Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File:                     A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier:          4+BaNvnmnOSjFTVUNP4iUehiOpfqz+19IsHBxsaweic=
Subject key identifier:   14:15:0D:5E:69:77:29:4F:7F:99:D6:80:8C:12:F3:58:58:EF:83:B5
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer:       /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial:       0197B5FC099FC21CAF4125C1B5778B008083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number:          10D4
Signing time:             Sat 28 Jun 2025 10:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:22 +0000
Files and hashes:         1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: GsnYIWbRvS10ovJTZppr50xHoA9OgQDwo4OiRP6KcCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:09:9f:c2:1c:af:41:25:c1:b5:77:8b:00:80:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
        Validity
            Not Before: Jun 28 10:01:22 2025 GMT
            Not After : Jun 29 10:01:22 2025 GMT
        Subject: CN=14150d5e6977294f7f99d6808c12f35858ef83b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:0f:92:58:e6:46:94:b5:de:cd:29:b5:d6:
                    80:94:a7:cb:af:36:b3:fa:85:ae:05:9a:96:9a:e8:
                    ff:9a:dd:bc:68:ef:30:23:da:ba:ee:e8:a2:23:ce:
                    7c:19:f2:36:62:dd:3d:4c:c6:85:8f:45:88:df:d9:
                    a7:91:e5:d1:16:ee:b7:90:ba:63:2b:51:93:24:cf:
                    50:f9:4c:7c:1a:c5:e4:d3:bc:3b:0b:8c:f7:c3:7f:
                    05:36:b2:c2:79:83:3d:c2:c4:23:d4:21:30:d6:15:
                    44:14:fe:3a:e4:01:7b:f2:64:6d:ed:09:c4:8f:97:
                    cd:4a:de:37:86:3d:30:f6:66:c1:f4:93:d4:35:21:
                    5c:a0:19:3a:66:2c:72:4b:e9:04:40:9b:ed:dd:40:
                    b7:08:f7:39:79:0b:74:c1:8b:d2:89:6e:4a:fe:4f:
                    55:27:4e:c0:70:cd:d6:b5:05:50:da:f8:13:c7:3b:
                    2a:ef:fd:aa:a2:eb:48:d3:e0:62:be:a1:35:bc:50:
                    d1:da:88:28:2e:dd:60:be:45:cc:39:5d:95:ac:59:
                    23:e4:be:ae:5e:f7:32:58:f1:1b:89:04:5e:38:1f:
                    5f:0e:7f:62:00:38:f7:6e:31:37:40:92:77:48:08:
                    31:36:e6:c1:01:72:17:dd:d5:aa:b7:49:2f:1f:ba:
                    c4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:15:0D:5E:69:77:29:4F:7F:99:D6:80:8C:12:F3:58:58:EF:83:B5
            X509v3 Authority Key Identifier:
                keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:d3:3b:e9:42:f2:f1:f2:80:9d:d7:4a:b8:66:b0:57:97:
         09:04:e2:a9:56:40:fd:a3:2b:36:2e:a9:93:a6:ab:16:27:43:
         3e:0d:79:20:3a:d1:92:2a:a2:a9:6e:21:f6:15:89:03:a6:ee:
         b9:e0:25:c2:71:68:25:ff:69:cb:48:93:66:29:0d:d5:bd:84:
         04:b5:7f:84:a9:36:e6:3e:de:0b:fa:62:4c:43:1c:ac:fd:be:
         e9:3e:e9:07:62:b7:0c:45:00:9e:b1:90:ee:14:1a:99:f6:20:
         a7:b3:67:62:78:2d:63:8d:16:0d:c7:60:be:da:50:76:d9:fc:
         d0:27:51:52:81:9a:57:61:7d:c9:58:df:30:37:4a:25:64:6c:
         c1:d0:2f:e8:30:78:96:ce:5d:15:f3:aa:05:d5:52:d6:57:c5:
         cc:4a:30:b3:75:97:8e:ed:eb:c7:4c:87:8f:a1:d4:63:d6:59:
         eb:f0:cb:24:a3:19:5b:de:36:eb:25:81:0c:1a:d5:c2:2c:63:
         e2:70:12:59:cb:9c:18:d4:96:3f:0b:a4:bd:6b:b2:ae:3a:5b:
         44:17:74:b4:77:0b:cc:d0:9c:81:a0:fa:94:6a:7d:e3:b6:c0:
         de:8a:b1:41:b6:df:2b:6a:6f:56:bb:fb:b5:d3:5e:27:ba:26:
         30:20:00:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/AmfwhyvQSXBtXeLAICDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzZjU5NTU2NjljYjBhODE4ZmJhYzAyN2M2ODJhZWFl
ZDVkNzIwHhcNMjUwNjI4MTAwMTIyWhcNMjUwNjI5MTAwMTIyWjAzMTEwLwYDVQQD
EygxNDE1MGQ1ZTY5NzcyOTRmN2Y5OWQ2ODA4YzEyZjM1ODU4ZWY4M2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDoPkljmRpS13s0ptdaAlKfLrzaz
+oWuBZqWmuj/mt28aO8wI9q67uiiI858GfI2Yt09TMaFj0WI39mnkeXRFu63kLpj
K1GTJM9Q+Ux8GsXk07w7C4z3w38FNrLCeYM9wsQj1CEw1hVEFP465AF78mRt7QnE
j5fNSt43hj0w9mbB9JPUNSFcoBk6ZixyS+kEQJvt3UC3CPc5eQt0wYvSiW5K/k9V
J07AcM3WtQVQ2vgTxzsq7/2qoutI0+BivqE1vFDR2ogoLt1gvkXMOV2VrFkj5L6u
XvcyWPEbiQReOB9fDn9iADj3bjE3QJJ3SAgxNubBAXIX3dWqt0kvH7rE5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQVDV5pdylPf5nWgIwS81hY74O1MB8GA1UdIwQY
MBaAFAP4P1lVZpywqBj7rAJ8aCrq7V1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjIt
ZjE2ZjFhNzBhYjJkLzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjItZjE2ZjFhNzBhYjJk
LzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelXTO+lC
8vHygJ3XSrhmsFeXCQTiqVZA/aMrNi6pk6arFidDPg15IDrRkiqiqW4h9hWJA6bu
ueAlwnFoJf9py0iTZikN1b2EBLV/hKk25j7eC/piTEMcrP2+6T7pB2K3DEUAnrGQ
7hQamfYgp7NnYngtY40WDcdgvtpQdtn80CdRUoGaV2F9yVjfMDdKJWRswdAv6DB4
ls5dFfOqBdVS1lfFzEows3WXju3rx0yHj6HUY9ZZ6/DLJKMZW9426yWBDBrVwixj
4nASWcucGNSWPwukvWuyrjpbRBd0tHcLzNCcgaD6lGp947bA3oqxQbbfK2pvVrv7
tdNeJ7omMCAAeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:20 2025 by rpki-client