Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          eEFgUuX6qPgMJeTeENXSitmpWnsugctEnCLufwMOBY0=
Subject key identifier:   F3:6A:4B:29:95:86:44:00:31:1C:FF:99:52:32:A9:10:D6:05:04:B4
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       0197D32A60DA1F4EA4393C195886728D9676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          15C2
Signing time:             Fri 04 Jul 2025 02:00:59 +0000
Manifest this update:     Fri 04 Jul 2025 02:00:59 +0000
Manifest next update:     Sat 05 Jul 2025 02:00:59 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: SKNCNkOajTl/QClQg40xhMnJu5EwL/bkKFz8F84KrNQ=)
                          2: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (hash: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=)
                          3: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (hash: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=)
                          4: UP92FGd897Ta77gAjDusBRyzKw4.roa (hash: bi2tqHIDLMNNDJZuMzCDB/j/tTne6ixxxWYNy/lNRuw=)
                          5: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (hash: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d3:2a:60:da:1f:4e:a4:39:3c:19:58:86:72:8d:96:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Jul  4 02:00:59 2025 GMT
            Not After : Jul  5 02:00:59 2025 GMT
        Subject: CN=f36a4b2995864400311cff995232a910d60504b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:55:33:36:7d:4a:33:3a:0a:e5:f6:22:3e:
                    5a:03:b3:2d:c8:ea:6c:f6:af:8b:c1:3a:59:90:71:
                    88:e8:42:fd:1e:2d:62:6b:67:af:5e:a2:00:ae:9f:
                    da:05:e0:59:1f:4c:b6:b6:02:fe:89:3f:48:28:35:
                    57:af:42:9e:51:72:e1:86:da:bb:2f:57:38:b9:94:
                    9d:64:d2:19:97:fc:8b:2c:15:7f:52:6f:1a:04:cb:
                    ea:1b:1d:4b:26:a7:5e:38:49:44:4b:bf:fa:76:88:
                    77:a0:ee:df:21:c9:bb:f2:0d:93:cb:4e:2f:23:40:
                    0a:09:8a:43:a5:e0:78:9d:fe:8c:21:db:5c:f6:5f:
                    bd:3d:d7:1f:a8:3d:f5:05:e9:05:c9:2f:cb:a9:0e:
                    0e:be:7e:89:a2:47:8c:ea:ae:33:5f:ba:8e:0a:92:
                    48:e2:f0:b2:58:4d:b1:5b:47:4f:43:b2:cc:c7:78:
                    6d:66:5b:61:3c:0d:9d:65:62:8d:79:17:3e:16:bf:
                    f7:b9:ae:74:f7:0d:fb:1d:28:4b:fd:39:3e:b5:1c:
                    64:f0:0a:a2:1e:21:93:bf:ca:ab:7c:db:2f:49:10:
                    39:02:29:f1:cd:bb:d9:78:45:a6:b4:de:57:90:95:
                    8a:9a:0f:0a:59:03:da:00:f9:f0:e4:79:2d:54:c4:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:4B:29:95:86:44:00:31:1C:FF:99:52:32:A9:10:D6:05:04:B4
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:e4:04:5d:71:08:68:63:4c:4e:71:b8:30:3f:8c:01:5b:
         ab:44:b1:99:83:51:f3:28:ec:a7:d6:5f:de:f4:14:5d:9c:fa:
         cb:66:54:95:65:24:f2:a5:ea:0f:7c:28:d1:f8:ec:ae:02:5c:
         9b:dc:ff:d6:df:34:52:ec:fa:64:c8:87:b0:b1:59:5e:11:65:
         3b:95:c6:23:17:32:c3:f5:bf:a7:82:ab:90:3a:cb:62:8a:13:
         67:14:70:a4:c5:52:85:a8:39:82:c3:f6:e8:5a:7a:13:0f:71:
         e4:31:4b:c6:10:cc:0c:af:4f:11:f5:92:91:e9:f2:17:53:bc:
         ec:7f:cd:f4:12:16:60:f6:88:75:04:bd:9b:ff:f8:51:db:98:
         0f:3e:93:fb:ec:b2:95:0e:9c:10:1c:8a:d3:99:e8:da:01:4f:
         88:82:7a:a2:7b:2e:ea:99:ac:10:be:c6:b3:b1:4e:86:b4:9c:
         f9:c4:1e:66:4a:81:0e:16:1d:6e:79:a6:4b:a8:0f:8f:ea:7e:
         20:8d:de:d5:4d:41:22:58:c5:bb:aa:05:4c:52:21:d3:ae:20:
         5b:c6:07:b3:7a:b6:58:91:57:54:40:35:4c:94:23:5f:07:cd:
         f4:80:d4:d5:45:5a:1d:75:9e:3e:83:96:3a:da:11:54:f8:d9:
         37:36:bc:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfTKmDaH06kOTwZWIZyjZZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3
M2E4ZjgwHhcNMjUwNzA0MDIwMDU5WhcNMjUwNzA1MDIwMDU5WjAzMTEwLwYDVQQD
EyhmMzZhNGIyOTk1ODY0NDAwMzExY2ZmOTk1MjMyYTkxMGQ2MDUwNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVVMzZ9SjM6CuX2Ij5aA7MtyOps
9q+LwTpZkHGI6EL9Hi1ia2evXqIArp/aBeBZH0y2tgL+iT9IKDVXr0KeUXLhhtq7
L1c4uZSdZNIZl/yLLBV/Um8aBMvqGx1LJqdeOElES7/6doh3oO7fIcm78g2Ty04v
I0AKCYpDpeB4nf6MIdtc9l+9PdcfqD31BekFyS/LqQ4Ovn6JokeM6q4zX7qOCpJI
4vCyWE2xW0dPQ7LMx3htZlthPA2dZWKNeRc+Fr/3ua509w37HShL/Tk+tRxk8Aqi
HiGTv8qrfNsvSRA5AinxzbvZeEWmtN5XkJWKmg8KWQPaAPnw5HktVMSplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNqSymVhkQAMRz/mVIyqRDWBQS0MB8GA1UdIwQY
MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt
MmVhODdlNmVhMmEwLzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw
LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ7kBF1x
CGhjTE5xuDA/jAFbq0SxmYNR8yjsp9Zf3vQUXZz6y2ZUlWUk8qXqD3wo0fjsrgJc
m9z/1t80Uuz6ZMiHsLFZXhFlO5XGIxcyw/W/p4KrkDrLYooTZxRwpMVShag5gsP2
6Fp6Ew9x5DFLxhDMDK9PEfWSkenyF1O87H/N9BIWYPaIdQS9m//4UduYDz6T++yy
lQ6cEByK05no2gFPiIJ6onsu6pmsEL7Gs7FOhrSc+cQeZkqBDhYdbnmmS6gPj+p+
II3e1U1BIljFu6oFTFIh064gW8YHs3q2WJFXVEA1TJQjXwfN9IDU1UVaHXWePoOW
OtoRVPjZNza8GA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:38:43 2025 by rpki-client