Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          eP82MO2ho2wgWvv77w8IBSD+Q9HkH94EYOx2lq0/UCI=
Subject key identifier:   7A:3B:78:20:1A:4D:A3:CE:D7:B2:5C:9D:1F:7B:FE:EC:D5:30:66:C8
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       019922C3094F08A9D936E49B821B0A37BE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          1600
Signing time:             Sun 07 Sep 2025 06:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:31 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: E5ESI6hvKHuG2qpd+nX+rkGTTM0+X1G1ZqrYTUzO7GY=)
                          2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:09:4f:08:a9:d9:36:e4:9b:82:1b:0a:37:be:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Sep  7 06:00:31 2025 GMT
            Not After : Sep  8 06:00:31 2025 GMT
        Subject: CN=7a3b78201a4da3ced7b25c9d1f7bfeecd53066c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:07:cd:c1:73:bc:cf:c3:62:ff:7f:ff:5d:
                    5c:f2:72:e3:ca:d9:c9:63:f7:36:37:f1:cb:93:78:
                    fa:ec:41:b1:7a:4b:9a:62:2f:4c:80:87:a0:03:ae:
                    79:e7:9e:0b:ef:8e:e4:31:25:85:82:83:99:2a:57:
                    a9:b3:12:80:12:15:49:77:5c:5f:69:e6:c7:98:ee:
                    9b:a5:cb:ed:ec:a6:0d:2b:e3:65:3d:60:1f:d4:e3:
                    51:d9:2b:7f:59:cf:2a:26:2a:db:6f:d6:ec:8e:20:
                    5c:bd:5e:14:00:ac:f6:91:ca:08:bc:08:cc:51:ba:
                    0d:70:d0:49:6d:e6:db:a0:e7:ac:db:e8:d4:c5:7d:
                    5a:7e:f7:1f:3c:65:97:b7:1e:5d:ff:e3:2d:23:c2:
                    38:6c:64:b3:4c:2f:98:d7:e9:cc:10:91:1b:3a:7d:
                    d0:83:97:41:be:09:6c:76:36:56:2f:c9:fb:bf:79:
                    72:c3:86:15:66:40:b1:b2:50:24:91:75:ea:5f:c7:
                    37:f9:dc:09:60:2d:e8:00:b4:04:f8:e6:9a:22:3b:
                    cb:79:ff:38:e4:ae:c2:d7:0c:e8:a1:f2:be:0d:83:
                    38:41:57:31:85:90:ad:8d:9f:97:d9:18:42:c5:4d:
                    58:84:eb:e0:77:1f:0b:ca:5e:39:10:da:b4:f8:a7:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3B:78:20:1A:4D:A3:CE:D7:B2:5C:9D:1F:7B:FE:EC:D5:30:66:C8
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:76:b6:b3:0a:d7:c0:12:04:fb:d2:b8:e8:5f:78:cb:a5:9a:
         95:f9:77:f1:82:35:89:0c:66:33:ee:c9:d2:e4:49:b0:86:80:
         8e:23:38:62:ec:d2:5f:ed:54:15:ae:66:0e:ea:47:d2:3e:95:
         64:7d:dd:3d:81:96:d5:07:2d:7c:e5:65:7b:3f:0f:88:f0:ef:
         7f:48:ea:c6:f6:b3:e1:11:d7:5e:70:81:b8:0a:d5:c1:1e:97:
         72:7c:d7:ff:59:31:e0:4c:6f:c0:02:02:99:6b:b5:88:ae:09:
         d4:b8:00:14:f2:9d:f7:5c:13:e9:9b:ac:6f:d8:d9:91:8d:59:
         79:13:5f:53:8e:41:47:52:6d:e2:fe:40:f8:72:1f:d8:da:36:
         c2:a6:66:ab:a9:89:e4:09:db:7b:5b:20:84:a6:60:47:b1:81:
         de:be:32:a7:c7:01:47:44:13:19:13:c4:08:b6:7f:81:f5:49:
         9a:f3:e2:6f:dd:c0:ff:fc:6c:7f:dc:83:fe:15:39:bf:48:a4:
         72:fe:fe:48:ba:63:37:a5:05:36:5c:b1:63:57:45:2a:1d:17:
         b0:05:52:79:04:4a:5b:cf:d4:dd:42:73:4c:be:5a:2e:99:cf:
         67:87:70:b1:4f:76:62:8a:2e:d2:77:fb:ed:d7:95:73:90:e0:
         7f:88:cc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwwlPCKnZNuSbghsKN743MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1
ZTU4MjMwHhcNMjUwOTA3MDYwMDMxWhcNMjUwOTA4MDYwMDMxWjAzMTEwLwYDVQQD
Eyg3YTNiNzgyMDFhNGRhM2NlZDdiMjVjOWQxZjdiZmVlY2Q1MzA2NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BIHzcFzvM/DYv9//11c8nLjytnJ
Y/c2N/HLk3j67EGxekuaYi9MgIegA655554L747kMSWFgoOZKlepsxKAEhVJd1xf
aebHmO6bpcvt7KYNK+NlPWAf1ONR2St/Wc8qJirbb9bsjiBcvV4UAKz2kcoIvAjM
UboNcNBJbebboOes2+jUxX1afvcfPGWXtx5d/+MtI8I4bGSzTC+Y1+nMEJEbOn3Q
g5dBvglsdjZWL8n7v3lyw4YVZkCxslAkkXXqX8c3+dwJYC3oALQE+OaaIjvLef84
5K7C1wzoofK+DYM4QVcxhZCtjZ+X2RhCxU1YhOvgdx8Lyl45ENq0+Kd36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo7eCAaTaPO17JcnR97/uzVMGbIMB8GA1UdIwQY
MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt
YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl
LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHa2swrX
wBIE+9K46F94y6Walfl38YI1iQxmM+7J0uRJsIaAjiM4YuzSX+1UFa5mDupH0j6V
ZH3dPYGW1QctfOVlez8PiPDvf0jqxvaz4RHXXnCBuArVwR6XcnzX/1kx4ExvwAIC
mWu1iK4J1LgAFPKd91wT6Zusb9jZkY1ZeRNfU45BR1Jt4v5A+HIf2No2wqZmq6mJ
5Anbe1sghKZgR7GB3r4yp8cBR0QTGRPECLZ/gfVJmvPib93A//xsf9yD/hU5v0ik
cv7+SLpjN6UFNlyxY1dFKh0XsAVSeQRKW8/U3UJzTL5aLpnPZ4dwsU92Yoou0nf7
7deVc5Dgf4jMKg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:05 2025 by rpki-client