Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File:                     au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier:          /8+kWEXAcBE0/jS8ftNqcRZfsTlMIciPBelYwmL2QQc=
Subject key identifier:   A4:BD:F9:D1:4C:5C:0C:06:85:C7:5B:6F:61:74:48:BD:90:64:DA:67
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer:       /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial:       0198D84FEBD249B97DBCDDF995428B26C01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 19:02:53 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:53 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:53 +0000
Files and hashes:         1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: U/wg8bGog/XuU698PGnLnvgx+4CdQuPV8W53bdBbs4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:eb:d2:49:b9:7d:bc:dd:f9:95:42:8b:26:c0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
        Validity
            Not Before: Aug 23 19:02:53 2025 GMT
            Not After : Aug 24 19:02:53 2025 GMT
        Subject: CN=a4bdf9d14c5c0c0685c75b6f617448bd9064da67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:c0:44:d8:83:7b:ad:d0:1b:76:4b:8d:6d:
                    59:2d:de:a8:b6:50:dd:db:72:c4:f5:83:55:ad:b6:
                    52:6b:4f:9a:df:b5:77:0a:23:f7:eb:da:59:e8:14:
                    7b:f8:6a:2c:b4:55:7c:86:3c:43:c7:d3:c1:90:0a:
                    95:27:f1:da:50:e4:36:73:e8:ea:90:5b:eb:f2:b2:
                    0b:3f:73:d4:26:17:96:2a:4a:fb:bc:8a:0d:df:90:
                    cc:fc:4d:ea:c0:9f:8a:b4:32:19:5b:e1:5a:ec:24:
                    de:d9:ae:2f:e7:94:ca:b5:77:c0:c9:fd:9f:9f:5a:
                    aa:53:9b:97:51:6c:cc:01:0b:8f:b2:51:68:eb:e7:
                    da:e9:44:c1:79:5e:a2:13:7f:7d:0e:5f:8a:70:d7:
                    f7:25:ce:98:fb:4b:4b:26:0f:b1:a2:29:41:85:4e:
                    b7:84:b0:16:34:5d:aa:64:fb:ee:e6:3d:83:6e:9f:
                    b7:03:4a:fb:2a:1c:75:2d:19:d5:af:eb:a0:2c:d6:
                    37:c1:8a:7b:8e:84:fe:73:72:7f:09:bb:fe:60:b9:
                    0c:21:2c:e7:13:25:e8:43:3f:2a:10:44:4b:3c:a4:
                    f1:0b:5e:24:4c:5a:a8:72:24:d3:5f:d9:33:97:00:
                    b4:cd:a7:d2:36:27:92:d3:e4:42:ff:35:bf:d0:01:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:F9:D1:4C:5C:0C:06:85:C7:5B:6F:61:74:48:BD:90:64:DA:67
            X509v3 Authority Key Identifier:
                keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:a9:7b:b5:45:80:ac:12:7e:50:eb:6d:2b:d5:e4:5d:27:
         ba:96:94:50:5a:54:07:c7:8f:f6:eb:fc:79:4b:c1:c8:c5:8a:
         3a:ad:23:5f:a1:69:21:7b:1b:ff:66:08:c0:73:fe:cd:6f:5b:
         90:dc:9f:1a:c9:55:47:a5:9a:e8:2a:e2:b8:6c:6e:fc:a9:29:
         4d:c3:d8:af:8b:38:04:24:f0:3b:2c:8f:7a:38:71:23:27:51:
         77:34:f9:a6:ca:3b:fb:68:40:97:b3:f8:06:81:1a:81:f7:f0:
         7c:fa:1e:8a:3c:e6:31:b8:7e:fa:e2:5e:aa:ea:dc:dc:a7:fc:
         4a:39:de:a5:3a:f8:8f:70:ab:10:18:11:dd:18:33:f9:ba:ca:
         30:00:18:5b:7f:1d:7c:24:d7:c8:22:53:7c:4c:f8:ce:a9:92:
         8d:5b:d1:6d:72:a4:08:17:93:47:ac:6b:96:37:16:cf:db:c1:
         24:d5:7d:a6:f8:47:fd:fe:bc:cc:f6:c2:fe:84:dd:93:90:5c:
         ce:0a:f5:f4:a9:ed:3f:fd:e5:77:77:e5:4d:d8:70:9c:c4:e3:
         a3:12:6b:f5:58:02:25:6f:49:4f:cf:2e:66:90:78:5a:bf:83:
         6b:a7:fa:de:c1:f1:21:9f:82:07:2b:d5:f4:9c:7c:a2:50:fb:
         62:8b:41:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT+vSSbl9vN35lUKLJsAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWVhYjVkM2MwMDFkNTdhZGIzMDg3ODEyMTc5YzgyOTIy
OGI4MjEwHhcNMjUwODIzMTkwMjUzWhcNMjUwODI0MTkwMjUzWjAzMTEwLwYDVQQD
EyhhNGJkZjlkMTRjNWMwYzA2ODVjNzViNmY2MTc0NDhiZDkwNjRkYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGfARNiDe63QG3ZLjW1ZLd6otlDd
23LE9YNVrbZSa0+a37V3CiP369pZ6BR7+GostFV8hjxDx9PBkAqVJ/HaUOQ2c+jq
kFvr8rILP3PUJheWKkr7vIoN35DM/E3qwJ+KtDIZW+Fa7CTe2a4v55TKtXfAyf2f
n1qqU5uXUWzMAQuPslFo6+fa6UTBeV6iE399Dl+KcNf3Jc6Y+0tLJg+xoilBhU63
hLAWNF2qZPvu5j2Dbp+3A0r7Khx1LRnVr+ugLNY3wYp7joT+c3J/Cbv+YLkMISzn
EyXoQz8qEERLPKTxC14kTFqociTTX9kzlwC0zafSNieS0+RC/zW/0AGgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKS9+dFMXAwGhcdbb2F0SL2QZNpnMB8GA1UdIwQY
MBaAFGruq108AB1XrbMIeBIXnIKSKLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQt
MTMzMGY0NGEzOWQ2LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQtMTMzMGY0NGEzOWQ2
LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl2pe7VF
gKwSflDrbSvV5F0nupaUUFpUB8eP9uv8eUvByMWKOq0jX6FpIXsb/2YIwHP+zW9b
kNyfGslVR6Wa6CriuGxu/KkpTcPYr4s4BCTwOyyPejhxIydRdzT5pso7+2hAl7P4
BoEagffwfPoeijzmMbh++uJequrc3Kf8SjnepTr4j3CrEBgR3Rgz+brKMAAYW38d
fCTXyCJTfEz4zqmSjVvRbXKkCBeTR6xrljcWz9vBJNV9pvhH/f68zPbC/oTdk5Bc
zgr19KntP/3ld3flTdhwnMTjoxJr9VgCJW9JT88uZpB4Wr+Da6f63sHxIZ+CByvV
9Jx8olD7YotBjw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:24:39 2025 by rpki-client