Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          JUEWabpSBX1lSkVCWnogIm6vErske/HKa0Ivhg547pw=
Subject key identifier:   B2:47:FB:C8:FB:13:46:97:BA:16:1F:69:95:EF:08:6A:83:7A:A7:7A
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       0198D65FDB232CF7AA8336DD576F6A063CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:01:02 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:02 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:02 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: PjmjjAFMHGCl+y4UhfMFKDKEOJBpelMKB1oDnaVXN0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:db:23:2c:f7:aa:83:36:dd:57:6f:6a:06:3c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Aug 23 10:01:02 2025 GMT
            Not After : Aug 24 10:01:02 2025 GMT
        Subject: CN=b247fbc8fb134697ba161f6995ef086a837aa77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:41:ae:fc:9a:c9:06:d4:93:19:20:d8:e5:
                    8b:1b:63:ec:0e:f7:85:df:56:97:1e:8b:83:bf:a5:
                    b8:93:62:97:27:b9:ae:65:66:39:16:16:9d:40:f0:
                    9e:13:df:a9:1e:36:40:cd:45:8d:4a:d5:40:5b:bd:
                    c4:66:3d:f4:c5:4d:a4:7e:e6:be:85:46:d0:e2:78:
                    f9:5c:0d:e4:0f:2e:80:5f:b5:e6:09:33:d2:76:ba:
                    4d:13:33:d5:99:7e:9a:21:9a:36:ae:9d:44:32:69:
                    6b:48:3b:db:f2:42:07:27:65:19:bd:b9:40:3c:bf:
                    0d:36:8e:e0:cb:9a:11:f9:41:4d:a0:17:7c:3b:a1:
                    f1:b3:00:47:58:41:1d:0b:40:c8:de:36:11:7c:cc:
                    be:e7:99:b5:07:ca:48:73:9b:e5:a3:64:b6:de:e7:
                    7e:4f:df:ff:b1:76:3a:53:73:2c:ae:d6:18:3f:38:
                    a9:64:f5:28:cd:bc:0b:d5:dc:b1:e2:a0:a7:bd:fb:
                    80:47:f3:81:c8:0b:57:a5:65:35:da:b9:ac:cb:8b:
                    da:23:34:15:93:0d:19:cd:ad:0c:e8:5f:97:79:1a:
                    2a:d2:b1:05:87:01:e8:bf:ba:51:63:ec:fd:0a:3c:
                    53:a3:cc:f3:35:62:e3:15:1f:26:da:64:9c:38:87:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:47:FB:C8:FB:13:46:97:BA:16:1F:69:95:EF:08:6A:83:7A:A7:7A
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:70:c4:26:fa:72:58:88:ca:53:cc:ee:1f:93:7b:67:55:
         4b:f1:33:66:04:7b:92:dd:80:9b:38:56:33:0a:36:99:0a:7b:
         99:d5:33:ed:7d:07:5d:b2:15:c4:fe:a2:de:4f:68:52:03:b9:
         88:ec:d3:b1:40:99:9a:7d:5e:a4:b8:7e:88:f4:45:c7:b6:d6:
         ed:b8:5a:5b:60:15:53:2f:8c:8f:09:f5:ef:78:c6:7f:d6:80:
         35:0e:49:cc:ff:65:f5:ed:a7:1f:e2:37:43:e2:6c:15:8e:01:
         02:c3:66:b0:5f:3c:9b:ec:cc:37:9d:32:05:69:9a:20:5f:82:
         e2:a5:5b:80:29:1c:82:55:bc:6f:b2:f7:45:d0:8e:91:68:67:
         6a:ce:ae:fc:f1:c1:ad:26:59:33:59:34:6c:a2:22:66:24:7d:
         96:23:ef:cf:eb:b9:46:8b:a2:3d:37:ad:a6:06:60:e7:fa:36:
         a8:6f:f5:7a:d2:51:bc:39:12:ef:ff:90:d2:2c:36:ed:be:dd:
         1c:d5:ac:a1:03:c0:9d:7d:12:2d:e0:54:53:8b:e5:d6:b2:b1:
         47:bd:c3:e6:44:4b:7f:f7:63:c3:25:f9:b0:a5:39:27:eb:6f:
         9b:49:59:26:29:5e:91:69:73:2b:7c:45:4f:7c:5a:be:3e:58:
         a0:43:11:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9sjLPeqgzbdV29qBjztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTI2Y2E4YzUxZmQxZWViMjdjMmE3ODRkYmYyMGJkMmE0
OTkxOWUwHhcNMjUwODIzMTAwMTAyWhcNMjUwODI0MTAwMTAyWjAzMTEwLwYDVQQD
EyhiMjQ3ZmJjOGZiMTM0Njk3YmExNjFmNjk5NWVmMDg2YTgzN2FhNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/1BrvyayQbUkxkg2OWLG2PsDveF
31aXHouDv6W4k2KXJ7muZWY5FhadQPCeE9+pHjZAzUWNStVAW73EZj30xU2kfua+
hUbQ4nj5XA3kDy6AX7XmCTPSdrpNEzPVmX6aIZo2rp1EMmlrSDvb8kIHJ2UZvblA
PL8NNo7gy5oR+UFNoBd8O6HxswBHWEEdC0DI3jYRfMy+55m1B8pIc5vlo2S23ud+
T9//sXY6U3MsrtYYPzipZPUozbwL1dyx4qCnvfuAR/OByAtXpWU12rmsy4vaIzQV
kw0Zza0M6F+XeRoq0rEFhwHov7pRY+z9CjxTo8zzNWLjFR8m2mScOIdBIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJH+8j7E0aXuhYfaZXvCGqDeqd6MB8GA1UdIwQY
MBaAFACSbKjFH9HusnwqeE2/IL0qSZGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQt
YzE5NTU4NTQ5MDBjLzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81NDM2NDMtYjNiYS00ZWNkLWFiZDQtYzE5NTU4NTQ5MDBj
LzEvQUpKc3FNVWYwZTZ5ZkNwNFRiOGd2U3BKa1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptFwxCb6
cliIylPM7h+Te2dVS/EzZgR7kt2AmzhWMwo2mQp7mdUz7X0HXbIVxP6i3k9oUgO5
iOzTsUCZmn1epLh+iPRFx7bW7bhaW2AVUy+Mjwn173jGf9aANQ5JzP9l9e2nH+I3
Q+JsFY4BAsNmsF88m+zMN50yBWmaIF+C4qVbgCkcglW8b7L3RdCOkWhnas6u/PHB
rSZZM1k0bKIiZiR9liPvz+u5RouiPTetpgZg5/o2qG/1etJRvDkS7/+Q0iw27b7d
HNWsoQPAnX0SLeBUU4vl1rKxR73D5kRLf/djwyX5sKU5J+tvm0lZJilekWlzK3xF
T3xavj5YoEMRRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:01 2025 by rpki-client