Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
File:                     AUI61NYpsvgot58ArEA4jje44lI.mft (raw, json)
Hash identifier:          Rapo9sAyAvgXEiIfnWDplFGTxBb6cCeHnHF+kpk2ewU=
Subject key identifier:   8D:57:76:EB:F5:F5:54:D0:34:18:90:F1:DA:96:84:7E:40:A0:CD:11
Authority key identifier: 01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52
Certificate issuer:       /CN=01423ad4d629b2f828b79f00ac40388e37b8e252
Certificate serial:       0198D5835D15126FB4DC4106A1120C5709B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
Manifest number:          127E
Signing time:             Sat 23 Aug 2025 06:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:12 +0000
Files and hashes:         1: AUI61NYpsvgot58ArEA4jje44lI.crl (hash: SSGqT3c7JlWXi8WyiOz0PLe62Cy1WM6HctIY46gSnzU=)
                          2: ibDNoVPt_SWuF1TTYGcbR_ptYMU.roa (hash: ul6C7Hw2mOMrIR7JJ3pVvWUBrEsSVBHfGtaoivQYtXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:5d:15:12:6f:b4:dc:41:06:a1:12:0c:57:09:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01423ad4d629b2f828b79f00ac40388e37b8e252
        Validity
            Not Before: Aug 23 06:00:12 2025 GMT
            Not After : Aug 24 06:00:12 2025 GMT
        Subject: CN=8d5776ebf5f554d0341890f1da96847e40a0cd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:20:2b:02:d5:c7:67:2a:57:5c:ac:45:8c:
                    b2:03:27:d5:fa:95:52:b0:d5:d8:71:6b:3c:af:b8:
                    d9:78:f7:11:40:23:a5:a9:f4:3c:8c:5c:42:90:04:
                    07:8a:60:7b:f6:53:bb:f1:bc:83:58:92:03:f3:57:
                    94:cf:66:55:9c:76:47:51:7a:9e:a1:29:4f:50:30:
                    18:c1:46:61:e0:2c:0e:bd:49:02:6e:70:05:25:bd:
                    90:e1:22:94:a1:7e:ed:a2:f6:72:d8:53:51:c3:51:
                    3a:5e:fb:72:6c:0f:1f:60:26:02:d9:e0:df:f8:05:
                    a0:b6:ed:60:ee:fe:b0:bb:8e:06:ea:d4:59:ca:3f:
                    8a:87:f6:6d:07:4b:4d:70:3e:e4:d3:56:61:2e:8c:
                    43:9a:d1:a3:38:03:18:5e:3a:1c:ce:01:ff:f6:e5:
                    14:ea:b7:2d:a9:a6:01:9e:cc:e3:e2:47:53:68:60:
                    c7:00:af:b1:e5:66:f5:3b:19:c3:2c:42:be:d1:8a:
                    f7:71:00:7d:9d:1e:da:94:16:20:f6:2a:7d:7e:ff:
                    b2:08:ff:e6:fa:90:a2:25:0a:51:41:b9:73:f1:d6:
                    5d:f8:d6:5c:fc:5a:77:52:4e:d0:48:3e:5c:ee:9e:
                    a5:76:26:f2:9e:ab:98:db:c9:7f:bb:a1:5b:63:75:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:76:EB:F5:F5:54:D0:34:18:90:F1:DA:96:84:7E:40:A0:CD:11
            X509v3 Authority Key Identifier:
                keyid:01:42:3A:D4:D6:29:B2:F8:28:B7:9F:00:AC:40:38:8E:37:B8:E2:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUI61NYpsvgot58ArEA4jje44lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36dbd-55eb-4de4-b6b9-839196345b6d/1/AUI61NYpsvgot58ArEA4jje44lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:08:bc:f4:96:8b:01:a9:7f:da:ae:82:b8:73:7f:6b:0e:
         27:34:0d:8a:4b:b7:fe:b7:e4:0d:f0:0b:ce:c3:3c:7d:25:cf:
         70:36:13:68:05:3f:68:6a:af:70:ce:13:f3:99:32:09:5d:d2:
         47:f9:7c:9c:46:74:6c:b4:ef:50:88:41:d6:bb:d0:75:5b:ce:
         63:bf:62:22:e2:4f:0d:e3:48:3f:f5:2e:d4:c0:37:3b:4a:5d:
         2f:d8:31:3e:4e:94:6d:69:36:5d:b3:9b:28:da:1f:cb:3e:3e:
         06:ff:eb:ab:c2:a8:36:ce:6c:1c:69:0d:50:a6:6a:5b:1f:9b:
         93:f9:7f:64:10:d0:fd:b5:b6:82:58:34:47:fa:43:af:0b:59:
         78:16:a7:a5:f3:bb:c9:fd:83:da:a4:c2:ba:c2:ce:d0:d8:52:
         32:c7:5f:c4:ad:9c:7a:d9:35:71:83:4d:c1:4c:7e:d9:e6:95:
         2e:4a:aa:a9:ce:0b:bd:6f:62:02:c2:b6:6d:87:26:c2:9f:ff:
         f3:1e:3b:49:38:9a:cf:7b:31:7e:86:56:30:eb:21:15:ad:9a:
         cf:d4:73:75:87:77:40:d7:d4:9d:ea:65:55:55:f0:50:df:31:
         d2:91:17:f2:f2:25:fb:28:7b:15:4c:5f:9e:21:9e:05:28:87:
         7f:46:00:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:10 2025 by rpki-client