Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          6LxaHEdUpiJE8AIWcgrrAcrU+9mp5SnwipNIGaRVvCE=
Subject key identifier:   59:6F:7D:8F:24:48:45:C6:37:58:04:88:AC:3A:23:0C:74:BA:A1:5A
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019873AAD39DF1483C5CFAAFD4C94EDB0822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          13F5
Signing time:             Mon 04 Aug 2025 06:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:31 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: OVgyCY1T9alTlyC3iqgYsWo5RT79F4zcYURv0f2/a5o=)
                          2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
                          3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
                          4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
                          5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=)
                          6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:d3:9d:f1:48:3c:5c:fa:af:d4:c9:4e:db:08:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Aug  4 06:00:31 2025 GMT
            Not After : Aug  5 06:00:31 2025 GMT
        Subject: CN=596f7d8f244845c637580488ac3a230c74baa15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:7c:5f:cb:be:2c:30:56:ef:44:bd:0b:41:
                    df:1f:a2:3f:52:cf:68:32:c5:5b:37:cc:09:3f:6e:
                    a1:55:66:e1:0f:40:9f:1d:12:c8:77:c4:b6:b0:34:
                    13:c6:d2:9a:91:a0:73:e8:86:99:3f:35:e3:5c:94:
                    f3:4c:f3:02:a1:a2:31:39:3e:1a:42:b8:93:54:8f:
                    0f:45:04:be:d4:e5:74:41:fd:80:95:02:6d:6b:bf:
                    d4:a1:81:97:cf:76:db:08:66:95:f6:d7:e8:2f:a0:
                    7d:40:5f:2b:65:23:41:10:89:3c:3f:d6:81:f5:00:
                    33:d1:9f:2a:88:63:28:54:f7:36:71:65:92:9a:c0:
                    68:f9:97:ce:ca:42:02:e1:1d:18:9c:9e:8c:fb:ec:
                    4a:68:59:59:7b:e5:3b:b6:0a:9d:ad:f1:3b:47:be:
                    c7:e9:83:3f:43:83:a9:d2:f2:ec:e0:e8:8a:5f:5a:
                    7c:5a:b6:c5:0b:9b:6d:49:80:d8:f7:2e:22:e8:e2:
                    25:a3:8a:5c:f5:31:20:15:cb:18:f2:31:58:b6:24:
                    e5:bd:0f:86:d4:73:d5:c0:5c:a9:fa:a3:fa:75:bc:
                    3c:ae:6d:2a:52:f0:60:3d:58:9d:e0:48:66:d8:1b:
                    e4:58:04:f4:b3:6c:50:4d:ae:3c:05:51:c9:8a:e6:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:7D:8F:24:48:45:C6:37:58:04:88:AC:3A:23:0C:74:BA:A1:5A
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:23:a2:1d:e8:bd:3f:35:b5:e4:48:f7:7b:58:8e:75:bf:
         f6:81:15:ea:1a:6d:30:06:ec:f8:7a:87:72:a8:80:95:cf:8d:
         ee:44:35:65:b4:06:e4:4e:ba:b4:ff:dd:82:93:d2:da:46:ea:
         59:c9:c8:24:cf:1a:60:62:78:98:7b:aa:b4:33:90:bf:84:9e:
         9a:a7:5b:95:f8:91:89:1f:9b:7b:4f:0b:c6:2b:a4:bd:39:97:
         a5:71:34:07:49:96:0e:af:11:35:ac:a2:72:3b:19:59:ce:be:
         62:6f:c9:c2:2a:be:35:47:7a:55:91:ad:4a:54:7c:33:55:46:
         a5:c6:c6:03:9c:df:33:74:0a:71:f3:bb:4d:5a:02:43:27:cf:
         8f:4e:2c:ed:8b:47:eb:50:82:e4:ea:39:b8:ff:37:a1:d1:fb:
         d6:65:f9:00:fd:10:a2:01:26:c0:a4:3e:7a:d6:36:d5:f1:25:
         4e:34:87:97:1e:2e:cd:3c:bc:5d:be:21:96:d7:12:e9:00:5a:
         62:f7:8d:fc:3d:f4:81:24:71:c6:a0:4e:84:f3:17:ba:dd:96:
         7f:a6:68:bb:2d:93:30:6b:ef:b9:f1:a3:99:e8:c5:aa:0f:98:
         0d:5b:af:42:af:15:66:58:d8:93:1a:42:7b:82:fa:d7:f5:ed:
         7b:87:0a:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhzqtOd8Ug8XPqv1MlO2wgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx
Zjg3YjMwHhcNMjUwODA0MDYwMDMxWhcNMjUwODA1MDYwMDMxWjAzMTEwLwYDVQQD
Eyg1OTZmN2Q4ZjI0NDg0NWM2Mzc1ODA0ODhhYzNhMjMwYzc0YmFhMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6l8X8u+LDBW70S9C0HfH6I/Us9o
MsVbN8wJP26hVWbhD0CfHRLId8S2sDQTxtKakaBz6IaZPzXjXJTzTPMCoaIxOT4a
QriTVI8PRQS+1OV0Qf2AlQJta7/UoYGXz3bbCGaV9tfoL6B9QF8rZSNBEIk8P9aB
9QAz0Z8qiGMoVPc2cWWSmsBo+ZfOykIC4R0YnJ6M++xKaFlZe+U7tgqdrfE7R77H
6YM/Q4Op0vLs4OiKX1p8WrbFC5ttSYDY9y4i6OIlo4pc9TEgFcsY8jFYtiTlvQ+G
1HPVwFyp+qP6dbw8rm0qUvBgPVid4Ehm2BvkWAT0s2xQTa48BVHJiuZBkwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFlvfY8kSEXGN1gEiKw6Iwx0uqFaMB8GA1UdIwQY
MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz
LWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiL2E5MjA2ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQz
Y2QvMS8xLVlvQzBneHJmZU5YRWw4NHNYTmNvYmtmaDdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3Qj
oh3ovT81teRI93tYjnW/9oEV6hptMAbs+HqHcqiAlc+N7kQ1ZbQG5E66tP/dgpPS
2kbqWcnIJM8aYGJ4mHuqtDOQv4SemqdblfiRiR+be08LxiukvTmXpXE0B0mWDq8R
NayicjsZWc6+Ym/Jwiq+NUd6VZGtSlR8M1VGpcbGA5zfM3QKcfO7TVoCQyfPj04s
7YtH61CC5Oo5uP83odH71mX5AP0QogEmwKQ+etY21fElTjSHlx4uzTy8Xb4hltcS
6QBaYveN/D30gSRxxqBOhPMXut2Wf6Zouy2TMGvvufGjmejFqg+YDVuvQq8VZljY
kxpCe4L61/Xte4cK0w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:09 2025 by rpki-client