Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File:                     AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier:          avUrMfiaBWR6iO7W8JqNYVWrflUWEPxGNUMNtkV9Kp8=
Subject key identifier:   5E:B3:D8:A2:61:32:C3:1C:83:F6:ED:C2:8F:9E:22:81:A4:87:CC:01
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer:       /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial:       0198D54EBEC784C9B23649873BC5B651E440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 05:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:44 +0000
Files and hashes:         1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: 9rl6+jDcVi0tFNWBFyu9f5Zw8QA4SKEFISuDmv7mshg=)
                          2: HrI_ZNL0dOaa5SSqv99U6ELy6t4.roa (hash: n13hSIM8J7SvepGBD+Vp8UM2xhOsDHmf6h7aK70kh0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:be:c7:84:c9:b2:36:49:87:3b:c5:b6:51:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
        Validity
            Not Before: Aug 23 05:02:44 2025 GMT
            Not After : Aug 24 05:02:44 2025 GMT
        Subject: CN=5eb3d8a26132c31c83f6edc28f9e2281a487cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:5b:81:42:30:6f:1b:bd:f6:2f:99:07:ab:
                    a7:1f:25:a5:89:7d:e4:23:5c:e1:45:d9:89:19:f1:
                    f1:a9:e9:6b:b9:cf:2e:42:4e:4b:5e:1b:1f:28:51:
                    12:7a:10:a9:36:6d:ba:a5:22:e6:6a:db:95:73:d3:
                    0d:27:70:8a:4b:9d:92:a8:35:ff:9b:86:b8:48:29:
                    23:94:fc:70:f8:34:a1:64:03:05:8e:ad:92:c4:74:
                    48:69:fe:42:f1:fc:f6:3d:56:77:0a:62:fb:c0:41:
                    8e:45:8d:83:da:16:af:1b:1b:28:ea:30:ba:f4:5c:
                    a1:60:2f:cf:a6:2f:4e:e3:0a:3a:59:06:17:f6:d0:
                    71:2b:13:17:43:54:b8:f0:3a:f1:a1:24:b8:2b:b6:
                    1b:4c:bc:4c:8f:db:9d:a5:16:e8:29:b9:ee:5c:2e:
                    56:5b:38:5c:55:8d:6d:c4:44:8b:db:5a:c6:fc:c7:
                    69:12:2a:b7:d5:4f:de:a0:92:ee:c3:b8:21:a7:21:
                    a8:cb:47:4c:bf:84:fe:55:fe:b5:2e:32:c0:56:37:
                    df:20:7e:f6:75:02:51:4c:43:01:c0:8c:84:44:23:
                    52:01:b9:2d:46:2d:56:02:34:e5:8b:42:bb:d6:1e:
                    55:4b:32:b3:b3:21:fa:73:38:5b:c5:67:53:20:4f:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:D8:A2:61:32:C3:1C:83:F6:ED:C2:8F:9E:22:81:A4:87:CC:01
            X509v3 Authority Key Identifier:
                keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fd:59:e3:e3:77:1e:68:d0:26:39:79:e8:99:b7:df:8f:16:
         89:8a:cd:d1:6b:4a:d7:2e:f2:e7:c7:55:73:75:1b:99:7f:74:
         e5:c8:80:0c:61:ee:3a:e0:33:15:f9:db:33:8f:6c:bd:8f:72:
         25:a8:ff:89:1a:bc:96:92:ef:35:4c:35:24:c5:d4:0a:d2:7a:
         56:25:b1:d2:70:94:e2:ac:ff:48:2a:7d:53:95:3a:60:81:c7:
         bc:7f:6d:8b:b1:f1:b4:0a:a9:cf:c1:5d:35:78:9a:24:3b:ce:
         e9:52:93:5b:b3:97:40:aa:12:38:0a:8e:e7:77:96:b3:f2:15:
         02:cd:a0:bf:86:01:f1:2c:0d:58:75:74:07:40:93:01:3b:9b:
         73:80:80:48:3f:96:c0:a6:f7:5e:36:55:2a:54:b8:55:b1:a9:
         86:1b:b9:4d:88:70:83:57:a7:ca:4f:e2:63:7a:ef:43:9e:c6:
         62:bd:10:4b:35:cf:58:eb:f7:16:ac:68:7b:aa:92:3d:f8:b3:
         74:6c:ab:31:64:93:77:59:89:55:c1:f3:dd:b9:eb:d4:de:5f:
         5b:03:b3:9d:76:c8:ba:24:85:26:5c:c5:88:8f:38:97:74:82:
         91:ed:c6:16:fc:cf:30:4e:28:c0:f7:bb:e0:32:85:cc:87:ca:
         8d:d1:6a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:42 2025 by rpki-client