Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File:                     AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier:          igNwBQ+MlYSS1K7B07oxHqZjVWLL2UgRjKuxq7MhZMc=
Subject key identifier:   BA:B3:63:0F:DD:38:7E:2C:76:A5:8F:A7:AB:F0:CA:B4:7B:7C:05:55
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer:       /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial:       0197CE3B8BC8143614461E7CABC63E0F76E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number:          0106
Signing time:             Thu 03 Jul 2025 03:01:38 +0000
Manifest this update:     Thu 03 Jul 2025 03:01:38 +0000
Manifest next update:     Fri 04 Jul 2025 03:01:38 +0000
Files and hashes:         1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
                          2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: xTupXOeG9Pk8V5dy2HBOXywbCzDUyN8sSn+PDX8TGGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:3b:8b:c8:14:36:14:46:1e:7c:ab:c6:3e:0f:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
        Validity
            Not Before: Jul  3 03:01:38 2025 GMT
            Not After : Jul  4 03:01:38 2025 GMT
        Subject: CN=bab3630fdd387e2c76a58fa7abf0cab47b7c0555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:81:90:e4:44:96:4b:bf:18:32:71:9a:75:e3:
                    f5:2e:a0:59:b6:7e:a1:cc:3b:7a:76:1c:3c:22:da:
                    f2:cf:e6:5c:ce:6a:16:32:03:28:0a:86:cc:ed:34:
                    32:54:87:ea:67:6c:a6:57:a2:5e:fa:0f:71:07:b1:
                    66:ac:5e:f0:93:04:3d:25:7c:2c:7b:dd:06:1f:73:
                    ea:f2:cf:cb:3a:d2:78:f1:7b:ea:c1:e9:a8:cf:6d:
                    99:68:c7:a5:11:b1:b8:eb:67:5c:15:7b:3c:53:44:
                    99:67:6d:38:73:cc:fd:4a:13:1c:93:8a:a1:fc:86:
                    6b:96:0c:8f:5d:33:a8:55:61:8f:d5:df:94:14:18:
                    65:f1:88:fc:83:bc:50:e3:8e:ff:03:db:f2:aa:bb:
                    33:53:69:51:d9:83:84:72:6b:a1:32:66:43:6b:ee:
                    5f:72:0f:85:bb:c1:32:34:33:68:52:78:fa:07:4a:
                    26:01:e7:ab:05:82:5f:5d:b2:ea:61:b0:6f:58:db:
                    e8:ba:1d:ba:48:a8:03:88:2e:90:f7:83:60:e1:c5:
                    72:df:7a:f8:dc:f6:cf:00:a0:10:96:55:2c:6d:cf:
                    26:42:b2:64:71:b2:d7:4c:6e:ae:ce:dc:1e:9c:3f:
                    ad:e9:7d:81:ca:dc:d6:30:f5:75:51:b9:36:09:b2:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:63:0F:DD:38:7E:2C:76:A5:8F:A7:AB:F0:CA:B4:7B:7C:05:55
            X509v3 Authority Key Identifier:
                keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:7b:f2:d6:79:54:e0:06:e8:66:2c:23:f1:06:da:7e:03:
         58:90:64:51:8f:2f:70:07:f8:60:d9:63:d9:e8:00:3e:a0:d1:
         9f:cd:5a:c7:ad:31:d8:42:9a:e1:21:b3:a8:4b:1e:6d:f7:d6:
         5f:b3:a7:46:c0:46:79:8b:6a:7b:c8:1a:dd:d7:97:f3:6a:08:
         a6:10:4f:c8:d5:1b:f7:b2:66:3f:1f:98:16:4a:fa:6f:d6:17:
         ed:d1:62:76:d4:a2:70:00:ce:e7:67:c7:27:fe:7c:25:4e:da:
         6d:ce:ca:92:66:24:d8:55:a5:53:ea:2a:fe:ae:9e:f6:f2:14:
         f1:01:c6:31:26:3c:99:45:87:03:45:20:c4:dc:1f:d8:b8:ee:
         5d:62:18:8c:bd:0f:5e:94:50:0e:b3:6f:af:ec:4a:3b:bf:bb:
         37:1b:fa:a6:b6:e4:a2:e2:10:15:d1:37:4d:37:ab:10:ab:46:
         c0:a2:4e:32:3f:6e:34:7a:a9:cf:4b:96:88:a2:d3:ac:89:17:
         c0:ff:48:27:9a:52:42:32:26:e0:0a:cb:af:b7:db:93:59:d8:
         ab:ef:f5:d3:56:e1:7e:c5:a0:68:83:63:76:5c:76:46:33:bf:
         0b:38:5d:9c:c5:8c:c1:9e:67:78:ed:f3:9a:bb:9f:6b:0f:aa:
         04:4e:b2:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOO4vIFDYURh58q8Y+D3bhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk
NjE3M2IwHhcNMjUwNzAzMDMwMTM4WhcNMjUwNzA0MDMwMTM4WjAzMTEwLwYDVQQD
EyhiYWIzNjMwZmRkMzg3ZTJjNzZhNThmYTdhYmYwY2FiNDdiN2MwNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/oGQ5ESWS78YMnGadeP1LqBZtn6h
zDt6dhw8Itryz+ZczmoWMgMoCobM7TQyVIfqZ2ymV6Je+g9xB7FmrF7wkwQ9JXws
e90GH3Pq8s/LOtJ48Xvqwemoz22ZaMelEbG462dcFXs8U0SZZ204c8z9ShMck4qh
/IZrlgyPXTOoVWGP1d+UFBhl8Yj8g7xQ447/A9vyqrszU2lR2YOEcmuhMmZDa+5f
cg+Fu8EyNDNoUnj6B0omAeerBYJfXbLqYbBvWNvouh26SKgDiC6Q94Ng4cVy33r4
3PbPAKAQllUsbc8mQrJkcbLXTG6uztwenD+t6X2BytzWMPV1Ubk2CbL8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqzYw/dOH4sdqWPp6vwyrR7fAVVMB8GA1UdIwQY
MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt
Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5
LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzd78tZ5
VOAG6GYsI/EG2n4DWJBkUY8vcAf4YNlj2egAPqDRn81ax60x2EKa4SGzqEsebffW
X7OnRsBGeYtqe8ga3deX82oIphBPyNUb97JmPx+YFkr6b9YX7dFidtSicADO52fH
J/58JU7abc7KkmYk2FWlU+oq/q6e9vIU8QHGMSY8mUWHA0UgxNwf2LjuXWIYjL0P
XpRQDrNvr+xKO7+7Nxv6prbkouIQFdE3TTerEKtGwKJOMj9uNHqpz0uWiKLTrIkX
wP9IJ5pSQjIm4ArLr7fbk1nYq+/101bhfsWgaINjdlx2RjO/CzhdnMWMwZ5neO3z
mrufaw+qBE6yZA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:10:05 2025 by rpki-client