Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File:                     YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier:          zOCPXpPsGCtcng+WpqekAA1R40qt4SSAVujQF/AsAas=
Subject key identifier:   A2:65:89:FC:D3:3C:04:59:7A:B8:52:9E:65:C2:86:0A:F8:3C:66:A4
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer:       /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial:       01987450C56094F8369F8B9AB24D8F935505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number:          1544
Signing time:             Mon 04 Aug 2025 09:01:46 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:46 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:46 +0000
Files and hashes:         1: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: UrW/UeMCF9QT7SzlIQ5YxjKT1SmWfx5tmXUEi7kms+Y=)
                          2: _wocLw8I_D0bWM_gydbHP3YBnWM.roa (hash: ipZCy+v8LxPOj8oL+HxTUZYzmJcHqr9rYLmV463tU+U=)
                          3: jP1IuFeYqRVYzU2ZxiYcMgwYBwo.roa (hash: 8tUnk9Rc0BoFNUvYX8+NZuDnDdmkv70Pafdtm7lPIM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:c5:60:94:f8:36:9f:8b:9a:b2:4d:8f:93:55:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
        Validity
            Not Before: Aug  4 09:01:46 2025 GMT
            Not After : Aug  5 09:01:46 2025 GMT
        Subject: CN=a26589fcd33c04597ab8529e65c2860af83c66a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:2e:6c:be:23:16:1f:0a:48:51:6c:79:20:
                    b3:23:f0:ae:9e:7a:a8:43:a7:09:66:ba:e8:3f:85:
                    a4:fd:8c:3f:75:07:ce:3d:59:7c:01:c3:20:1d:76:
                    38:95:e4:61:92:8d:98:ea:6b:40:b2:56:29:1e:89:
                    b0:39:ac:b7:9f:12:f8:7c:b5:65:f9:43:7a:a8:91:
                    77:14:a3:b8:e6:9a:6d:46:eb:a3:46:20:20:51:4a:
                    94:57:6a:c2:76:4e:9c:7b:4d:49:f0:59:ff:3b:af:
                    3c:3c:e6:92:b4:1a:90:d0:50:46:6f:98:d7:fc:97:
                    42:7b:fd:9d:5f:2c:52:02:9c:d4:ee:c0:c3:6c:cc:
                    e3:d9:1a:9b:46:db:73:93:b3:f2:d6:5f:ec:e7:ca:
                    44:c7:ac:35:6f:48:27:9f:7c:3b:06:dd:a0:09:16:
                    21:e7:a7:32:44:dd:d6:32:b3:5c:b7:75:30:5f:e2:
                    52:4e:79:02:0d:f1:99:41:58:04:e6:df:9a:31:b8:
                    bd:0f:55:78:68:e5:41:97:ef:e4:82:10:40:f9:01:
                    f4:d0:42:c5:69:20:9a:de:bd:39:2a:d1:fc:28:7c:
                    e0:e5:37:c0:e7:8d:26:38:2b:7b:f4:ee:78:02:43:
                    46:be:c2:24:eb:4d:fe:78:b3:54:47:bc:0b:dc:fd:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:89:FC:D3:3C:04:59:7A:B8:52:9E:65:C2:86:0A:F8:3C:66:A4
            X509v3 Authority Key Identifier:
                keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1b:a4:5b:f3:4e:c1:71:4e:83:c0:d6:2b:16:7c:1e:e1:fc:
         a8:84:d4:03:f2:e2:d1:90:d7:ad:8a:2f:5d:a1:81:2d:5c:c2:
         a8:7f:da:de:9c:5c:04:5a:7d:dd:dd:c4:96:21:db:b2:77:04:
         d8:62:c0:ff:33:69:7e:82:0e:70:4c:4d:86:3c:67:51:dd:b3:
         72:16:46:18:8a:9c:c0:11:2c:0a:1b:b3:68:79:fa:69:30:06:
         68:0a:6b:32:b7:f3:62:21:14:37:6c:9d:45:0f:33:08:ba:c3:
         f2:2c:f6:99:59:72:df:cd:61:61:ea:65:ab:80:d2:96:7f:34:
         c3:6b:1f:58:3a:73:be:c2:de:17:c3:23:94:d2:23:8a:f4:10:
         2d:72:a8:07:bf:e9:ec:04:e2:33:e3:ae:77:76:00:c3:7b:8d:
         cd:df:0b:c3:73:a3:b9:27:69:77:65:03:51:6f:67:91:3a:99:
         c6:ad:39:f4:8b:f5:d8:69:bd:46:2d:3f:5c:2c:01:8f:8a:be:
         cd:08:07:27:9a:e4:09:d3:ea:0c:65:1a:ee:53:04:db:73:dd:
         5b:1f:ca:d5:64:83:ae:ab:08:13:f6:7b:fb:fa:dc:13:4d:aa:
         e7:13:a6:7f:cf:06:d4:dc:65:c9:1c:fe:a1:57:b7:3d:b8:11:
         6f:9c:8d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UMVglPg2n4uask2Pk1UFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYTE0NTUzY2FjZjEwMzI3NGQ0MzNlNmIyNjgwNjZlMDE1
NDFiMjUwHhcNMjUwODA0MDkwMTQ2WhcNMjUwODA1MDkwMTQ2WjAzMTEwLwYDVQQD
EyhhMjY1ODlmY2QzM2MwNDU5N2FiODUyOWU2NWMyODYwYWY4M2M2NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI8ubL4jFh8KSFFseSCzI/Cunnqo
Q6cJZrroP4Wk/Yw/dQfOPVl8AcMgHXY4leRhko2Y6mtAslYpHomwOay3nxL4fLVl
+UN6qJF3FKO45pptRuujRiAgUUqUV2rCdk6ce01J8Fn/O688POaStBqQ0FBGb5jX
/JdCe/2dXyxSApzU7sDDbMzj2RqbRttzk7Py1l/s58pEx6w1b0gnn3w7Bt2gCRYh
56cyRN3WMrNct3UwX+JSTnkCDfGZQVgE5t+aMbi9D1V4aOVBl+/kghBA+QH00ELF
aSCa3r05KtH8KHzg5TfA540mOCt79O54AkNGvsIk603+eLNUR7wL3P2OJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJlifzTPARZerhSnmXChgr4PGakMB8GA1UdIwQY
MBaAFGGhRVPKzxAydNQz5rJoBm4BVBslMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAt
ZmEyNjZiYjcyZjczLzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZGQwNTEtZTJlNy00OTZjLWE5ZDAtZmEyNjZiYjcyZjcz
LzEvWWFGRlU4clBFREowMURQbXNtZ0diZ0ZVR3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxukW/NO
wXFOg8DWKxZ8HuH8qITUA/Li0ZDXrYovXaGBLVzCqH/a3pxcBFp93d3EliHbsncE
2GLA/zNpfoIOcExNhjxnUd2zchZGGIqcwBEsChuzaHn6aTAGaAprMrfzYiEUN2yd
RQ8zCLrD8iz2mVly381hYeplq4DSln80w2sfWDpzvsLeF8MjlNIjivQQLXKoB7/p
7ATiM+Oud3YAw3uNzd8Lw3OjuSdpd2UDUW9nkTqZxq059Iv12Gm9Ri0/XCwBj4q+
zQgHJ5rkCdPqDGUa7lME23PdWx/K1WSDrqsIE/Z7+/rcE02q5xOmf88G1NxlyRz+
oVe3PbgRb5yNRA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:23 2025 by rpki-client