Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File:                     aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier:          lO7xS5Ww5sE4wy/b0ZvlZso4dIrTdwD6nCxPdTszU/k=
Subject key identifier:   59:57:67:2E:B5:71:69:D7:81:F2:FE:07:45:0F:61:BD:F2:24:13:CA
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer:       /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial:       0197B6A2304E40D36B6E1F67C9E52F9FBC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:02:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:51 +0000
Files and hashes:         1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
                          2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: F8LrqZ3BGRGSDG88HOFvXXd0UK4BmHvAAJOPivZtdwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:30:4e:40:d3:6b:6e:1f:67:c9:e5:2f:9f:bc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
        Validity
            Not Before: Jun 28 13:02:51 2025 GMT
            Not After : Jun 29 13:02:51 2025 GMT
        Subject: CN=5957672eb57169d781f2fe07450f61bdf22413ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:06:42:b4:74:47:38:d5:6c:66:e5:e1:81:
                    1c:f4:c0:6b:f3:4f:c4:b4:9f:3d:94:6d:ad:17:cd:
                    52:7e:c7:2a:30:c3:38:e2:22:39:bc:d4:7f:6d:44:
                    f4:70:34:14:bd:78:6b:c3:0d:a1:20:0a:14:22:d1:
                    37:2f:aa:19:27:a5:27:dc:68:21:21:bb:74:32:41:
                    02:33:56:c9:c6:0f:da:cd:50:ae:1e:9e:a5:43:16:
                    0b:76:17:40:92:70:50:3b:da:76:37:4a:b8:5a:70:
                    d0:04:54:00:57:4a:64:7d:d4:6e:d9:72:b7:0f:a7:
                    b4:91:ea:e9:58:26:58:21:21:4c:d2:b5:36:65:b8:
                    81:a0:64:c6:b1:56:33:32:f5:ea:39:15:9e:9c:3a:
                    31:77:47:16:a2:cf:d6:d0:87:e8:40:02:3f:34:3d:
                    b0:63:48:dd:04:17:bf:39:41:36:96:32:6f:84:12:
                    77:2d:8e:dd:96:02:32:ed:c1:b6:9d:f2:3f:fd:4a:
                    a6:51:49:ef:6b:11:bf:fe:66:c1:83:75:dd:d1:42:
                    24:25:76:94:49:d7:b1:e5:19:13:23:9b:fc:0f:74:
                    d8:86:b2:a1:95:b7:86:2e:b8:1c:a9:04:cc:d6:6e:
                    28:23:bb:04:ba:e9:de:3a:0f:73:2a:13:41:0b:65:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:57:67:2E:B5:71:69:D7:81:F2:FE:07:45:0F:61:BD:F2:24:13:CA
            X509v3 Authority Key Identifier:
                keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:f4:df:c8:3f:ac:06:af:8d:30:0b:71:ff:0a:df:43:f5:
         33:2c:53:b5:af:02:d9:8e:eb:1c:59:e0:08:8f:a6:9d:e3:60:
         5d:be:3e:d3:f7:65:a9:9c:91:34:be:46:31:bc:fc:32:fc:6c:
         ad:79:c7:f1:c2:07:01:b5:94:f5:21:18:ff:fa:b4:fd:f0:75:
         1e:8d:9a:29:d4:37:ae:36:4a:3e:61:9d:eb:1f:28:6c:43:d6:
         0e:54:90:36:92:83:a3:ee:c3:8a:80:51:5f:9b:39:cf:39:aa:
         9c:d2:a8:bb:39:74:cc:68:14:ea:b0:12:82:d6:26:81:c2:4f:
         e6:17:8f:6f:0f:d7:bb:61:ae:17:a9:4b:62:23:9c:44:96:3c:
         ff:22:e3:de:92:69:f3:08:c8:ca:65:b6:a3:c0:55:98:16:1a:
         37:1c:67:16:44:37:71:82:23:31:d5:c2:57:27:4a:c4:60:e3:
         8e:bf:29:02:37:97:46:ac:7d:91:00:a7:63:f3:71:42:6a:d1:
         48:48:fd:d0:e5:d7:8a:de:5d:f8:fe:61:b7:d4:9b:3f:7d:23:
         8b:7b:4a:1f:2e:75:ce:e7:f0:f2:74:6f:cd:58:47:81:bb:c9:
         2d:3d:02:e2:9b:3f:8a:69:52:0f:12:37:86:8e:87:2f:70:2c:
         1e:5b:da:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojBOQNNrbh9nyeUvn7wQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDg0NmJkYmIwODA1NWFjYmQ2YWI1OWQ5NTYwOTgxZTA0
NmVlNmYwHhcNMjUwNjI4MTMwMjUxWhcNMjUwNjI5MTMwMjUxWjAzMTEwLwYDVQQD
Eyg1OTU3NjcyZWI1NzE2OWQ3ODFmMmZlMDc0NTBmNjFiZGYyMjQxM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCkGQrR0RzjVbGbl4YEc9MBr80/E
tJ89lG2tF81SfscqMMM44iI5vNR/bUT0cDQUvXhrww2hIAoUItE3L6oZJ6Un3Ggh
Ibt0MkECM1bJxg/azVCuHp6lQxYLdhdAknBQO9p2N0q4WnDQBFQAV0pkfdRu2XK3
D6e0kerpWCZYISFM0rU2ZbiBoGTGsVYzMvXqORWenDoxd0cWos/W0IfoQAI/ND2w
Y0jdBBe/OUE2ljJvhBJ3LY7dlgIy7cG2nfI//UqmUUnvaxG//mbBg3Xd0UIkJXaU
Sdex5RkTI5v8D3TYhrKhlbeGLrgcqQTM1m4oI7sEuuneOg9zKhNBC2WEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlXZy61cWnXgfL+B0UPYb3yJBPKMB8GA1UdIwQY
MBaAFGoIRr27CAVay9arWdlWCYHgRu5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvYWdoR3Zic0lCVnJMMXF0WjJWWUpnZUJHN204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGv038g/
rAavjTALcf8K30P1MyxTta8C2Y7rHFngCI+mneNgXb4+0/dlqZyRNL5GMbz8Mvxs
rXnH8cIHAbWU9SEY//q0/fB1Ho2aKdQ3rjZKPmGd6x8obEPWDlSQNpKDo+7DioBR
X5s5zzmqnNKouzl0zGgU6rASgtYmgcJP5hePbw/Xu2GuF6lLYiOcRJY8/yLj3pJp
8wjIymW2o8BVmBYaNxxnFkQ3cYIjMdXCVydKxGDjjr8pAjeXRqx9kQCnY/NxQmrR
SEj90OXXit5d+P5ht9SbP30ji3tKHy51zufw8nRvzVhHgbvJLT0C4ps/imlSDxI3
ho6HL3AsHlva0w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:59 2025 by rpki-client