGsZvjhNEXp2rGDW9emwc4KSi9JHsUILkCWV2e5
fURV0PeKiErnw1a9PBw64vt+Qsk+QFA1r1xBRuNrCYAZlovL8oMFhLhCeQWO/oWp
jIYZAv8DIQ7/kiaOl3gBSpK6H2lBIkAOBB1a4/fJSJOZq3oMGJHgiz86PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRUihr9J3S0X5qs8OONGILVlshRMB8GA1UdIwQY
MBaAFAOYMfe6PeL77xbUZJ/UhgwV6dbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMt
MDM3YjVhN2I5NTQ0LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ5NGUtMWUzMy00NDM3LTg0MzMtMDM3YjVhN2I5NTQ0
LzEvQTVneDk3bzk0dnZ2RnRSa245U0dEQlhwMXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOMooKOc
WD+YGzUIXGDXJToCKPzPWL/VjnR15oxXKDN3E8H8NIFWvRoUDE2uGQN5mFMuJ9Zg
MxpSGEtI3+ZwEaCIfdMLIUhfEFKdilgyJMJDZYp0xUL1IRqwSF1CJDS0dAZqvUif
njcmlCW7Vtisff7tDvFFh87GL3PmJqhcDMDLJ3oBp/78F4ZnyTvNHnk70glQ4F6z
Q50B+oJYhB47Yl9RSRsql9gdFazc3iJQwyKJLrI6w51nR5bsEs7a2rnV+sTtnrRA
e3BJL4z6Wnk1oqD31DLBIWXS6m1jUod8H2srkGux6Jky4CIzd7GHsSu/FL9GMD2D
1nxLUZ5a+l/Ltg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:00 2025 by rpki-client