Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          j+CSxddqSnFHkU94lCeHsPFSnFzm0ho8FtygBvQ7X/w=
Subject key identifier:   74:02:59:C7:7C:4B:71:19:75:70:1F:02:3B:6E:E9:86:57:2B:BE:CA
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       0197700803976FE9FAE19BAFDB1B977F35B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          0523
Signing time:             Sat 14 Jun 2025 20:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 20:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 20:01:02 +0000
Files and hashes:         1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: yU+jUk61vdKeQcGaoue2X8AyZ/LkOx6448HfyrOmGU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:08:03:97:6f:e9:fa:e1:9b:af:db:1b:97:7f:35:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Jun 14 20:01:02 2025 GMT
            Not After : Jun 15 20:01:02 2025 GMT
        Subject: CN=740259c77c4b711975701f023b6ee986572bbeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:74:18:61:aa:86:45:c0:fd:ff:65:c5:8c:
                    5f:5a:00:e4:53:b7:5e:b5:0f:2b:93:05:93:55:d4:
                    b0:e0:a2:0e:46:b2:e2:00:24:51:7f:57:34:94:8b:
                    0b:2f:f9:98:6b:ff:0e:1b:99:ec:c9:ca:e8:6e:e9:
                    66:62:7b:a5:a6:64:b7:7f:bf:66:be:58:6d:1d:17:
                    fc:08:cc:3b:c8:1b:66:2a:07:f8:76:11:0b:b3:95:
                    f4:43:ce:15:76:a4:5b:a6:8c:6b:37:7c:28:9a:64:
                    ce:d8:69:95:b0:6d:56:96:78:26:32:46:1a:bb:68:
                    34:53:a6:b7:b0:13:7c:8c:20:ed:9b:3b:97:45:ef:
                    c8:9d:4b:e3:ce:21:3c:d7:19:9c:e7:5b:4c:3d:1b:
                    18:51:e0:67:70:f9:ef:c0:e6:67:9c:a4:47:e8:27:
                    fe:29:a0:60:32:e9:f7:9c:7a:70:6a:26:26:a9:8b:
                    96:58:21:0f:de:0b:d1:50:21:c8:10:fa:f3:2d:3b:
                    19:f9:75:d5:a8:1c:66:3f:0f:90:dc:15:ed:6c:c7:
                    cb:39:2c:25:70:04:63:43:f7:af:f9:22:af:89:c6:
                    0b:a6:e6:5d:cb:74:d9:47:f7:2b:cd:24:35:10:26:
                    2c:12:a6:65:1b:be:0d:e9:f1:da:31:06:f7:5d:02:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:59:C7:7C:4B:71:19:75:70:1F:02:3B:6E:E9:86:57:2B:BE:CA
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:c5:d7:e5:32:6b:a4:e2:d5:55:30:d8:0f:5e:e5:eb:91:
         29:f8:6b:78:2b:f7:b2:7a:5e:12:88:ec:e9:31:ea:6b:be:3e:
         26:5b:84:83:1a:82:bb:25:22:f5:7b:4d:39:ed:44:dd:ec:bd:
         65:19:96:52:c7:4b:db:55:fb:a0:68:f0:a9:f7:49:d0:23:02:
         12:ac:30:ac:83:cd:b1:90:7e:0a:0b:9c:5e:a0:f6:d5:6f:de:
         79:4d:c7:78:9e:bf:42:c5:16:5f:8d:aa:9a:1f:be:57:ae:27:
         8f:ab:38:67:02:0a:1b:61:dd:e1:69:dc:9b:a3:b0:25:a5:fe:
         1e:c9:bb:36:78:18:28:a3:a6:a6:14:79:a6:f9:d1:77:c5:1b:
         c9:5c:df:c0:03:a4:a7:e3:55:6e:67:60:00:47:b7:f8:7e:58:
         e6:fc:8c:ed:9f:e7:72:91:6e:83:8e:06:f1:1f:f0:6b:9c:c3:
         cd:b7:38:a5:18:4b:c4:0d:ff:e2:85:58:78:52:d3:71:82:e4:
         2e:89:67:36:c6:c3:d5:3b:d2:35:1a:23:98:e1:d6:f3:ca:6c:
         24:13:66:ba:15:90:23:4a:af:53:56:cc:fd:e5:3a:02:c0:21:
         a1:a3:b9:bc:10:9c:cb:be:e8:61:95:4d:54:e2:2d:ad:70:1a:
         46:42:fb:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwCAOXb+n64Zuv2xuXfzW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi
NjRmNmEwHhcNMjUwNjE0MjAwMTAyWhcNMjUwNjE1MjAwMTAyWjAzMTEwLwYDVQQD
Eyg3NDAyNTljNzdjNGI3MTE5NzU3MDFmMDIzYjZlZTk4NjU3MmJiZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqp0GGGqhkXA/f9lxYxfWgDkU7de
tQ8rkwWTVdSw4KIORrLiACRRf1c0lIsLL/mYa/8OG5nsycrobulmYnulpmS3f79m
vlhtHRf8CMw7yBtmKgf4dhELs5X0Q84VdqRbpoxrN3wommTO2GmVsG1WlngmMkYa
u2g0U6a3sBN8jCDtmzuXRe/InUvjziE81xmc51tMPRsYUeBncPnvwOZnnKRH6Cf+
KaBgMun3nHpwaiYmqYuWWCEP3gvRUCHIEPrzLTsZ+XXVqBxmPw+Q3BXtbMfLOSwl
cARjQ/ev+SKvicYLpuZdy3TZR/crzSQ1ECYsEqZlG74N6fHaMQb3XQIOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQCWcd8S3EZdXAfAjtu6YZXK77KMB8GA1UdIwQY
MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt
NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2
LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3rF1+Uy
a6Ti1VUw2A9e5euRKfhreCv3snpeEojs6THqa74+JluEgxqCuyUi9XtNOe1E3ey9
ZRmWUsdL21X7oGjwqfdJ0CMCEqwwrIPNsZB+CgucXqD21W/eeU3HeJ6/QsUWX42q
mh++V64nj6s4ZwIKG2Hd4Wncm6OwJaX+Hsm7NngYKKOmphR5pvnRd8UbyVzfwAOk
p+NVbmdgAEe3+H5Y5vyM7Z/ncpFug44G8R/wa5zDzbc4pRhLxA3/4oVYeFLTcYLk
LolnNsbD1TvSNRojmOHW88psJBNmuhWQI0qvU1bM/eU6AsAhoaO5vBCcy77oYZVN
VOItrXAaRkL7ug==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:02:40 2025 by rpki-client