Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File:                     7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier:          fCGLSSK/ootZlciv0cEuTcM6ML0+mjErWxHwPaYuf1w=
Subject key identifier:   43:AE:10:30:DE:2D:95:12:22:AD:BD:AF:09:B2:D6:70:25:45:E4:23
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer:       /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial:       0197496848C256CB12221A54237D9D529199
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number:          01C5
Signing time:             Sat 07 Jun 2025 08:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:00 +0000
Files and hashes:         1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: ES9UqqcMuOxVyJPazSCpah1Y2fXDjR1TZWEqJcEXq2k=)
                          2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:48:c2:56:cb:12:22:1a:54:23:7d:9d:52:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
        Validity
            Not Before: Jun  7 08:01:00 2025 GMT
            Not After : Jun  8 08:01:00 2025 GMT
        Subject: CN=43ae1030de2d951222adbdaf09b2d6702545e423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:be:74:3f:da:dd:1b:6b:db:7b:b3:6a:23:
                    fa:0e:14:27:09:84:a8:f9:90:5f:fc:84:e5:9b:0e:
                    45:24:dc:1a:58:8c:44:da:70:53:b6:ca:12:28:89:
                    3b:2d:e3:cc:c9:da:da:da:f3:52:cb:d0:c9:ce:d7:
                    5c:bf:5b:d2:46:de:f5:ee:5a:2a:87:66:11:db:4c:
                    ea:fe:4d:b4:28:9a:aa:9a:d8:f4:58:5d:f8:77:58:
                    2c:c4:de:dc:20:aa:d1:8d:28:fc:b5:3f:23:ba:9c:
                    36:71:0c:9d:3c:b4:15:08:3b:31:24:65:53:39:91:
                    90:84:90:31:1a:29:33:d3:7b:5d:8d:e2:f3:16:23:
                    0f:85:bb:47:12:04:69:32:ea:57:38:76:22:ce:f9:
                    39:9c:93:b0:ae:48:e2:ed:df:4b:40:e8:d7:aa:48:
                    4d:d2:d8:8a:f5:4e:02:b2:81:8e:a1:e4:6f:9a:f5:
                    f5:ad:3c:ca:8f:59:07:f3:1a:5c:28:a9:22:2f:4b:
                    26:87:a6:43:51:d7:08:14:fd:18:16:31:0e:e4:e1:
                    2a:2e:5b:74:ec:f7:d5:6d:5f:d0:c1:6f:b3:16:6a:
                    36:cc:8e:45:5f:c8:38:54:12:2b:45:b0:c6:5c:b2:
                    10:11:e7:b1:ec:5d:93:7b:9d:98:c7:32:08:83:9f:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:10:30:DE:2D:95:12:22:AD:BD:AF:09:B2:D6:70:25:45:E4:23
            X509v3 Authority Key Identifier:
                keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:01:4e:60:ae:93:b3:ae:db:4c:92:1d:4a:e4:70:3f:80:a5:
         e4:86:b5:8e:75:7a:60:cd:df:0f:ba:0c:47:51:61:75:3f:58:
         c5:9d:5e:fb:94:67:5e:2b:5c:eb:a2:7a:98:06:54:7c:c8:f7:
         6e:ef:cd:41:7e:d7:ce:0a:1e:18:95:2c:35:c1:1d:d8:14:a1:
         2f:d3:25:96:e2:45:c7:ff:a4:08:1b:9c:d7:e3:a6:25:b4:8a:
         1e:42:2b:44:14:da:f9:36:f3:4d:65:6c:cd:05:77:9a:61:2d:
         11:0c:b7:04:c9:7d:df:be:35:b2:40:16:a3:cb:e8:94:c8:b4:
         71:1d:54:0b:63:a0:70:28:1a:6f:8b:3a:d4:ca:7f:9b:b1:ee:
         61:fe:a3:46:b1:ae:6b:c4:0d:1c:dd:5d:63:cc:8e:22:3e:4e:
         60:a6:54:89:bb:a6:08:09:c3:de:de:21:b2:b1:d5:4a:49:ad:
         63:02:b3:bb:81:07:a5:27:07:28:de:e9:db:74:ec:2a:95:24:
         43:b4:e3:6d:a4:6e:c0:00:9c:02:3c:a4:7a:2a:1f:1c:6b:66:
         7d:33:f6:a9:13:ae:cd:ca:3e:09:34:6d:c6:55:9e:b1:1b:8a:
         92:80:c8:80:6c:dc:64:d2:1c:18:13:71:7f:56:e7:83:4e:2c:
         c0:b6:a1:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEjCVssSIhpUI32dUpGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYWFiY2ExMTZiNGU3M2E5OTQ0YWI5NzAyY2Y5ODY2NTc4
MDM1ODAwHhcNMjUwNjA3MDgwMTAwWhcNMjUwNjA4MDgwMTAwWjAzMTEwLwYDVQQD
Eyg0M2FlMTAzMGRlMmQ5NTEyMjJhZGJkYWYwOWIyZDY3MDI1NDVlNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5a+dD/a3Rtr23uzaiP6DhQnCYSo
+ZBf/ITlmw5FJNwaWIxE2nBTtsoSKIk7LePMydra2vNSy9DJztdcv1vSRt717loq
h2YR20zq/k20KJqqmtj0WF34d1gsxN7cIKrRjSj8tT8jupw2cQydPLQVCDsxJGVT
OZGQhJAxGikz03tdjeLzFiMPhbtHEgRpMupXOHYizvk5nJOwrkji7d9LQOjXqkhN
0tiK9U4CsoGOoeRvmvX1rTzKj1kH8xpcKKkiL0smh6ZDUdcIFP0YFjEO5OEqLlt0
7PfVbV/QwW+zFmo2zI5FX8g4VBIrRbDGXLIQEeex7F2Te52YxzIIg59iwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOuEDDeLZUSIq29rwmy1nAlReQjMB8GA1UdIwQY
MBaAFO6qvKEWtOc6mUSrlwLPmGZXgDWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDct
ZGI0MTVhOWJlYmY1LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9hZWJkNDgtYTAwMi00NWY1LWIzMDctZGI0MTVhOWJlYmY1
LzEvN3FxOG9SYTA1enFaUkt1WEFzLVlabGVBTllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwFOYK6T
s67bTJIdSuRwP4Cl5Ia1jnV6YM3fD7oMR1FhdT9YxZ1e+5RnXitc66J6mAZUfMj3
bu/NQX7XzgoeGJUsNcEd2BShL9MlluJFx/+kCBuc1+OmJbSKHkIrRBTa+TbzTWVs
zQV3mmEtEQy3BMl93741skAWo8volMi0cR1UC2OgcCgab4s61Mp/m7HuYf6jRrGu
a8QNHN1dY8yOIj5OYKZUibumCAnD3t4hsrHVSkmtYwKzu4EHpScHKN7p23TsKpUk
Q7TjbaRuwACcAjykeiofHGtmfTP2qROuzco+CTRtxlWesRuKkoDIgGzcZNIcGBNx
f1bng04swLah1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:29:20 2025 by rpki-client