Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier:          q6zzB2jArs8/Wp3iIeZ0LFMfXXu/G2LOTqJyomPwMy0=
Subject key identifier:   1F:5B:A6:36:34:0A:97:B9:A4:7A:B6:51:D2:49:5A:6D:28:D2:E0:9C
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       019880F8DA8C1848F086C6A58B27836B5A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number:          08EA
Signing time:             Wed 06 Aug 2025 20:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:49 +0000
Files and hashes:         1: PQtqUQS_s4n0kinqfMA_4YnfNNY.roa (hash: D39QZGtQwYdkCVJ23N2oD5YrqEwumLtNGePQrn18tVk=)
                          2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: P6sy0K7bKB2rXhQ3DzHKed+Dep9VgJ1KlDJ2BLid0/U=)
                          3: pdC1KsOnjOvGFainyuUjzICPFes.roa (hash: 9PpZVEet2RmTDOe5qqgJNSaHCeSHC8NK2RueyDRCl5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:da:8c:18:48:f0:86:c6:a5:8b:27:83:6b:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Aug  6 20:00:49 2025 GMT
            Not After : Aug  7 20:00:49 2025 GMT
        Subject: CN=1f5ba636340a97b9a47ab651d2495a6d28d2e09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:47:75:58:b0:4b:49:87:54:55:d5:b8:f2:
                    84:79:40:80:12:3d:18:d4:6f:c1:6c:db:7d:c0:8a:
                    e5:9e:c5:66:1f:94:19:0d:b2:2a:39:f4:1b:07:6b:
                    00:c7:0b:b0:89:51:de:44:34:e9:68:c8:2a:9a:94:
                    e3:a5:98:9c:67:24:c6:14:4b:6d:1d:57:1a:cd:df:
                    06:9f:6a:d1:c9:04:2e:8b:6c:63:fa:cd:b7:1e:ff:
                    1d:5f:ff:d2:51:e5:5b:ee:41:b1:f7:4c:7a:a7:8b:
                    87:fb:0e:fa:61:7a:91:17:c0:5d:81:84:a0:d4:ea:
                    72:8d:6e:e2:b6:2a:1e:9d:d0:95:66:ec:ae:4c:68:
                    8d:a0:08:eb:36:0c:07:b7:a8:d0:b8:59:56:02:fd:
                    bf:d7:15:ea:ee:a9:fb:a6:c5:f9:05:da:18:db:a2:
                    d0:6b:d4:cf:01:fc:96:c5:a8:87:1e:b4:e4:3d:e8:
                    c4:69:71:d9:59:a6:e9:f1:15:a3:6e:f2:6c:ff:b5:
                    74:35:df:bf:57:b7:29:c0:68:7c:5a:80:39:02:2b:
                    d3:ed:54:c4:15:3e:78:64:96:e8:b4:1a:1a:87:2a:
                    7f:ab:67:17:cc:9d:80:e3:5d:0e:d6:26:0f:a7:06:
                    8b:46:19:48:13:b4:40:f2:6d:b4:da:2d:c7:a4:c0:
                    36:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:A6:36:34:0A:97:B9:A4:7A:B6:51:D2:49:5A:6D:28:D2:E0:9C
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:39:5d:93:41:ce:3e:6a:c8:81:58:ce:5b:f3:16:d0:51:37:
         5b:2d:d3:21:a3:78:ab:e1:92:4a:4d:b1:2d:76:d9:90:86:a4:
         c2:5d:60:10:0a:12:31:ff:ca:f8:a2:5a:f0:18:48:ad:c5:e6:
         32:82:44:77:ff:17:a0:6c:e2:eb:e5:ea:4b:b2:4d:c8:20:c4:
         37:32:7f:bd:49:55:8f:9f:fb:6d:28:4b:38:79:30:b5:da:7c:
         36:9a:60:18:9f:83:5a:a0:10:7c:af:0d:cd:7f:9c:d4:db:68:
         d1:a9:4a:ef:cd:f5:bb:df:9b:72:20:ad:94:f8:ee:55:82:d6:
         00:f6:f8:e4:7f:d1:2d:4a:c0:7f:af:81:36:aa:d3:7d:09:ae:
         21:46:09:90:7d:df:25:25:d4:22:b6:b3:04:b7:3f:de:59:49:
         24:43:bd:66:60:fd:ba:b5:ba:09:5e:39:a1:ec:1d:d6:76:f2:
         f7:46:ab:a0:7c:d9:3d:bd:81:8a:49:0f:9c:a1:bb:d4:0c:f0:
         80:85:66:c8:fc:f6:92:01:12:d6:79:6e:11:d1:b9:51:6e:7d:
         8c:f1:49:61:96:57:13:a2:b9:fc:2c:d4:62:56:a1:60:89:b6:
         bb:78:58:14:ac:26:8f:f4:e8:48:68:a8:9f:7e:6d:ff:e8:cb:
         c2:09:98:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+NqMGEjwhsaliyeDa1o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTc3M2RiZmI3NTk1N2YwY2M1Yzg2M2ZjY2U3NmNhNThh
MzkzMDgwHhcNMjUwODA2MjAwMDQ5WhcNMjUwODA3MjAwMDQ5WjAzMTEwLwYDVQQD
EygxZjViYTYzNjM0MGE5N2I5YTQ3YWI2NTFkMjQ5NWE2ZDI4ZDJlMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhNHdViwS0mHVFXVuPKEeUCAEj0Y
1G/BbNt9wIrlnsVmH5QZDbIqOfQbB2sAxwuwiVHeRDTpaMgqmpTjpZicZyTGFEtt
HVcazd8Gn2rRyQQui2xj+s23Hv8dX//SUeVb7kGx90x6p4uH+w76YXqRF8BdgYSg
1OpyjW7itioendCVZuyuTGiNoAjrNgwHt6jQuFlWAv2/1xXq7qn7psX5BdoY26LQ
a9TPAfyWxaiHHrTkPejEaXHZWabp8RWjbvJs/7V0Nd+/V7cpwGh8WoA5AivT7VTE
FT54ZJbotBoahyp/q2cXzJ2A410O1iYPpwaLRhlIE7RA8m202i3HpMA2nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9bpjY0Cpe5pHq2UdJJWm0o0uCcMB8GA1UdIwQY
MBaAFGDnc9v7dZV/DMXIY/zOdspYo5MIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWIt
NDc2ZDdlNjJjZWY2LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWItNDc2ZDdlNjJjZWY2
LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADldk0HO
PmrIgVjOW/MW0FE3Wy3TIaN4q+GSSk2xLXbZkIakwl1gEAoSMf/K+KJa8BhIrcXm
MoJEd/8XoGzi6+XqS7JNyCDENzJ/vUlVj5/7bShLOHkwtdp8NppgGJ+DWqAQfK8N
zX+c1Nto0alK7831u9+bciCtlPjuVYLWAPb45H/RLUrAf6+BNqrTfQmuIUYJkH3f
JSXUIrazBLc/3llJJEO9ZmD9urW6CV45oewd1nby90aroHzZPb2BikkPnKG71Azw
gIVmyPz2kgES1nluEdG5UW59jPFJYZZXE6K5/CzUYlahYIm2u3hYFKwmj/ToSGio
n35t/+jLwgmYUw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:01 2025 by rpki-client