Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          59J6V46PCMXr3QMJ68aDLFTl1os5sQvf5ukJOoEVA6o=
Subject key identifier:   04:36:A8:A3:C3:D1:5E:15:D2:10:05:36:20:5A:49:31:FB:50:34:D8
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       0198D4736FAA9841ED38A5E8F8E8AFE7214F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0898
Signing time:             Sat 23 Aug 2025 01:03:11 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:11 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:11 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: f6K4xY03rpmnlvszAzcY08N49dngF/BzkNrZdHEyYYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:6f:aa:98:41:ed:38:a5:e8:f8:e8:af:e7:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Aug 23 01:03:11 2025 GMT
            Not After : Aug 24 01:03:11 2025 GMT
        Subject: CN=0436a8a3c3d15e15d2100536205a4931fb5034d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:d5:e5:cd:33:76:8f:40:c7:d0:da:42:d7:
                    16:29:79:49:03:32:94:f9:25:a2:53:31:a4:26:71:
                    f6:b2:21:d7:2a:3f:f8:9c:90:fe:2c:57:31:1d:88:
                    14:18:6d:43:ed:0a:09:5f:41:11:71:1a:d1:7a:7e:
                    2b:43:c3:44:2c:77:70:52:9e:74:45:e1:03:67:ee:
                    ed:5b:0f:4d:ff:bb:57:95:8e:51:f9:29:4e:e8:57:
                    9a:3a:b7:bc:c6:8a:1a:93:d0:3a:8f:4a:09:84:3e:
                    68:ec:5c:fe:60:ca:13:33:a6:ae:1d:70:10:20:6c:
                    da:34:af:f7:75:82:68:84:c3:3e:e4:ae:12:ac:85:
                    4d:50:e7:dd:ea:8c:ac:59:9b:cc:6e:77:63:d1:17:
                    94:2a:60:55:3f:94:dd:d5:b3:fd:91:7e:e4:7a:ba:
                    13:9d:10:cd:0b:a5:68:bf:74:fd:e2:11:2a:7d:e9:
                    1d:6c:9d:02:30:e6:cc:52:6c:29:09:2f:f0:fd:bb:
                    1f:62:8e:f1:b2:69:a0:86:25:00:83:bb:94:11:f6:
                    5f:f9:de:81:bc:d9:aa:f4:3e:56:72:a1:d3:c9:d2:
                    6f:41:23:ee:30:8d:cd:78:64:22:fc:1b:0d:fd:b6:
                    5a:23:f9:62:73:05:ac:d7:c9:13:b5:dd:9c:47:75:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:36:A8:A3:C3:D1:5E:15:D2:10:05:36:20:5A:49:31:FB:50:34:D8
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:c5:74:da:1d:ba:10:e9:11:7b:76:6c:fb:b9:f9:09:21:
         24:55:d0:87:30:9f:97:af:76:33:2d:95:26:74:c0:e7:8f:6d:
         2d:3a:1b:c3:3e:45:d5:1e:d3:f2:f6:cd:b5:b0:11:96:4c:f8:
         6f:dc:73:b3:b6:7a:d2:ca:d4:40:03:d6:31:39:2e:9e:6b:3c:
         7e:e9:ee:5e:79:43:d6:20:79:ff:6c:f0:d9:16:73:6b:4b:15:
         ee:4b:81:da:7a:1e:15:6d:f7:40:27:e6:6a:25:15:d8:20:37:
         98:b5:9c:06:42:3b:92:24:cb:d5:14:e5:48:38:9d:9e:f9:3d:
         c8:ed:b4:31:bf:b7:a3:ca:2b:7a:f7:50:54:e7:45:09:a2:e5:
         fe:53:a7:55:06:1a:65:a6:ca:af:71:3d:3a:61:43:a2:0d:a8:
         ff:dc:4c:3a:68:94:ec:7e:13:f1:ec:36:e9:60:e5:cc:38:01:
         93:96:59:52:e8:cb:de:07:f7:76:09:45:64:d9:4d:58:b6:3d:
         b7:9c:7c:78:b6:9c:06:4d:9b:1d:ca:5f:c9:0a:2b:2c:b3:99:
         7e:db:99:b8:90:69:91:fd:bf:84:79:77:6e:1b:61:89:ef:8c:
         f8:dc:0b:c3:8f:0e:0c:6e:06:72:89:be:30:bd:69:d8:78:b8:
         77:83:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:57 2025 by rpki-client