Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          wDoUGk8Jf2mY60XadtVdWc0MYssjKEfB1dz/ISb0/T0=
Subject key identifier:   88:02:B9:04:F0:12:82:7F:7E:15:8F:7D:FC:58:77:7F:22:25:36:78
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       0198D6608DC406481FD44DADF986F8176EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          09ED
Signing time:             Sat 23 Aug 2025 10:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:48 +0000
Files and hashes:         1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=)
                          2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=)
                          3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: e5nJdZ5uZ/ZC9dWaFBgjNhSKU1Ppp47SYDCOo2Pyly0=)
                          5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:8d:c4:06:48:1f:d4:4d:ad:f9:86:f8:17:6e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Aug 23 10:01:48 2025 GMT
            Not After : Aug 24 10:01:48 2025 GMT
        Subject: CN=8802b904f012827f7e158f7dfc58777f22253678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:64:5e:4c:c3:00:6a:22:45:7d:ba:ae:4c:
                    28:1a:93:4b:64:35:5c:82:2b:80:0f:d1:d5:80:3d:
                    dc:80:0e:54:eb:65:47:07:f8:a0:30:c4:c2:b9:9e:
                    e4:04:73:79:03:d7:cc:e4:12:38:27:4b:6e:e4:61:
                    17:b6:e8:3e:4b:69:ff:b6:13:12:6f:02:70:ea:54:
                    05:36:e1:8e:05:f7:ae:fb:a4:27:2c:52:cd:4f:7c:
                    ae:67:a5:bc:18:fc:4f:d2:82:70:e6:77:59:6c:45:
                    f6:28:1d:d7:ec:a1:a0:3d:7f:0a:c7:03:2a:b5:49:
                    5f:53:d2:9c:b6:1e:ee:0d:83:a6:52:54:bb:cd:8a:
                    b6:6a:0b:fb:de:55:f1:c5:c6:76:d7:2d:39:28:2c:
                    f1:cd:bd:f4:17:38:0b:34:e2:4d:0c:22:51:dc:84:
                    a3:a1:ac:2e:8c:a0:b2:73:fc:76:0b:5c:90:f6:cf:
                    f5:a0:da:61:f7:95:3f:78:79:bf:75:12:a4:94:ab:
                    68:6f:81:d0:03:f3:1c:ed:f4:74:c9:cd:2d:60:39:
                    b9:13:8c:9f:8e:79:15:1f:e7:27:1e:ab:91:8a:32:
                    b4:86:eb:27:43:ca:64:37:71:c0:ed:65:96:2f:4b:
                    8b:30:07:91:1d:79:ff:d8:ba:47:3d:09:f1:7f:a3:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:B9:04:F0:12:82:7F:7E:15:8F:7D:FC:58:77:7F:22:25:36:78
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d3:b7:1e:30:db:aa:2d:32:0c:20:04:63:92:1d:ec:a2:73:
         fa:4e:64:9e:51:29:ca:81:2d:f3:a9:8f:b3:f7:d3:8b:a3:50:
         26:23:f6:b9:1a:85:24:bc:5d:1e:77:4f:e0:e6:c3:15:43:1d:
         94:df:0f:86:4e:18:e3:24:a3:d6:4b:5b:bd:8f:c2:1a:e5:71:
         80:f0:ef:6a:f9:c3:c8:05:31:3c:4f:56:6c:b6:22:81:02:2c:
         6f:fa:ab:49:68:48:dc:51:54:8c:df:42:78:b2:50:c4:f2:79:
         c5:e9:8c:a3:cb:63:7f:ea:0c:bd:19:94:ff:9f:88:20:ab:d1:
         19:a2:b1:4e:20:66:ab:74:4c:0c:9a:f5:ad:a5:38:c3:8f:6d:
         c1:15:5f:72:97:99:f8:78:a4:7c:94:88:fd:3f:8b:23:66:69:
         a7:eb:ea:97:ee:a6:5f:ca:d9:88:88:14:a9:a6:5a:4a:a2:59:
         b6:dd:56:3b:0e:ff:01:b0:98:65:0d:ed:3b:07:1d:11:b9:15:
         f7:68:1a:d1:76:8b:76:52:ad:e4:0d:59:f1:45:55:54:85:b1:
         c2:d7:de:b5:e0:bd:e6:19:04:79:cb:97:d2:8c:82:03:13:e4:
         fe:64:3c:8b:00:52:6c:2b:3b:b2:c6:a3:bb:23:6c:74:d8:8a:
         04:7b:41:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYI3EBkgf1E2t+Yb4F27oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0
ZjJkOTIwHhcNMjUwODIzMTAwMTQ4WhcNMjUwODI0MTAwMTQ4WjAzMTEwLwYDVQQD
Eyg4ODAyYjkwNGYwMTI4MjdmN2UxNThmN2RmYzU4Nzc3ZjIyMjUzNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtkXkzDAGoiRX26rkwoGpNLZDVc
giuAD9HVgD3cgA5U62VHB/igMMTCuZ7kBHN5A9fM5BI4J0tu5GEXtug+S2n/thMS
bwJw6lQFNuGOBfeu+6QnLFLNT3yuZ6W8GPxP0oJw5ndZbEX2KB3X7KGgPX8KxwMq
tUlfU9Kcth7uDYOmUlS7zYq2agv73lXxxcZ21y05KCzxzb30FzgLNOJNDCJR3ISj
oawujKCyc/x2C1yQ9s/1oNph95U/eHm/dRKklKtob4HQA/Mc7fR0yc0tYDm5E4yf
jnkVH+cnHquRijK0husnQ8pkN3HA7WWWL0uLMAeRHXn/2LpHPQnxf6NAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgCuQTwEoJ/fhWPffxYd38iJTZ4MB8GA1UdIwQY
MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt
MGUxYjhmZWE4OTEzLzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz
LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtO3HjDb
qi0yDCAEY5Id7KJz+k5knlEpyoEt86mPs/fTi6NQJiP2uRqFJLxdHndP4ObDFUMd
lN8Phk4Y4ySj1ktbvY/CGuVxgPDvavnDyAUxPE9WbLYigQIsb/qrSWhI3FFUjN9C
eLJQxPJ5xemMo8tjf+oMvRmU/5+IIKvRGaKxTiBmq3RMDJr1raU4w49twRVfcpeZ
+HikfJSI/T+LI2Zpp+vql+6mX8rZiIgUqaZaSqJZtt1WOw7/AbCYZQ3tOwcdEbkV
92ga0XaLdlKt5A1Z8UVVVIWxwtfeteC95hkEecuX0oyCAxPk/mQ8iwBSbCs7ssaj
uyNsdNiKBHtB6A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:45:57 2025 by rpki-client