Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File:                     yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier:          2Pgd3jv0x+p26MEjKmK4CoMUA46kKUlhXheJiIQjLOM=
Subject key identifier:   09:5F:A5:B5:89:6B:E0:58:B4:0A:2C:32:DA:AA:35:FF:17:C4:2A:99
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer:       /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial:       019880C1D7789B7C6CB3C8D5C07BB08CC9C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number:          15B2
Signing time:             Wed 06 Aug 2025 19:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 19:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 19:00:43 +0000
Files and hashes:         1: l3CxsRe6lXWBML9apstKtmGDLng.roa (hash: R2ig12fHn/XZc83X/g+gRKab+UR2maUGxkjxgHc5+u0=)
                          2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: bUF7UykT9t6H4v3ccgJ7Yz5y5wBQMiYig+uMuq/+o2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c1:d7:78:9b:7c:6c:b3:c8:d5:c0:7b:b0:8c:c9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
        Validity
            Not Before: Aug  6 19:00:43 2025 GMT
            Not After : Aug  7 19:00:43 2025 GMT
        Subject: CN=095fa5b5896be058b40a2c32daaa35ff17c42a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:a3:68:12:b9:d1:88:f0:b0:4d:eb:39:b5:
                    35:c0:2b:66:4e:5b:81:00:47:a3:21:3e:5c:85:a3:
                    31:0d:5b:ab:8d:02:53:2d:82:ec:1e:38:d9:d6:4e:
                    fe:9a:b1:67:64:fb:8e:f6:27:59:4c:b1:95:cd:b6:
                    04:36:ee:a0:3e:ac:14:99:ac:e4:5c:76:1b:91:6d:
                    36:57:f6:8d:8d:01:cc:00:54:dc:81:61:61:12:fe:
                    1c:04:13:39:7a:ee:15:fc:fc:8a:ef:26:d0:8d:56:
                    31:bc:95:32:02:a7:dc:25:ea:a5:51:0a:6d:f2:f8:
                    6d:d1:e6:18:55:17:ac:d5:e8:76:d1:a6:8b:48:cb:
                    be:39:05:50:bc:84:ea:6b:f5:41:0a:26:6d:1e:3c:
                    71:1b:f6:0a:ed:7e:e1:ea:7c:a9:56:cc:9d:78:18:
                    42:69:a4:85:e0:ac:0a:b6:62:4c:3c:45:55:c7:55:
                    e5:06:1b:07:d0:50:23:90:64:10:9f:0c:8b:3c:9d:
                    2f:8e:72:ef:2b:24:19:aa:9d:13:ae:da:49:5f:27:
                    77:c4:ff:04:ad:76:96:e2:16:e5:22:21:76:20:ed:
                    d6:26:77:6a:b2:72:da:1f:ce:5a:9a:88:fd:6a:9c:
                    2d:3c:c9:84:1a:16:ca:1d:d2:6f:27:3a:a7:6d:22:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:A5:B5:89:6B:E0:58:B4:0A:2C:32:DA:AA:35:FF:17:C4:2A:99
            X509v3 Authority Key Identifier:
                keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:17:37:d1:c6:d8:d2:88:ba:ce:68:69:0d:1b:87:67:8f:1d:
         21:4b:4d:bc:08:d6:37:90:8c:14:88:b4:32:c7:11:bc:43:f4:
         88:a1:93:19:cd:39:ba:c6:a1:ef:49:4a:82:18:8a:b3:b8:87:
         ad:37:b1:bf:62:35:73:9f:b9:5c:b6:73:21:56:9b:4d:fd:ef:
         17:4e:9b:40:27:2b:4c:a2:73:01:06:e7:2b:7d:9d:d4:9e:b4:
         06:69:8c:c7:2e:b9:91:2d:d2:84:d9:63:42:4a:49:38:fb:b3:
         a8:1d:01:34:64:8d:ec:74:81:e2:5b:cc:39:48:43:6b:9e:05:
         58:a1:99:7e:a7:4d:e9:fb:8d:f6:95:e7:aa:37:51:60:c7:f0:
         aa:bb:cf:54:af:39:f9:1c:b4:21:58:04:8e:6d:e6:14:98:c1:
         c7:c9:de:92:65:fb:86:47:2f:c3:2a:df:8a:85:df:6c:7d:06:
         cd:3d:04:bf:1f:9a:0a:e1:a8:e2:3c:7c:b5:8a:2d:8e:af:23:
         ac:69:e0:a2:bb:f0:df:86:f4:d5:1e:c3:ce:d9:8d:f2:d9:63:
         57:78:95:55:49:0f:1b:d6:78:2e:73:94:99:c4:90:65:7f:1d:
         78:93:ad:fe:59:63:d6:b3:a0:39:9d:eb:ec:03:c9:b3:53:b8:
         2c:c1:7d:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwdd4m3xss8jVwHuwjMnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2JjYTg3NjQ5NDY5MzJiYTJkYThiZGI3ZDEzY2Q4Njg5
NWFmNjkwHhcNMjUwODA2MTkwMDQzWhcNMjUwODA3MTkwMDQzWjAzMTEwLwYDVQQD
EygwOTVmYTViNTg5NmJlMDU4YjQwYTJjMzJkYWFhMzVmZjE3YzQyYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOjaBK50YjwsE3rObU1wCtmTluB
AEejIT5chaMxDVurjQJTLYLsHjjZ1k7+mrFnZPuO9idZTLGVzbYENu6gPqwUmazk
XHYbkW02V/aNjQHMAFTcgWFhEv4cBBM5eu4V/PyK7ybQjVYxvJUyAqfcJeqlUQpt
8vht0eYYVRes1eh20aaLSMu+OQVQvITqa/VBCiZtHjxxG/YK7X7h6nypVsydeBhC
aaSF4KwKtmJMPEVVx1XlBhsH0FAjkGQQnwyLPJ0vjnLvKyQZqp0TrtpJXyd3xP8E
rXaW4hblIiF2IO3WJndqsnLaH85amoj9apwtPMmEGhbKHdJvJzqnbSLGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlfpbWJa+BYtAosMtqqNf8XxCqZMB8GA1UdIwQY
MBaAFMo7yodklGkyui2ovbfRPNhola9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAt
MDEyZGRlYWRmNzVlLzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80ZTBmMmYtNDBiNy00NGQ5LTlmYTAtMDEyZGRlYWRmNzVl
LzEveWp2S2gyU1VhVEs2TGFpOXQ5RTgyR2lWcjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahc30cbY
0oi6zmhpDRuHZ48dIUtNvAjWN5CMFIi0MscRvEP0iKGTGc05usah70lKghiKs7iH
rTexv2I1c5+5XLZzIVabTf3vF06bQCcrTKJzAQbnK32d1J60BmmMxy65kS3ShNlj
QkpJOPuzqB0BNGSN7HSB4lvMOUhDa54FWKGZfqdN6fuN9pXnqjdRYMfwqrvPVK85
+Ry0IVgEjm3mFJjBx8nekmX7hkcvwyrfioXfbH0GzT0Evx+aCuGo4jx8tYotjq8j
rGngorvw34b01R7DztmN8tljV3iVVUkPG9Z4LnOUmcSQZX8deJOt/llj1rOgOZ3r
7APJs1O4LMF9mg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:34 2025 by rpki-client