Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          YFHbmRknHa2wXt/k/qh8jT/nhSHwV6WTG7ni64TP4UU=
Subject key identifier:   80:20:AC:60:DE:55:29:1F:7B:B0:33:E2:95:F1:7A:57:F3:AF:BA:8E
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       01976DAB2C37BD6EC56093FF011D9EA157DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          101F
Signing time:             Sat 14 Jun 2025 09:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:23 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: +jgZE85Q+L2fjsm0kooIvGvxYp4N6Df9CI6/AO/Y0n0=)
                          2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
                          3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
                          4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
                          5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:2c:37:bd:6e:c5:60:93:ff:01:1d:9e:a1:57:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jun 14 09:00:23 2025 GMT
            Not After : Jun 15 09:00:23 2025 GMT
        Subject: CN=8020ac60de55291f7bb033e295f17a57f3afba8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:92:f1:21:ad:dd:28:bd:3c:21:cf:c6:eb:
                    af:e3:ee:40:63:ca:cd:70:40:78:82:fa:18:1f:1c:
                    58:e3:8c:0a:e2:2c:f4:5f:5b:99:38:8e:e0:7f:0a:
                    f0:2e:05:75:2c:e8:a1:75:dc:d6:ef:eb:32:5d:ed:
                    09:43:e7:83:d3:5c:9f:df:97:76:9d:ad:d6:82:ff:
                    7a:78:92:83:e0:21:40:e6:9f:c3:0d:9b:65:c4:e3:
                    ae:b7:4d:b2:41:dc:9b:98:87:01:63:58:00:df:2a:
                    d4:fb:3f:4d:08:a5:c4:a0:9e:e4:54:ea:54:02:bf:
                    94:3e:cf:13:7e:94:33:76:db:c9:aa:ba:60:e4:73:
                    f7:f5:b1:a9:d8:18:18:bd:8a:df:dd:a1:ca:12:6e:
                    0b:71:87:50:60:06:37:26:66:fd:40:cb:7a:c2:ec:
                    ad:2c:c6:fc:2e:a1:25:6f:32:b2:99:c5:a5:4d:97:
                    a9:7d:6d:99:a2:53:65:90:07:68:1e:8d:4a:b5:b3:
                    02:81:49:83:74:4e:34:3d:ff:d1:9f:5a:51:39:c5:
                    ec:0d:5b:8b:af:2e:3e:de:bf:4a:a7:e5:b1:02:0d:
                    98:37:46:18:ef:ef:e5:3f:59:e8:55:01:c3:df:c6:
                    34:b4:98:4e:9f:e9:e1:9e:3b:32:3f:e9:97:70:54:
                    51:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:20:AC:60:DE:55:29:1F:7B:B0:33:E2:95:F1:7A:57:F3:AF:BA:8E
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dc:3d:c8:02:2f:91:a4:bb:7d:7e:70:8d:2a:a5:9d:3d:cd:
         f1:4a:32:ff:47:ba:a6:cb:5f:80:15:ff:6e:d4:ee:17:21:01:
         66:69:58:6a:a3:8e:5e:43:51:f2:76:03:30:ac:9b:96:a9:24:
         34:cd:ad:29:e8:1a:05:97:73:6e:59:dd:53:e2:37:5e:58:10:
         fd:d0:63:75:d1:39:13:59:33:79:cf:06:1d:bd:11:f3:84:09:
         90:06:ac:e4:d2:2a:20:73:df:40:b8:d5:c9:27:65:5e:e9:78:
         8e:73:ab:d2:e1:23:9f:77:12:da:ef:4a:11:97:19:06:d3:1a:
         42:67:73:4d:df:a3:7b:b8:8d:97:d6:d5:a4:a4:fd:57:c2:71:
         9e:d9:5c:01:ca:10:18:b4:09:0c:bd:1d:ba:e8:d0:78:fa:84:
         89:37:78:42:7d:f4:ed:3e:42:c6:1a:33:20:1a:76:7e:64:a3:
         01:44:30:04:61:2b:7e:cb:e3:6d:14:df:b9:af:1d:71:f6:41:
         fc:9c:82:89:67:a4:86:be:14:c9:38:ba:6e:fe:dd:16:7e:0b:
         f8:82:ff:21:b5:9e:4d:62:e2:a6:0d:52:bb:29:e3:ac:29:fb:
         85:cf:32:c7:0b:b5:7f:96:38:49:70:ff:2a:87:41:ea:17:26:
         4d:cc:54:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdtqyw3vW7FYJP/AR2eoVfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm
OGNkY2UwHhcNMjUwNjE0MDkwMDIzWhcNMjUwNjE1MDkwMDIzWjAzMTEwLwYDVQQD
Eyg4MDIwYWM2MGRlNTUyOTFmN2JiMDMzZTI5NWYxN2E1N2YzYWZiYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwOS8SGt3Si9PCHPxuuv4+5AY8rN
cEB4gvoYHxxY44wK4iz0X1uZOI7gfwrwLgV1LOihddzW7+syXe0JQ+eD01yf35d2
na3Wgv96eJKD4CFA5p/DDZtlxOOut02yQdybmIcBY1gA3yrU+z9NCKXEoJ7kVOpU
Ar+UPs8TfpQzdtvJqrpg5HP39bGp2BgYvYrf3aHKEm4LcYdQYAY3Jmb9QMt6wuyt
LMb8LqElbzKymcWlTZepfW2ZolNlkAdoHo1KtbMCgUmDdE40Pf/Rn1pROcXsDVuL
ry4+3r9Kp+WxAg2YN0YY7+/lP1noVQHD38Y0tJhOn+nhnjsyP+mXcFRR5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIAgrGDeVSkfe7Az4pXxelfzr7qOMB8GA1UdIwQY
MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2
LTFjODhlZWJlYjI5My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1LzIwZjRhYy04MGQ5LTQwZTItYTllNi0xYzg4ZWViZWIy
OTMvMS8xLXlOcklUMVdTVDg3QjM1clFmUXVUejM0emM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtw9
yAIvkaS7fX5wjSqlnT3N8Uoy/0e6pstfgBX/btTuFyEBZmlYaqOOXkNR8nYDMKyb
lqkkNM2tKegaBZdzblndU+I3XlgQ/dBjddE5E1kzec8GHb0R84QJkAas5NIqIHPf
QLjVySdlXul4jnOr0uEjn3cS2u9KEZcZBtMaQmdzTd+je7iNl9bVpKT9V8Jxntlc
AcoQGLQJDL0duujQePqEiTd4Qn307T5CxhozIBp2fmSjAUQwBGErfsvjbRTfua8d
cfZB/JyCiWekhr4UyTi6bv7dFn4L+IL/IbWeTWLipg1SuynjrCn7hc8yxwu1f5Y4
SXD/KodB6hcmTcxUQA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:35:02 2025 by rpki-client