Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          aJvKS0sByjdHurGW8HShjFoTJy1VuZXjqAIkSYujTuE=
Subject key identifier:   6B:59:72:F1:12:0D:B3:A2:70:D3:C5:57:08:E0:D6:2B:11:C8:A2:EF
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       0198D5BC5D48EC69F098629CEAF05FC7C40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          03C5
Signing time:             Sat 23 Aug 2025 07:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:28 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: 37U54/qvGpgBedpNgRSn3dJ4E12t3/t9BHIIhQZDTh0=)
                          2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:5d:48:ec:69:f0:98:62:9c:ea:f0:5f:c7:c4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: Aug 23 07:02:28 2025 GMT
            Not After : Aug 24 07:02:28 2025 GMT
        Subject: CN=6b5972f1120db3a270d3c55708e0d62b11c8a2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:ca:c9:7e:00:4f:fe:f6:b5:3e:6b:9a:18:
                    86:e2:7c:11:9a:fb:53:24:ba:ec:14:cc:dd:6c:4a:
                    74:6f:2c:56:5b:b6:b6:52:ce:1e:26:62:27:ce:95:
                    f4:2f:ab:e9:5a:85:83:a0:cb:1b:24:56:3c:a0:bd:
                    28:3d:92:a7:f5:aa:3f:ef:46:5c:50:61:09:e1:ed:
                    e1:7d:37:82:9a:a7:2d:fc:61:46:16:35:a6:2c:9e:
                    2f:2c:d3:2e:83:d6:01:67:5b:ce:6a:48:8f:52:64:
                    d8:4b:bb:3c:96:dd:f6:52:8b:15:ff:e1:a9:18:db:
                    de:d9:b4:c4:46:39:ae:8d:be:3f:28:5f:53:b6:25:
                    5b:fc:62:27:1a:e1:c3:be:a2:5f:59:96:6d:c1:f2:
                    0e:64:19:f2:83:7a:35:0b:c3:26:a8:22:ec:64:16:
                    94:fe:c7:66:c0:f7:5d:7b:6f:9b:c2:de:d1:41:61:
                    b1:46:e8:a4:5f:c8:f5:d1:8e:88:89:0f:4c:51:a5:
                    52:44:01:ee:30:37:5a:e2:ad:3e:ec:f3:1d:ba:04:
                    37:c6:97:d2:e8:1b:4e:f3:3c:9c:f2:64:88:96:23:
                    77:6e:f6:d6:3e:fd:8d:c4:48:71:29:31:30:73:ba:
                    9f:91:9a:1f:80:b1:25:7b:ee:03:d2:b7:47:1b:ea:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:72:F1:12:0D:B3:A2:70:D3:C5:57:08:E0:D6:2B:11:C8:A2:EF
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:ea:89:0f:ab:bd:63:bf:b0:53:97:38:30:cb:6d:c6:a3:
         3d:f1:0b:3a:e5:92:da:83:82:12:8b:45:43:49:31:97:e9:35:
         39:5a:66:74:0c:65:80:56:7d:46:f3:3b:75:ad:7e:17:c2:84:
         85:37:f9:9e:a3:4d:ab:6f:f9:1a:d7:51:25:31:98:dc:72:0c:
         99:11:24:d4:f6:02:64:f3:c6:77:c5:bb:1c:49:5f:1e:8d:ff:
         55:6b:9f:71:6d:03:ad:c3:d5:e5:97:73:18:9d:da:76:e4:7b:
         e7:4e:49:11:a6:fc:a2:32:64:81:64:49:59:35:81:d2:46:ae:
         96:5c:7d:04:d2:a3:27:7a:f9:5f:53:3e:55:e6:69:c8:24:91:
         8b:fd:99:5e:91:2d:e0:18:31:5f:5d:03:45:9b:65:37:63:ca:
         4c:2f:55:a8:93:b9:35:22:a0:22:9e:7b:b0:5d:2c:e9:fd:b0:
         64:fa:e8:82:88:53:22:1d:7b:49:9b:b7:6b:b6:77:85:56:b5:
         94:3c:46:6e:e3:79:51:a9:5e:f5:e6:54:c0:02:8b:f5:8e:27:
         20:88:ef:bb:8a:c6:ea:e7:0b:f2:52:ab:df:11:76:ee:e4:3a:
         66:26:d4:3a:30:a8:05:d4:7d:83:31:45:68:9f:55:22:6b:c8:
         b5:d2:f2:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvF1I7GnwmGKc6vBfx8QNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi
NTY3NTEwHhcNMjUwODIzMDcwMjI4WhcNMjUwODI0MDcwMjI4WjAzMTEwLwYDVQQD
Eyg2YjU5NzJmMTEyMGRiM2EyNzBkM2M1NTcwOGUwZDYyYjExYzhhMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60/KyX4AT/72tT5rmhiG4nwRmvtT
JLrsFMzdbEp0byxWW7a2Us4eJmInzpX0L6vpWoWDoMsbJFY8oL0oPZKn9ao/70Zc
UGEJ4e3hfTeCmqct/GFGFjWmLJ4vLNMug9YBZ1vOakiPUmTYS7s8lt32UosV/+Gp
GNve2bTERjmujb4/KF9TtiVb/GInGuHDvqJfWZZtwfIOZBnyg3o1C8MmqCLsZBaU
/sdmwPdde2+bwt7RQWGxRuikX8j10Y6IiQ9MUaVSRAHuMDda4q0+7PMdugQ3xpfS
6BtO8zyc8mSIliN3bvbWPv2NxEhxKTEwc7qfkZofgLEle+4D0rdHG+oduwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtZcvESDbOicNPFVwjg1isRyKLvMB8GA1UdIwQY
MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt
MjFkZTAzYTg1MjM1LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1
LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7rqiQ+r
vWO/sFOXODDLbcajPfELOuWS2oOCEotFQ0kxl+k1OVpmdAxlgFZ9RvM7da1+F8KE
hTf5nqNNq2/5GtdRJTGY3HIMmREk1PYCZPPGd8W7HElfHo3/VWufcW0DrcPV5Zdz
GJ3aduR7505JEab8ojJkgWRJWTWB0kaullx9BNKjJ3r5X1M+VeZpyCSRi/2ZXpEt
4BgxX10DRZtlN2PKTC9VqJO5NSKgIp57sF0s6f2wZProgohTIh17SZu3a7Z3hVa1
lDxGbuN5Uale9eZUwAKL9Y4nIIjvu4rG6ucL8lKr3xF27uQ6ZibUOjCoBdR9gzFF
aJ9VImvItdLyJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:32 2025 by rpki-client