Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File:                     AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier:          5fnRHxSB9p3jY4GqmQU/A1/ie8LX8JpkosQOcuX+9jw=
Subject key identifier:   E0:A5:18:A1:05:7B:B7:73:FB:17:D2:4C:9C:86:78:D8:C3:D6:EA:B7
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer:       /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial:       0198D4E045802695F66FCA955D1F84113EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:04 +0000
Files and hashes:         1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: xwHWrUOTz2/nYjAqJXiBgDIQ5YLTVUBgUOzkxNWiKnQ=)
                          2: G-x9l4PGLNif47OW3NwBj1bjEFk.roa (hash: gkQrFC6ugAL0eKhNEMz9YjZEv73JxhI6D2mp/f+87Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:45:80:26:95:f6:6f:ca:95:5d:1f:84:11:3e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
        Validity
            Not Before: Aug 23 03:02:04 2025 GMT
            Not After : Aug 24 03:02:04 2025 GMT
        Subject: CN=e0a518a1057bb773fb17d24c9c8678d8c3d6eab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:b6:d6:ca:2e:ea:45:7a:81:53:fc:45:06:
                    8a:ef:27:8a:10:2f:69:6f:e1:bd:55:26:3f:6a:a9:
                    52:94:2d:5c:ba:a7:9b:48:0d:f2:f5:9b:54:e2:4f:
                    54:39:e6:37:33:2e:22:b8:d1:b8:6a:15:97:9c:e0:
                    bf:f6:c6:11:8d:1f:09:d0:45:93:d1:2a:80:41:c7:
                    1f:aa:e7:ce:a5:14:04:c4:a7:60:cc:00:6c:83:ff:
                    92:27:e2:2a:7c:1f:54:6f:53:20:31:28:57:6d:5b:
                    6d:dc:c6:13:19:6b:fa:f1:21:5b:f1:5e:f2:a8:8c:
                    f7:03:52:48:fd:e4:54:06:4d:53:45:98:a2:73:2f:
                    c4:ae:6c:8c:5b:74:19:95:28:ac:75:97:00:0c:3a:
                    ff:a9:30:7a:69:04:3f:81:30:40:07:13:8c:07:29:
                    66:8d:35:c8:bd:84:52:2b:45:b5:d3:7d:c3:89:00:
                    79:76:3f:13:d1:71:c9:71:87:b3:7b:00:18:f7:92:
                    54:2b:6f:37:29:9c:13:0f:92:f7:60:ab:1a:df:45:
                    34:b6:45:cf:44:8d:9e:2d:72:c6:04:3e:02:0b:e0:
                    43:13:31:05:f8:09:ca:07:dc:04:7d:d9:c9:0d:e5:
                    96:fe:de:c2:75:77:fa:cf:61:2a:b7:92:c5:0f:f8:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A5:18:A1:05:7B:B7:73:FB:17:D2:4C:9C:86:78:D8:C3:D6:EA:B7
            X509v3 Authority Key Identifier:
                keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ae:f2:37:5e:f4:23:8b:d0:41:80:60:33:c3:ed:cf:cf:0c:
         4a:87:7b:c5:4c:f0:8a:7d:52:d4:d6:28:8d:9a:3a:01:51:f1:
         f8:9c:81:ba:04:5c:be:91:ec:8a:e3:52:ef:2e:39:82:af:8f:
         5c:b0:cf:70:38:1c:64:a9:ef:0c:0b:dc:67:a1:a5:08:83:61:
         3a:73:83:e5:6d:70:14:00:e7:db:8a:07:e1:9a:d3:37:e7:cb:
         3d:be:77:8b:f4:76:88:02:01:95:44:e0:0e:11:70:ee:95:42:
         aa:7f:72:19:e0:40:c2:f9:88:14:68:01:fb:f0:b2:b0:f3:a7:
         7d:ac:b5:96:57:a6:44:eb:c0:eb:3b:b7:2e:a5:e4:1d:1c:e9:
         19:3a:85:25:ec:e9:c1:a0:15:af:bc:0a:e8:79:74:41:20:9a:
         43:bd:61:08:27:d4:08:7e:4b:8a:2d:f7:a3:c3:f2:24:b3:2c:
         a2:34:e0:18:d2:43:8f:9a:43:54:dd:09:8d:91:98:8e:00:37:
         f8:16:20:c4:f5:52:07:de:f3:9a:56:ea:39:fd:80:7f:6b:57:
         fa:7a:63:6b:26:47:2d:84:2d:cd:a8:09:47:5a:c9:af:3f:6a:
         34:ea:32:c1:3a:d0:d5:a7:e0:87:cd:ca:b5:da:7f:83:a4:6c:
         9f:b0:ca:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4EWAJpX2b8qVXR+EET7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODM4MzA3Zjc5YWNkYzU5YWQ2ZWI4MmU4YzhhYWVmYTNk
ODgyODkwHhcNMjUwODIzMDMwMjA0WhcNMjUwODI0MDMwMjA0WjAzMTEwLwYDVQQD
EyhlMGE1MThhMTA1N2JiNzczZmIxN2QyNGM5Yzg2NzhkOGMzZDZlYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlou21sou6kV6gVP8RQaK7yeKEC9p
b+G9VSY/aqlSlC1cuqebSA3y9ZtU4k9UOeY3My4iuNG4ahWXnOC/9sYRjR8J0EWT
0SqAQccfqufOpRQExKdgzABsg/+SJ+IqfB9Ub1MgMShXbVtt3MYTGWv68SFb8V7y
qIz3A1JI/eRUBk1TRZiicy/ErmyMW3QZlSisdZcADDr/qTB6aQQ/gTBABxOMBylm
jTXIvYRSK0W1033DiQB5dj8T0XHJcYezewAY95JUK283KZwTD5L3YKsa30U0tkXP
RI2eLXLGBD4CC+BDEzEF+AnKB9wEfdnJDeWW/t7CdXf6z2Eqt5LFD/jw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOClGKEFe7dz+xfSTJyGeNjD1uq3MB8GA1UdIwQY
MBaAFAGDgwf3ms3FmtbrgujIqu+j2IKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQt
Y2EzZDRhYWU2ZjA5LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85ZjYxYmUtOGMzMS00OWJhLWI0MjQtY2EzZDRhYWU2ZjA5
LzEvQVlPREJfZWF6Y1dhMXV1QzZNaXE3NlBZZ29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0q7yN170
I4vQQYBgM8Ptz88MSod7xUzwin1S1NYojZo6AVHx+JyBugRcvpHsiuNS7y45gq+P
XLDPcDgcZKnvDAvcZ6GlCINhOnOD5W1wFADn24oH4ZrTN+fLPb53i/R2iAIBlUTg
DhFw7pVCqn9yGeBAwvmIFGgB+/CysPOnfay1llemROvA6zu3LqXkHRzpGTqFJezp
waAVr7wK6Hl0QSCaQ71hCCfUCH5Lii33o8PyJLMsojTgGNJDj5pDVN0JjZGYjgA3
+BYgxPVSB97zmlbqOf2Af2tX+npjayZHLYQtzagJR1rJrz9qNOoywTrQ1afgh83K
tdp/g6Rsn7DK6w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:10 2025 by rpki-client