Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File:                     YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier:          CrNtgnTSy2YYrOS8pUAZMIVnV0l8nCHzMqzXsCu+DHM=
Subject key identifier:   C6:52:30:7E:61:BA:57:AF:29:73:DC:38:09:93:E1:33:C7:26:26:B1
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       01976B85E6E631A44F688C172E5D1CA10781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number:          1521
Signing time:             Fri 13 Jun 2025 23:00:26 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:26 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:26 +0000
Files and hashes:         1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
                          2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: /2Ag9iny4VzjreCSHs3unX/QgUrUlVpcCI2+ovuhg5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:85:e6:e6:31:a4:4f:68:8c:17:2e:5d:1c:a1:07:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Jun 13 23:00:26 2025 GMT
            Not After : Jun 14 23:00:26 2025 GMT
        Subject: CN=c652307e61ba57af2973dc380993e133c72626b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f4:f3:22:4d:9f:4c:69:41:aa:35:72:90:21:
                    c5:82:39:44:49:c5:ad:73:4a:f9:c4:f8:e5:e4:6a:
                    98:a6:79:f4:df:6b:ba:b6:4a:11:d2:d3:d4:6c:71:
                    f6:27:6a:02:55:8a:4c:06:82:df:bf:b2:ea:92:d5:
                    38:e8:98:94:77:5e:6a:b0:ac:ed:35:d5:3c:ab:67:
                    1d:2c:3e:06:f1:fe:f6:7c:12:9e:4a:cc:99:4d:1c:
                    42:a4:d9:cd:d1:c5:d5:b0:a8:0e:0f:1c:96:84:52:
                    0b:d6:e6:ea:5b:42:75:d4:1e:b8:98:c5:09:d5:27:
                    ba:ab:a1:b6:7e:dc:34:d8:9e:e6:8a:e1:57:42:b5:
                    ee:bc:5a:db:c0:79:fc:fe:19:fb:4f:94:8e:c5:cb:
                    14:7e:3e:4a:8a:6d:09:c1:54:e2:0a:b5:73:20:fa:
                    be:02:94:df:e4:4e:81:b0:b5:cb:b9:bf:65:38:27:
                    d1:ec:3d:c2:c7:38:8c:6c:66:96:b8:be:db:b2:68:
                    58:e1:17:f8:56:b7:2a:6d:26:b1:44:18:20:cd:03:
                    e7:21:db:b3:2a:3b:99:88:7e:f7:95:6b:b1:ef:0c:
                    37:ef:b0:c6:23:90:64:56:94:24:50:1d:f9:20:74:
                    94:a5:72:b3:7b:fa:12:d0:58:50:cb:08:f7:70:46:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:52:30:7E:61:BA:57:AF:29:73:DC:38:09:93:E1:33:C7:26:26:B1
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:5c:d6:44:ff:86:2b:37:90:1f:f7:1c:0d:c4:d1:3b:d5:
         7f:52:f3:5e:84:66:3c:e2:50:e5:81:cc:1a:6c:06:dd:0f:60:
         b9:6b:5e:57:3e:18:25:97:53:f5:54:9f:26:6b:79:78:b4:eb:
         de:71:75:e7:1e:75:52:67:f3:c7:28:8b:22:33:27:b1:83:f6:
         8e:7a:b7:5d:bc:79:a6:28:0f:12:e1:f7:b6:73:48:7a:e3:c5:
         be:f5:a9:58:96:cc:09:38:1b:a3:d3:c9:86:6b:c0:b5:51:ff:
         f6:19:67:f7:8f:44:71:54:f3:08:30:c7:10:8c:06:37:ce:59:
         b3:20:10:63:ec:cd:b8:28:4a:e6:12:47:ab:66:8c:06:5f:06:
         db:71:8d:1a:d0:63:8d:ee:93:45:b8:33:ab:15:91:93:0a:d3:
         08:78:bc:cc:79:4d:0a:0d:a1:e9:fb:69:87:fe:50:5b:89:5d:
         45:2a:6f:41:b0:1a:6f:33:3c:65:89:c1:db:1e:a0:00:ac:6c:
         e4:46:1a:d0:f9:61:cc:a6:3e:25:d0:5c:31:e1:12:b9:a5:33:
         13:7b:70:6d:c6:e3:03:eb:cb:47:75:3e:f0:9a:4b:48:9a:33:
         d1:08:1e:4a:0b:01:01:e2:f6:1e:be:a7:61:15:31:46:0e:f1:
         ef:be:64:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhebmMaRPaIwXLl0coQeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjAxNDEwMWZmYmNlNjc1MTM5Y2Q0YzAyYmEwMDYzNGFk
ODZlMDIwHhcNMjUwNjEzMjMwMDI2WhcNMjUwNjE0MjMwMDI2WjAzMTEwLwYDVQQD
EyhjNjUyMzA3ZTYxYmE1N2FmMjk3M2RjMzgwOTkzZTEzM2M3MjYyNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vTzIk2fTGlBqjVykCHFgjlEScWt
c0r5xPjl5GqYpnn032u6tkoR0tPUbHH2J2oCVYpMBoLfv7LqktU46JiUd15qsKzt
NdU8q2cdLD4G8f72fBKeSsyZTRxCpNnN0cXVsKgODxyWhFIL1ubqW0J11B64mMUJ
1Se6q6G2ftw02J7miuFXQrXuvFrbwHn8/hn7T5SOxcsUfj5Kim0JwVTiCrVzIPq+
ApTf5E6BsLXLub9lOCfR7D3CxziMbGaWuL7bsmhY4Rf4VrcqbSaxRBggzQPnIduz
KjuZiH73lWux7ww377DGI5BkVpQkUB35IHSUpXKze/oS0FhQywj3cEbxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZSMH5hulevKXPcOAmT4TPHJiaxMB8GA1UdIwQY
MBaAFGFgFBAf+85nUTnNTAK6AGNK2G4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAt
NTljZGRiYTE3NmVmLzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9jYzg0NDEtZGRiNi00Nzk1LTkwMzAtNTljZGRiYTE3NmVm
LzEvWVdBVUVCXzd6bWRST2MxTUFyb0FZMHJZYmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ1c1kT/
his3kB/3HA3E0TvVf1LzXoRmPOJQ5YHMGmwG3Q9guWteVz4YJZdT9VSfJmt5eLTr
3nF15x51UmfzxyiLIjMnsYP2jnq3Xbx5pigPEuH3tnNIeuPFvvWpWJbMCTgbo9PJ
hmvAtVH/9hln949EcVTzCDDHEIwGN85ZsyAQY+zNuChK5hJHq2aMBl8G23GNGtBj
je6TRbgzqxWRkwrTCHi8zHlNCg2h6ftph/5QW4ldRSpvQbAabzM8ZYnB2x6gAKxs
5EYa0PlhzKY+JdBcMeESuaUzE3twbcbjA+vLR3U+8JpLSJoz0QgeSgsBAeL2Hr6n
YRUxRg7x775k3A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:50 2025 by rpki-client