Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
File:                     AsNyEO2KVs4O3UV0v3NrYyReWCM.mft (raw, json)
Hash identifier:          vvhQD09u/5+AigLHJcGAvb+hH6jMLDPHL8i7A/vnAfw=
Subject key identifier:   2C:D0:73:73:7A:12:1B:96:31:67:19:B4:B0:F7:69:8B:27:61:68:26
Authority key identifier: 02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23
Certificate issuer:       /CN=02c37210ed8a56ce0edd4574bf736b63245e5823
Certificate serial:       0198D58340A73242D97A698C7F0C25ADE0D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
Manifest number:          15D8
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: AsNyEO2KVs4O3UV0v3NrYyReWCM.crl (hash: Ls56CNdhiG+ulOZER3vmMSokSije4+Ju2yK7NXjiYRI=)
                          2: k_PCDa1MyltAYjWzYMAd9l-Wa5E.roa (hash: lyYvyESDGqkH326dhXSiycM2A323liIWVuNkJINconc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:40:a7:32:42:d9:7a:69:8c:7f:0c:25:ad:e0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c37210ed8a56ce0edd4574bf736b63245e5823
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=2cd073737a121b96316719b4b0f7698b27616826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4d:29:e6:71:5d:b0:4b:fe:57:d9:c4:93:a8:
                    84:8a:85:53:ff:1f:a4:87:c2:e3:85:35:8a:a7:e0:
                    44:d9:7c:27:fc:a0:16:e6:4a:89:f4:1d:da:f0:69:
                    cf:d5:b2:b4:3f:e0:2b:48:c6:f8:33:9e:fa:4f:19:
                    b2:17:66:26:b3:3c:a1:c0:e0:c1:94:86:16:aa:db:
                    e4:5b:28:e1:fd:fd:c8:88:92:63:e8:f7:45:7e:ca:
                    5c:47:46:75:30:9f:4e:79:99:39:36:29:89:9b:b5:
                    66:19:15:12:86:c8:a6:51:fd:76:e8:e3:86:c6:46:
                    df:48:4a:95:7d:e9:94:36:8f:04:54:0a:08:48:f3:
                    e4:c1:2c:cf:de:22:89:a5:27:48:c4:33:2b:40:6c:
                    d1:2c:34:07:51:05:62:04:aa:76:34:ab:a3:a9:23:
                    0c:27:ed:74:54:a5:ed:3b:8c:10:23:a8:e7:a6:07:
                    31:d0:ef:9b:e2:df:ce:a3:85:10:19:f9:f8:ca:44:
                    7d:d2:fa:69:2e:2f:3e:d5:02:15:9a:95:81:19:35:
                    88:fd:63:c7:f4:48:fa:1c:9d:6f:93:3f:b9:2c:e2:
                    51:a8:7f:2a:d2:21:c2:0b:ff:7c:27:4d:8c:52:e8:
                    8a:10:86:04:57:47:08:35:2d:52:45:0a:f6:28:05:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D0:73:73:7A:12:1B:96:31:67:19:B4:B0:F7:69:8B:27:61:68:26
            X509v3 Authority Key Identifier:
