Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
File:                     yNMivrfjY_TUV14eT-7lzLhOEnU.mft (raw, json)
Hash identifier:          WVy5o1dloE1Dd2A3Tat6g+Cc029OT15PJ3f0IZYs8Z0=
Subject key identifier:   A7:58:0E:F9:55:A4:03:EB:34:56:60:26:84:B2:3E:FD:61:8B:54:F3
Authority key identifier: C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75
Certificate issuer:       /CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
Certificate serial:       01988B7CE32EC961EE7A97EA56F83B8390AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 21:01:14 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:14 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:14 +0000
Files and hashes:         1: nvq-TJNbL0ajM2TA5cfgJ-DqXBg.roa (hash: pDByD6dp3Va0k7qBPd8tHFheIh5zQKazx/nAE02gXa4=)
                          2: yNMivrfjY_TUV14eT-7lzLhOEnU.crl (hash: PJKjjEjvtJKEJ+gWWTtKQDziVZD0CCjSamX1dDGrSmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:e3:2e:c9:61:ee:7a:97:ea:56:f8:3b:83:90:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d322beb7e363f4d4575e1e4feee5ccb84e1275
        Validity
            Not Before: Aug  8 21:01:14 2025 GMT
            Not After : Aug  9 21:01:14 2025 GMT
        Subject: CN=a7580ef955a403eb3456602684b23efd618b54f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:51:08:c4:f0:9b:95:7b:e9:dd:1e:8c:9e:
                    a4:72:43:f6:99:f8:55:9c:67:9e:5f:cf:28:c6:47:
                    ce:b6:64:20:23:d3:1e:c8:b6:1a:2d:95:4e:a2:6d:
                    ca:9d:5a:d8:d7:a0:2a:8a:bf:1a:0c:d9:2a:5e:49:
                    41:07:63:6a:03:01:63:1a:15:84:1e:0c:d0:2f:43:
                    cf:26:56:da:79:15:d8:11:6b:f7:38:49:ef:d4:e1:
                    fd:6a:78:2d:91:36:20:ed:0d:41:c8:b3:66:95:5f:
                    1e:30:79:14:d4:68:13:e5:a9:bf:3f:e7:a6:be:cb:
                    2b:a3:4c:57:6f:30:3c:c1:7b:f7:e5:09:b6:d8:d4:
                    74:53:e3:7e:76:31:db:5d:c6:ae:47:a1:6b:9d:1d:
                    f9:74:19:fa:9c:1a:3d:85:17:ea:42:8b:bb:12:c4:
                    50:56:0f:28:bb:79:78:f1:2b:42:66:fc:df:6b:85:
                    b3:49:42:42:58:9c:6b:2c:be:9e:58:f7:31:de:b0:
                    71:4e:31:7f:af:07:43:ac:a5:d7:40:d2:c7:e5:18:
                    8e:aa:9a:8d:a1:d4:16:6f:29:17:f6:1f:5e:0e:4e:
                    95:14:a7:77:e9:29:43:24:69:1d:03:79:41:e9:e6:
                    be:31:61:d6:18:3c:d7:12:be:4e:3a:12:e6:52:7e:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:58:0E:F9:55:A4:03:EB:34:56:60:26:84:B2:3E:FD:61:8B:54:F3
            X509v3 Authority Key Identifier:
