Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File:                     AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier:          /5ofxhpokAyBlBp1wiHn9HxnKnLOS7isZCeHRfs4W+M=
Subject key identifier:   23:28:F0:E2:A1:D9:AB:0F:AE:10:EB:85:73:A4:1B:28:F6:4D:B2:5E
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer:       /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial:       0197B77CAC2302A2A2FD3067CED3769C739A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 17:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:30 +0000
Files and hashes:         1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: iBEEmURWDWWrBDgpYAA5iMLakH5/PuTFLMK2JGt4IuY=)
                          2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:ac:23:02:a2:a2:fd:30:67:ce:d3:76:9c:73:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
        Validity
            Not Before: Jun 28 17:01:30 2025 GMT
            Not After : Jun 29 17:01:30 2025 GMT
        Subject: CN=2328f0e2a1d9ab0fae10eb8573a41b28f64db25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:c6:a9:39:f7:dc:91:e1:de:f5:03:81:ec:
                    8b:a8:c4:ae:a8:9a:8f:5c:3a:47:e7:35:b4:60:90:
                    a4:bd:d2:7b:fc:cf:f2:12:1b:c3:92:a7:12:a7:25:
                    84:aa:c5:4b:21:73:3c:8c:fa:5c:97:9d:34:17:fd:
                    23:c2:1a:dd:68:bc:42:35:06:63:a1:42:45:34:b3:
                    b7:86:f7:fe:b3:d6:c0:79:dd:27:7f:76:a3:e2:a7:
                    e5:4b:2f:bf:b0:bd:1d:c8:3e:bd:75:88:51:f1:24:
                    88:44:b7:bf:07:6c:b7:ad:5a:7f:07:fe:77:b3:4f:
                    ff:7b:a2:e3:6c:81:d8:c3:56:27:f6:fe:72:c2:84:
                    ea:b6:de:a7:12:af:a0:9c:14:7e:c8:79:f6:6d:19:
                    88:71:08:05:0e:d3:9e:50:41:75:cd:55:a8:7f:d4:
                    ec:64:3e:a3:f8:22:25:04:a3:cf:f5:fb:a4:70:1d:
                    34:d8:11:a1:09:4b:96:e7:ac:d9:ac:39:d0:42:0f:
                    c2:bb:ff:6c:ff:c8:f1:46:3d:15:64:9c:1b:9d:b0:
                    9e:82:0e:bd:31:41:82:e8:ea:12:c5:d5:32:6c:bc:
                    dc:a0:be:fd:21:30:7c:c8:ed:a2:5a:49:12:ca:e1:
                    8e:75:7d:8c:81:61:79:3b:15:ba:30:72:99:cf:8a:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:F0:E2:A1:D9:AB:0F:AE:10:EB:85:73:A4:1B:28:F6:4D:B2:5E
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:42:12:e7:d2:7a:c2:1f:87:02:93:33:9d:4f:5f:75:d2:cd:
         0e:35:3d:e6:81:49:9b:1b:66:c7:a4:02:2a:7e:4f:c1:18:80:
         5e:9a:b4:2c:7d:90:e6:df:cb:86:fb:a4:53:9c:e6:06:e6:ee:
         35:15:73:e5:76:c9:d1:d1:41:6f:6b:48:0a:3e:b5:e5:54:b9:
         d2:f2:5f:8a:ac:1e:e7:df:06:ad:27:24:10:fc:62:39:84:4d:
         7b:25:a8:fd:f2:bf:c7:2b:bc:0d:a4:78:e6:a5:56:b7:95:22:
         e5:1a:cc:f2:28:a0:a8:4d:10:bd:38:42:90:4e:7b:67:b8:98:
         49:b2:4c:cc:8b:02:05:f8:3b:68:1e:8f:cf:85:cd:e0:b7:fd:
         02:1a:e5:ca:e5:a6:46:23:a8:d2:3c:73:b6:e0:be:02:a2:3a:
         4c:06:60:00:cc:ce:4f:a8:5b:6b:1c:a8:26:87:56:df:af:90:
         25:ce:04:8b:e8:bc:02:9c:ab:5d:df:ba:b1:37:fd:96:81:44:
         80:be:41:0a:2c:8b:80:47:40:97:eb:21:ec:c8:a1:5c:c5:1c:
         99:c1:7c:65:19:05:b8:e0:1f:42:31:c8:d7:6a:45:70:70:0e:
         50:95:c8:81:be:57:bf:41:c8:58:0e:32:45:6f:30:da:59:21:
         90:b8:e0:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKwjAqKi/TBnztN2nHOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFiZmVhMDMwNWM0OGU5NDllNmMyNDlmNDgxMGI0Njkw
NWM4ODYwHhcNMjUwNjI4MTcwMTMwWhcNMjUwNjI5MTcwMTMwWjAzMTEwLwYDVQQD
EygyMzI4ZjBlMmExZDlhYjBmYWUxMGViODU3M2E0MWIyOGY2NGRiMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32LGqTn33JHh3vUDgeyLqMSuqJqP
XDpH5zW0YJCkvdJ7/M/yEhvDkqcSpyWEqsVLIXM8jPpcl500F/0jwhrdaLxCNQZj
oUJFNLO3hvf+s9bAed0nf3aj4qflSy+/sL0dyD69dYhR8SSIRLe/B2y3rVp/B/53
s0//e6LjbIHYw1Yn9v5ywoTqtt6nEq+gnBR+yHn2bRmIcQgFDtOeUEF1zVWof9Ts
ZD6j+CIlBKPP9fukcB002BGhCUuW56zZrDnQQg/Cu/9s/8jxRj0VZJwbnbCegg69
MUGC6OoSxdUybLzcoL79ITB8yO2iWkkSyuGOdX2MgWF5OxW6MHKZz4qSQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMo8OKh2asPrhDrhXOkGyj2TbJeMB8GA1UdIwQY
MBaAFAMhv+oDBcSOlJ5sJJ9IELRpBciGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMt
NTYwYzllN2MwNzQ3LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMWRhMmItNzdiZC00MWM3LWJiZjMtNTYwYzllN2MwNzQ3
LzEvQXlHXzZnTUZ4STZVbm13a24wZ1F0R2tGeUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUIS59J6
wh+HApMznU9fddLNDjU95oFJmxtmx6QCKn5PwRiAXpq0LH2Q5t/LhvukU5zmBubu
NRVz5XbJ0dFBb2tICj615VS50vJfiqwe598GrSckEPxiOYRNeyWo/fK/xyu8DaR4
5qVWt5Ui5RrM8iigqE0QvThCkE57Z7iYSbJMzIsCBfg7aB6Pz4XN4Lf9AhrlyuWm
RiOo0jxztuC+AqI6TAZgAMzOT6hbaxyoJodW36+QJc4Ei+i8ApyrXd+6sTf9loFE
gL5BCiyLgEdAl+sh7MihXMUcmcF8ZRkFuOAfQjHI12pFcHAOUJXIgb5Xv0HIWA4y
RW8w2lkhkLjgIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:12 2025 by rpki-client