Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          1/H7S8SBGBCggPG8aw1aTShBAM3OzyPEUcYGlFkZTxE=
Subject key identifier:   BC:8C:D5:C7:26:1B:97:30:D2:E3:54:8A:F8:8F:A7:76:6D:6A:B0:71
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       019880F8DF46545FCD6A6B11BB11BEC8D3F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          04CE
Signing time:             Wed 06 Aug 2025 20:00:50 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:50 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:50 +0000
Files and hashes:         1: 2zI93eWS4MAq1q_HzWCmHMK0vvc.roa (hash: OPrS0FrS6pSekQT7FXidaqihz4eIxPAHQ00wl3WWNU8=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: 2rf1DXFlOeK24ygKXeJeZKFwQASc8iomCdFceELiorc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:df:46:54:5f:cd:6a:6b:11:bb:11:be:c8:d3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Aug  6 20:00:50 2025 GMT
            Not After : Aug  7 20:00:50 2025 GMT
        Subject: CN=bc8cd5c7261b9730d2e3548af88fa7766d6ab071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:d8:5d:88:61:e2:11:33:d8:de:a1:ea:f0:
                    04:9d:4d:75:6a:69:c3:8e:36:d4:8e:98:fb:52:a6:
                    e0:1e:ab:e9:3a:b0:52:94:2a:f2:43:92:40:91:6c:
                    61:d0:7a:bb:7e:d9:40:b5:6e:c6:b6:52:f7:74:83:
                    08:f7:97:7b:1a:b7:66:bd:d7:b7:c5:13:7a:83:79:
                    31:59:ce:a8:3f:3f:f5:04:8f:a6:03:0a:0d:18:80:
                    0c:14:58:5d:30:66:f9:ae:ee:9e:38:66:8d:85:31:
                    fd:c2:81:df:fc:27:10:44:5e:3b:76:53:87:c8:c6:
                    64:90:7f:32:57:80:e9:5d:c0:7c:f2:94:d0:2f:96:
                    f5:e3:81:b1:7c:22:59:e2:96:3d:21:c0:ab:fa:59:
                    86:f0:b2:ad:4b:44:0b:91:9b:26:e3:1d:1f:40:e9:
                    80:5e:e3:40:59:a8:ba:85:c2:a9:aa:79:48:64:62:
                    20:15:34:50:57:f8:14:ba:fc:1c:79:81:0a:3f:8e:
                    08:aa:26:50:b8:3f:7d:40:d0:c3:47:57:f8:5f:64:
                    7c:1d:a8:e8:af:b5:cf:ff:f9:9d:16:a5:1d:ad:45:
                    39:fc:46:58:f4:0e:8e:d0:44:f7:a2:96:bf:bc:30:
                    b7:b9:d2:8f:f4:05:bd:55:b5:9a:18:d4:04:dc:77:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:D5:C7:26:1B:97:30:D2:E3:54:8A:F8:8F:A7:76:6D:6A:B0:71
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c5:53:71:fa:95:16:01:78:23:a5:c2:57:32:14:c1:96:89:
         1a:26:ba:fc:2a:37:63:7f:dd:46:68:67:9a:a3:9c:7c:a8:45:
         7b:cf:8b:6e:16:97:72:77:06:47:b5:0c:11:25:51:f6:d6:c4:
         f5:09:60:0f:24:21:90:ce:86:cd:64:b2:59:db:63:8d:94:2b:
         56:5b:06:2b:6d:38:5c:c0:ce:e6:58:49:34:62:a1:c3:2e:c6:
         a9:09:10:6c:cd:bb:a9:aa:66:b5:ea:b3:9f:9b:35:ba:97:3a:
         c4:9a:aa:2b:9c:7c:b7:10:ae:34:c3:72:ef:00:9a:b2:26:5a:
         68:5f:cf:95:cd:d8:d5:ae:55:b1:62:86:0c:48:94:cd:da:ba:
         87:ae:24:1e:0a:70:3c:d8:9c:c1:dd:48:5c:bb:74:af:66:ed:
         8f:94:76:b0:e8:ef:b7:3e:e6:d4:94:9a:f0:89:7d:1b:bd:21:
         7c:8c:ed:98:5a:d7:3a:b1:b9:dd:9b:c3:93:f4:41:21:61:0a:
         51:ad:3a:f5:f9:ef:2f:0e:3a:0c:f6:7e:f8:1c:d1:9a:3c:32:
         1c:96:5b:ff:fa:34:e8:58:44:ec:cd:f5:f9:d5:3c:5a:29:92:
         37:0e:63:fe:99:b3:77:05:11:ab:20:80:e1:fe:59:6d:a6:b7:
         04:73:31:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+N9GVF/NamsRuxG+yNP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjUwODA2MjAwMDUwWhcNMjUwODA3MjAwMDUwWjAzMTEwLwYDVQQD
EyhiYzhjZDVjNzI2MWI5NzMwZDJlMzU0OGFmODhmYTc3NjZkNmFiMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3nYXYhh4hEz2N6h6vAEnU11amnD
jjbUjpj7UqbgHqvpOrBSlCryQ5JAkWxh0Hq7ftlAtW7GtlL3dIMI95d7Grdmvde3
xRN6g3kxWc6oPz/1BI+mAwoNGIAMFFhdMGb5ru6eOGaNhTH9woHf/CcQRF47dlOH
yMZkkH8yV4DpXcB88pTQL5b144GxfCJZ4pY9IcCr+lmG8LKtS0QLkZsm4x0fQOmA
XuNAWai6hcKpqnlIZGIgFTRQV/gUuvwceYEKP44IqiZQuD99QNDDR1f4X2R8Hajo
r7XP//mdFqUdrUU5/EZY9A6O0ET3opa/vDC3udKP9AW9VbWaGNQE3He3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyM1ccmG5cw0uNUiviPp3ZtarBxMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcVTcfqV
FgF4I6XCVzIUwZaJGia6/Co3Y3/dRmhnmqOcfKhFe8+LbhaXcncGR7UMESVR9tbE
9QlgDyQhkM6GzWSyWdtjjZQrVlsGK204XMDO5lhJNGKhwy7GqQkQbM27qapmteqz
n5s1upc6xJqqK5x8txCuNMNy7wCasiZaaF/Plc3Y1a5VsWKGDEiUzdq6h64kHgpw
PNicwd1IXLt0r2btj5R2sOjvtz7m1JSa8Il9G70hfIztmFrXOrG53ZvDk/RBIWEK
Ua069fnvLw46DPZ++BzRmjwyHJZb//o06FhE7M31+dU8WimSNw5j/pmzdwURqyCA
4f5Zbaa3BHMxLA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:03:53 2025 by rpki-client