                keyid:C8:D3:22:BE:B7:E3:63:F4:D4:57:5E:1E:4F:EE:E5:CC:B8:4E:12:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNMivrfjY_TUV14eT-7lzLhOEnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ef4db0-b6c9-47aa-84c1-dc3769e8f6a1/1/yNMivrfjY_TUV14eT-7lzLhOEnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:09:2a:28:7d:9f:db:af:4e:ba:44:aa:5d:ea:4a:55:aa:30:
         3b:8d:8c:b3:a5:7d:85:f9:e4:cb:f6:12:a6:5d:b0:a5:cc:e1:
         74:33:32:48:c9:6e:d3:b9:2f:6e:40:aa:5a:fe:bb:57:a3:34:
         47:32:af:1b:2e:1b:b7:b5:a1:11:7b:07:c4:18:c1:ba:62:84:
         e7:96:0e:35:08:44:f9:0e:10:cf:13:dc:6b:9b:0c:03:46:62:
         f7:35:75:86:ae:7f:83:04:b4:56:1f:ba:f6:2c:d2:75:82:0d:
         d6:fa:b0:71:e0:c3:42:21:f5:94:e6:60:6c:cd:a7:ce:76:7a:
         6d:f3:bc:63:53:6d:8b:5e:e1:79:84:95:51:3f:f0:42:37:9a:
         84:85:93:91:10:e0:bb:86:95:31:ca:4f:ff:db:ae:b9:f0:8b:
         be:1b:d2:17:d8:43:f6:c8:4c:14:3b:13:47:7f:fb:3a:45:83:
         03:4a:04:a0:af:c3:38:a1:65:ff:4d:db:00:ad:4b:68:93:6b:
         42:b6:16:5f:ca:ca:71:73:11:6c:79:2f:6a:23:54:8c:21:69:
         78:4d:a7:06:a6:7a:2d:e9:9c:09:a1:fe:4e:dd:9e:e9:e4:d4:
         11:e4:f6:d5:bb:08:de:97:fe:47:65:86:a0:d3:31:b4:7c:32:
         21:2c:f7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfOMuyWHuepfqVvg7g5CrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDMyMmJlYjdlMzYzZjRkNDU3NWUxZTRmZWVlNWNjYjg0
ZTEyNzUwHhcNMjUwODA4MjEwMTE0WhcNMjUwODA5MjEwMTE0WjAzMTEwLwYDVQQD
EyhhNzU4MGVmOTU1YTQwM2ViMzQ1NjYwMjY4NGIyM2VmZDYxOGI1NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOtRCMTwm5V76d0ejJ6kckP2mfhV
nGeeX88oxkfOtmQgI9MeyLYaLZVOom3KnVrY16Aqir8aDNkqXklBB2NqAwFjGhWE
HgzQL0PPJlbaeRXYEWv3OEnv1OH9angtkTYg7Q1ByLNmlV8eMHkU1GgT5am/P+em
vssro0xXbzA8wXv35Qm22NR0U+N+djHbXcauR6FrnR35dBn6nBo9hRfqQou7EsRQ
Vg8ou3l48StCZvzfa4WzSUJCWJxrLL6eWPcx3rBxTjF/rwdDrKXXQNLH5RiOqpqN
odQWbykX9h9eDk6VFKd36SlDJGkdA3lB6ea+MWHWGDzXEr5OOhLmUn4wEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdYDvlVpAPrNFZgJoSyPv1hi1TzMB8GA1UdIwQY
MBaAFMjTIr6342P01FdeHk/u5cy4ThJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEt
ZGMzNzY5ZThmNmExLzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lZjRkYjAtYjZjOS00N2FhLTg0YzEtZGMzNzY5ZThmNmEx
LzEveU5NaXZyZmpZX1RVVjE0ZVQtN2x6TGhPRW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwkqKH2f
269OukSqXepKVaowO42Ms6V9hfnky/YSpl2wpczhdDMySMlu07kvbkCqWv67V6M0
RzKvGy4bt7WhEXsHxBjBumKE55YONQhE+Q4QzxPca5sMA0Zi9zV1hq5/gwS0Vh+6
9izSdYIN1vqwceDDQiH1lOZgbM2nznZ6bfO8Y1Nti17heYSVUT/wQjeahIWTkRDg
u4aVMcpP/9uuufCLvhvSF9hD9shMFDsTR3/7OkWDA0oEoK/DOKFl/03bAK1LaJNr
QrYWX8rKcXMRbHkvaiNUjCFpeE2nBqZ6LemcCaH+Tt2e6eTUEeT21bsI3pf+R2WG
oNMxtHwyISz31Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:47 2025 by rpki-client