Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File:                     auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier:          gOowF7ebfxbg6zNGIhX06r9SE1ApSeHGQwYpIDneKpY=
Subject key identifier:   5A:9E:ED:85:A6:6F:C5:1B:EE:B9:E4:8B:82:AC:2D:FB:31:C5:A8:C9
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       0199221E3D7574B8E6AAE104982F3BCD9743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number:          1125
Signing time:             Sun 07 Sep 2025 03:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:31 +0000
Files and hashes:         1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: vL+WqfpitU1/HgnZnl/8129hzTQ3/JrQcCddPDqIIBI=)
                          2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
                          3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3d:75:74:b8:e6:aa:e1:04:98:2f:3b:cd:97:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Sep  7 03:00:31 2025 GMT
            Not After : Sep  8 03:00:31 2025 GMT
        Subject: CN=5a9eed85a66fc51beeb9e48b82ac2dfb31c5a8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:cd:8b:0f:28:3d:b3:d7:db:17:62:b9:65:
                    59:18:66:d0:c0:0f:8d:c2:24:e9:44:ff:a3:15:18:
                    92:77:6e:05:63:aa:d8:c2:50:3f:9d:fa:10:56:3a:
                    5e:a9:07:b6:37:92:6c:92:ee:9f:27:0f:be:c7:d9:
                    bd:0d:ee:d0:4f:bf:21:ab:c0:09:b5:e5:05:62:20:
                    c6:c7:aa:7e:a3:ee:67:d1:5b:cf:0e:01:b6:e0:48:
                    82:c3:e8:2b:1b:f3:b5:5c:dd:2b:1a:d4:fc:a9:78:
                    6b:f2:fc:7a:ab:c5:15:e3:da:13:61:64:b7:8d:eb:
                    b5:21:21:4e:de:b2:9a:bd:a9:e4:dd:f6:e6:f9:d4:
                    b1:02:bd:c5:f1:21:7a:28:70:ef:04:43:bd:52:5b:
                    92:2e:7b:68:f1:94:62:19:44:3d:bd:73:3e:d6:c7:
                    f7:ba:9d:e5:e6:42:9c:0b:0e:d4:5a:06:88:b6:d2:
                    72:e1:09:da:d8:3b:71:d3:27:07:a3:b3:dc:bd:3c:
                    cd:77:93:cd:7d:64:9a:32:d8:36:5e:d0:57:d4:1f:
                    ff:59:60:76:75:a4:08:a7:d1:1a:0f:df:bc:ae:57:
                    1f:9d:5c:6f:d0:99:bd:64:e3:a5:92:0e:c8:52:26:
                    21:29:8b:6d:d1:7b:b6:f5:98:bf:ce:a1:3e:12:03:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9E:ED:85:A6:6F:C5:1B:EE:B9:E4:8B:82:AC:2D:FB:31:C5:A8:C9
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5a:31:50:a6:a8:be:49:f5:88:27:3b:27:c9:9c:73:1f:31:
         a5:1c:8f:84:d7:50:a5:d6:23:b0:84:b4:7e:4f:3e:8b:b5:b3:
         ca:48:4c:e5:94:21:3d:b4:69:fb:29:ec:08:17:61:6e:8a:94:
         61:83:c6:31:3b:e4:6b:8f:f1:29:be:95:a4:28:09:10:72:9c:
         ec:43:99:54:88:85:9c:43:83:be:32:77:88:78:45:9b:47:c9:
         f4:d9:1a:36:d1:c7:b1:99:eb:79:54:04:33:dc:28:9f:16:c0:
         84:10:3c:27:89:05:98:da:6c:98:0b:40:86:7d:af:de:37:dc:
         4e:e0:41:4e:13:c6:c3:c2:7e:c7:f3:7b:d1:88:84:67:04:26:
         25:37:6c:8a:36:65:ae:39:92:06:10:0b:69:95:15:b4:75:35:
         55:1e:1a:33:50:71:5c:b4:d1:c1:5a:f6:fe:22:97:d4:42:aa:
         51:d7:a7:83:aa:ad:a2:af:b7:dd:34:94:04:42:26:09:c0:2c:
         45:3c:ed:0c:84:9a:fb:e7:8e:eb:4c:be:41:26:1b:6c:8c:25:
         c9:6f:54:28:6a:25:09:02:48:53:f6:e0:6f:e4:1c:c1:21:64:
         15:00:32:c4:89:c4:35:0e:26:b0:05:22:02:b6:1e:69:2a:6c:
         cd:5e:dd:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHj11dLjmquEEmC87zZdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWJhMGYyMzc0MTIwZDU0ZmE1YmNkYzJhOWQyNDUxNDE3
MmVhNmQwHhcNMjUwOTA3MDMwMDMxWhcNMjUwOTA4MDMwMDMxWjAzMTEwLwYDVQQD
Eyg1YTllZWQ4NWE2NmZjNTFiZWViOWU0OGI4MmFjMmRmYjMxYzVhOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDbNiw8oPbPX2xdiuWVZGGbQwA+N
wiTpRP+jFRiSd24FY6rYwlA/nfoQVjpeqQe2N5Jsku6fJw++x9m9De7QT78hq8AJ
teUFYiDGx6p+o+5n0VvPDgG24EiCw+grG/O1XN0rGtT8qXhr8vx6q8UV49oTYWS3
jeu1ISFO3rKavank3fbm+dSxAr3F8SF6KHDvBEO9UluSLnto8ZRiGUQ9vXM+1sf3
up3l5kKcCw7UWgaIttJy4Qna2Dtx0ycHo7PcvTzNd5PNfWSaMtg2XtBX1B//WWB2
daQIp9EaD9+8rlcfnVxv0Jm9ZOOlkg7IUiYhKYtt0Xu29Zi/zqE+EgPPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqe7YWmb8Ub7rnki4KsLfsxxajJMB8GA1UdIwQY
MBaAFGrroPI3QSDVT6W83CqdJFFBcuptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hZmFlOTMtZTc5Zi00OTlmLTkyMDMt
MGZlOGJkNjU1NmQ1LzEvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hZmFlOTMtZTc5Zi00OTlmLTkyMDMtMGZlOGJkNjU1NmQ1
LzEvYXV1ZzhqZEJJTlZQcGJ6Y0twMGtVVUZ5Nm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVoxUKao
vkn1iCc7J8mccx8xpRyPhNdQpdYjsIS0fk8+i7WzykhM5ZQhPbRp+ynsCBdhboqU
YYPGMTvka4/xKb6VpCgJEHKc7EOZVIiFnEODvjJ3iHhFm0fJ9NkaNtHHsZnreVQE
M9wonxbAhBA8J4kFmNpsmAtAhn2v3jfcTuBBThPGw8J+x/N70YiEZwQmJTdsijZl
rjmSBhALaZUVtHU1VR4aM1BxXLTRwVr2/iKX1EKqUdeng6qtoq+33TSUBEImCcAs
RTztDISa++eO60y+QSYbbIwlyW9UKGolCQJIU/bgb+QcwSFkFQAyxInENQ4msAUi
ArYeaSpszV7dkQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:02 2025 by rpki-client