Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          UkWG3az1bqgnEHfGrBxnqvhOjGoYzzAesJUpqD11jgg=
Subject key identifier:   95:34:1A:E3:FA:46:AB:B4:60:B1:65:53:D0:21:4F:0B:0B:97:57:E9
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       01977A8B20B8BBB14031872B1732A24996CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          25
Signing time:             Mon 16 Jun 2025 21:00:27 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:27 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:27 +0000
Files and hashes:         1: Hma6GYWs5Tdom6T2R14STXiUtLo.roa (hash: nzMAO+8FCPXY1wL1mWVZEzCo6GePIs/i8E7UJEjZ+GM=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: rzYGhUt1Hi/eS4xqnHmzrLIR1Tql1VclL9eSkswyXFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:20:b8:bb:b1:40:31:87:2b:17:32:a2:49:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Jun 16 21:00:27 2025 GMT
            Not After : Jun 17 21:00:27 2025 GMT
        Subject: CN=95341ae3fa46abb460b16553d0214f0b0b9757e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:c3:30:90:99:b2:b1:5d:69:ee:49:2f:f9:
                    08:b8:23:31:61:68:0a:3f:e4:97:7b:13:bf:e2:4c:
                    13:21:1a:a7:20:da:0a:1d:5d:d8:c9:ff:9c:08:2e:
                    b4:a2:d8:cd:8f:70:60:63:34:8a:4c:1d:86:ae:4c:
                    35:ff:3f:97:01:68:13:1c:e9:94:8f:da:10:fa:8a:
                    5a:f3:9e:1b:a2:7e:8f:93:c0:ee:f3:f1:f1:4a:67:
                    04:1f:5b:b2:25:1d:0c:7b:98:b1:1d:ba:6b:70:6b:
                    09:d2:29:8f:9e:40:52:fe:78:fe:3b:b1:02:d7:37:
                    86:3c:08:81:98:6e:4f:14:01:d2:55:54:89:a5:71:
                    fe:c4:e1:ab:f6:0b:98:1d:cc:31:a0:4e:ee:4e:6e:
                    7f:cb:5f:17:aa:f5:d8:4f:c0:65:2e:77:b8:15:5b:
                    d4:a2:18:c1:e7:4a:96:08:f2:c0:33:a8:82:9c:d7:
                    5a:e6:cf:05:fd:bc:7a:d2:e1:81:bf:9f:93:b9:77:
                    35:63:aa:e1:92:1b:26:d4:13:b7:f5:5a:6d:68:22:
                    10:b5:a7:ab:af:d9:19:44:ee:44:1f:02:ed:bf:f9:
                    bf:e4:80:18:20:b8:d6:b8:4f:42:f5:4d:34:6b:6c:
                    e0:1f:58:a3:89:c4:06:64:36:b5:4e:12:69:41:d5:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:1A:E3:FA:46:AB:B4:60:B1:65:53:D0:21:4F:0B:0B:97:57:E9
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:49:13:7d:07:dd:62:17:be:88:de:eb:0e:c5:ba:62:bd:cb:
         d1:c7:db:dd:f7:5c:a3:12:54:b4:29:d7:c9:d7:cd:72:c0:6e:
         e1:20:db:56:57:7c:3a:b0:b8:e2:81:30:da:c5:f2:3c:ac:e1:
         82:9a:13:e4:38:a2:c3:da:c2:86:a4:93:73:66:66:ff:17:67:
         e8:e1:8a:9b:e6:26:b0:ca:bb:a1:29:f4:02:c6:bc:d0:8e:71:
         b1:e0:9a:e4:58:9d:75:59:31:0e:f3:cf:39:22:ce:b2:5b:b3:
         6d:e6:5e:1f:e0:65:1b:16:09:00:76:88:36:c2:16:88:f5:f1:
         90:16:86:a9:d5:55:64:d8:ab:83:ab:36:20:d0:12:d3:39:03:
         c6:e0:21:b8:59:28:1d:6a:ac:a5:a4:41:01:36:27:50:99:80:
         c6:71:2c:ac:a9:ea:ff:d2:e6:02:07:31:48:96:91:cd:8d:83:
         c0:d1:d3:2a:92:01:ee:a6:a0:f9:5e:db:bd:7f:ff:e5:a8:63:
         24:a9:67:8d:9f:3f:65:1d:f4:f2:3e:61:00:b2:30:c9:03:fd:
         61:e1:95:73:2a:02:fd:88:de:82:9e:97:2b:c0:34:5e:30:df:
         9a:48:82:ce:c6:1e:99:8a:32:d1:4a:30:00:da:1f:4d:77:d4:
         3a:4c:aa:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6iyC4u7FAMYcrFzKiSZbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOGY1NjZjOGZmOTUxMmE1NzQ4Y2MxNDg5ZjA5MzVjMjVk
OGM0YWIwHhcNMjUwNjE2MjEwMDI3WhcNMjUwNjE3MjEwMDI3WjAzMTEwLwYDVQQD
Eyg5NTM0MWFlM2ZhNDZhYmI0NjBiMTY1NTNkMDIxNGYwYjBiOTc1N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutrDMJCZsrFdae5JL/kIuCMxYWgK
P+SXexO/4kwTIRqnINoKHV3Yyf+cCC60otjNj3BgYzSKTB2Grkw1/z+XAWgTHOmU
j9oQ+opa854bon6Pk8Du8/HxSmcEH1uyJR0Me5ixHbprcGsJ0imPnkBS/nj+O7EC
1zeGPAiBmG5PFAHSVVSJpXH+xOGr9guYHcwxoE7uTm5/y18XqvXYT8BlLne4FVvU
ohjB50qWCPLAM6iCnNda5s8F/bx60uGBv5+TuXc1Y6rhkhsm1BO39VptaCIQtaer
r9kZRO5EHwLtv/m/5IAYILjWuE9C9U00a2zgH1ijicQGZDa1ThJpQdVlRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU0GuP6Rqu0YLFlU9AhTwsLl1fpMB8GA1UdIwQY
MBaAFJGPVmyP+VEqV0jMFInwk1wl2MSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEt
YTVmMTFiYzM1ZjMxLzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81YTU4Y2MtZjlmZS00OWU2LWJiOGEtYTVmMTFiYzM1ZjMx
LzEva1k5V2JJXzVVU3BYU013VWlmQ1RYQ1hZeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkkTfQfd
Yhe+iN7rDsW6Yr3L0cfb3fdcoxJUtCnXydfNcsBu4SDbVld8OrC44oEw2sXyPKzh
gpoT5Diiw9rChqSTc2Zm/xdn6OGKm+YmsMq7oSn0Asa80I5xseCa5FiddVkxDvPP
OSLOsluzbeZeH+BlGxYJAHaINsIWiPXxkBaGqdVVZNirg6s2INAS0zkDxuAhuFko
HWqspaRBATYnUJmAxnEsrKnq/9LmAgcxSJaRzY2DwNHTKpIB7qag+V7bvX//5ahj
JKlnjZ8/ZR308j5hALIwyQP9YeGVcyoC/Yjegp6XK8A0XjDfmkiCzsYemYoy0Uow
ANofTXfUOkyqTg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:10:58 2025 by rpki-client