                keyid:02:C3:72:10:ED:8A:56:CE:0E:DD:45:74:BF:73:6B:63:24:5E:58:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNyEO2KVs4O3UV0v3NrYyReWCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/372079-8901-4526-8d5a-c1f0eaeed8ce/1/AsNyEO2KVs4O3UV0v3NrYyReWCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:f6:72:1f:da:24:2a:b4:1c:e3:97:4c:e8:15:54:de:82:
         80:25:5f:e2:7a:ad:ca:6a:89:41:ac:32:3a:51:0e:95:d3:ec:
         8e:38:d0:ce:f7:c2:58:06:e0:c0:1c:d8:44:0a:2f:37:00:12:
         54:73:4b:06:8e:d8:c0:98:3b:ab:65:99:2b:7a:dc:3d:6d:c8:
         c7:b7:11:3f:f5:4b:67:67:c9:15:c2:7d:4d:c8:3e:99:c6:42:
         dd:7f:bd:73:fe:59:b8:3e:92:97:b4:2d:54:9e:e3:a4:3d:c0:
         c2:c6:61:0e:f6:1d:cf:60:c9:69:b6:b9:aa:c3:ac:40:56:7b:
         66:7c:cd:b5:aa:69:36:01:ad:05:be:d9:69:42:9a:4c:ac:5f:
         76:9d:5d:b0:26:2c:f2:fa:35:21:b5:0f:35:f6:97:0f:ea:e3:
         f7:80:21:a9:61:fa:63:d3:77:c6:48:c8:69:05:e2:f7:b2:0e:
         a6:df:ec:50:81:eb:87:77:18:da:e4:79:b5:82:92:5a:26:d5:
         91:84:30:15:83:81:c0:44:e3:f5:39:aa:0d:04:23:53:0d:d2:
         2b:c8:47:36:f8:ef:f1:97:e3:d3:44:81:47:23:c5:9c:a0:40:
         79:37:44:a6:4f:3e:3c:27:a3:28:61:08:ba:be:68:48:96:59:
         e4:2d:b7:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg0CnMkLZemmMfwwlreDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzM3MjEwZWQ4YTU2Y2UwZWRkNDU3NGJmNzM2YjYzMjQ1
ZTU4MjMwHhcNMjUwODIzMDYwMDA1WhcNMjUwODI0MDYwMDA1WjAzMTEwLwYDVQQD
EygyY2QwNzM3MzdhMTIxYjk2MzE2NzE5YjRiMGY3Njk4YjI3NjE2ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU0p5nFdsEv+V9nEk6iEioVT/x+k
h8LjhTWKp+BE2Xwn/KAW5kqJ9B3a8GnP1bK0P+ArSMb4M576TxmyF2YmszyhwODB
lIYWqtvkWyjh/f3IiJJj6PdFfspcR0Z1MJ9OeZk5NimJm7VmGRUShsimUf126OOG
xkbfSEqVfemUNo8EVAoISPPkwSzP3iKJpSdIxDMrQGzRLDQHUQViBKp2NKujqSMM
J+10VKXtO4wQI6jnpgcx0O+b4t/Oo4UQGfn4ykR90vppLi8+1QIVmpWBGTWI/WPH
9Ej6HJ1vkz+5LOJRqH8q0iHCC/98J02MUuiKEIYEV0cINS1SRQr2KAVh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzQc3N6EhuWMWcZtLD3aYsnYWgmMB8GA1UdIwQY
MBaAFALDchDtilbODt1FdL9za2MkXlgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEt
YzFmMGVhZWVkOGNlLzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8zNzIwNzktODkwMS00NTI2LThkNWEtYzFmMGVhZWVkOGNl
LzEvQXNOeUVPMktWczRPM1VWMHYzTnJZeVJlV0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB232ch/a
JCq0HOOXTOgVVN6CgCVf4nqtymqJQawyOlEOldPsjjjQzvfCWAbgwBzYRAovNwAS
VHNLBo7YwJg7q2WZK3rcPW3Ix7cRP/VLZ2fJFcJ9Tcg+mcZC3X+9c/5ZuD6Sl7Qt
VJ7jpD3AwsZhDvYdz2DJaba5qsOsQFZ7ZnzNtappNgGtBb7ZaUKaTKxfdp1dsCYs
8vo1IbUPNfaXD+rj94AhqWH6Y9N3xkjIaQXi97IOpt/sUIHrh3cY2uR5tYKSWibV
kYQwFYOBwETj9TmqDQQjUw3SK8hHNvjv8Zfj00SBRyPFnKBAeTdEpk8+PCejKGEI
ur5oSJZZ5C236w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:57 2025 by rpki-client