Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
File:                     AW5eMfqHFqqlThj83P7T_JTbkLU.mft (raw, json)
Hash identifier:          hoORbMEnTn3J9dn7nyrcFpWKYJSC379TEkkgpR+PZP0=
Subject key identifier:   58:20:86:93:09:A1:16:1B:99:B2:C3:94:14:4E:8F:FB:58:8D:ED:56
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Certificate issuer:       /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial:       0197B6A1C384591631E7A25CA463C3372962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 13:02:23 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:23 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:23 +0000
Files and hashes:         1: AW5eMfqHFqqlThj83P7T_JTbkLU.crl (hash: sOo5ECIEDgfSMQJ0/bFaL4ifa5p3i8KMO1Ss8kR00S4=)
                          2: Rgcekkes1KhkPm-geec6ef8_SvQ.roa (hash: 0N6GYLdc56+kVBGDj5O5jPTIUR3nKttL77HbNqyqtCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:c3:84:59:16:31:e7:a2:5c:a4:63:c3:37:29:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
        Validity
            Not Before: Jun 28 13:02:23 2025 GMT
            Not After : Jun 29 13:02:23 2025 GMT
        Subject: CN=5820869309a1161b99b2c394144e8ffb588ded56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:08:94:42:1d:a8:3b:49:ac:7c:e8:6d:38:7e:
                    96:7f:48:54:50:cd:3f:19:95:83:53:d7:4c:21:cc:
                    83:b6:96:cc:84:8d:e2:8a:13:5d:f9:d6:27:7a:2e:
                    2f:21:3d:5f:8e:1c:43:a2:b9:5f:d2:1b:77:5c:d9:
                    34:3c:24:6f:31:8b:f6:74:90:78:6e:2e:1c:0b:62:
                    3b:8e:fb:a8:5d:20:94:56:2d:06:28:dd:7b:2a:39:
                    a3:48:62:b8:0e:cf:91:ed:24:dc:f8:09:f4:7e:1b:
                    55:b5:51:4d:9f:3c:71:37:a5:a9:16:ff:ee:32:a3:
                    b4:6f:0e:49:64:78:41:65:9f:e8:15:03:21:ff:db:
                    1f:19:39:07:52:c3:87:56:17:21:59:e4:25:6a:88:
                    dd:36:e1:fa:03:16:2d:74:d3:c6:07:bc:aa:ae:0c:
                    76:3b:b7:9f:2b:80:b2:3b:5c:a6:b8:1e:c9:68:bf:
                    b0:71:9b:98:22:8d:dd:49:6f:47:e7:8b:6d:6b:66:
                    3e:9b:38:5f:14:f6:39:3a:28:b8:1b:66:56:c2:aa:
                    18:eb:ba:95:2b:a7:6c:c3:bc:1a:5b:b7:ed:5e:f2:
                    46:c8:99:ec:51:7d:48:4e:a7:a8:48:1a:74:4f:b3:
                    ea:48:ea:c5:28:e8:a7:70:1b:b3:9a:29:5e:20:2f:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:86:93:09:A1:16:1B:99:B2:C3:94:14:4E:8F:FB:58:8D:ED:56
            X509v3 Authority Key Identifier:
                keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:15:da:ef:35:44:20:9e:42:8f:83:2b:07:bb:e6:b7:65:
         f1:a4:19:06:9c:d9:87:d5:a4:ec:d9:ea:03:4e:2e:6a:13:2b:
         3e:34:2c:b8:79:fa:70:3d:4f:8f:23:36:94:e0:94:da:cf:84:
         55:e5:30:d5:03:74:23:88:d4:a0:bf:27:d1:2a:19:fd:c1:ae:
         d6:c7:49:93:d4:27:3b:94:e6:44:78:3e:d5:0d:b5:d8:ff:3c:
         75:0f:4a:78:8a:7d:39:54:86:19:40:94:25:37:69:dd:a9:fe:
         76:2a:b5:a6:37:bb:6a:ba:57:4d:5b:a7:00:cd:0d:bd:2a:e6:
         f2:e7:cb:6d:9c:34:80:43:bc:99:82:2f:ff:4a:af:fd:56:ef:
         1e:cc:53:99:a9:fb:83:0f:98:ec:3d:0a:8f:79:23:83:50:e8:
         10:cd:f0:be:93:20:e2:26:37:fd:47:e4:64:14:16:61:17:5a:
         0e:8b:15:88:b4:5c:87:18:b9:99:e6:50:a4:d8:3b:c5:4e:62:
         b9:89:cc:ed:52:68:5b:57:b1:c8:8d:49:fe:7b:7e:b8:13:b3:
         5d:00:80:12:84:ed:05:bc:b0:76:92:7f:97:0a:92:09:97:1c:
         a0:d2:a2:81:da:b3:31:74:0c:84:37:10:cc:d9:ae:84:f9:27:
         17:06:2e:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocOEWRYx56JcpGPDNyliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNmU1ZTMxZmE4NzE2YWFhNTRlMThmY2RjZmVkM2ZjOTRk
YjkwYjUwHhcNMjUwNjI4MTMwMjIzWhcNMjUwNjI5MTMwMjIzWjAzMTEwLwYDVQQD
Eyg1ODIwODY5MzA5YTExNjFiOTliMmMzOTQxNDRlOGZmYjU4OGRlZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgiUQh2oO0msfOhtOH6Wf0hUUM0/
GZWDU9dMIcyDtpbMhI3iihNd+dYnei4vIT1fjhxDorlf0ht3XNk0PCRvMYv2dJB4
bi4cC2I7jvuoXSCUVi0GKN17KjmjSGK4Ds+R7STc+An0fhtVtVFNnzxxN6WpFv/u
MqO0bw5JZHhBZZ/oFQMh/9sfGTkHUsOHVhchWeQlaojdNuH6AxYtdNPGB7yqrgx2
O7efK4CyO1ymuB7JaL+wcZuYIo3dSW9H54tta2Y+mzhfFPY5Oii4G2ZWwqoY67qV
K6dsw7waW7ftXvJGyJnsUX1ITqeoSBp0T7PqSOrFKOincBuzmileIC9eKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgghpMJoRYbmbLDlBROj/tYje1WMB8GA1UdIwQY
MBaAFAFuXjH6hxaqpU4Y/Nz+0/yU25C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYt
Yzk2YzJjZTg1OWU1LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hZjRlZjgtZWQwNy00YWNkLWE0MmYtYzk2YzJjZTg1OWU1
LzEvQVc1ZU1mcUhGcXFsVGhqODNQN1RfSlRia0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ0V2u81
RCCeQo+DKwe75rdl8aQZBpzZh9Wk7NnqA04uahMrPjQsuHn6cD1PjyM2lOCU2s+E
VeUw1QN0I4jUoL8n0SoZ/cGu1sdJk9QnO5TmRHg+1Q212P88dQ9KeIp9OVSGGUCU
JTdp3an+diq1pje7arpXTVunAM0NvSrm8ufLbZw0gEO8mYIv/0qv/VbvHsxTman7
gw+Y7D0Kj3kjg1DoEM3wvpMg4iY3/UfkZBQWYRdaDosViLRchxi5meZQpNg7xU5i
uYnM7VJoW1exyI1J/nt+uBOzXQCAEoTtBbywdpJ/lwqSCZccoNKigdqzMXQMhDcQ
zNmuhPknFwYukA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:33 2025 by rpki-client