Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          /jmsTFd3LCeRz0WzV2xv0o7CuneZiQVs3WEWddt40CE=
Subject key identifier:   38:C3:CD:B4:C4:BB:06:5B:D2:71:4D:73:7D:E3:F1:90:89:5A:29:7D
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       019875D175BD0BE2C69CE1D67C7001391336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          0F81
Signing time:             Mon 04 Aug 2025 16:01:58 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:58 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:58 +0000
Files and hashes:         1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
                          2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
                          3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: HvdwPD61QFbtiqWL0QouO8BIxC2wkhuqaVMS6ef1mjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:75:bd:0b:e2:c6:9c:e1:d6:7c:70:01:39:13:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Aug  4 16:01:58 2025 GMT
            Not After : Aug  5 16:01:58 2025 GMT
        Subject: CN=38c3cdb4c4bb065bd2714d737de3f190895a297d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:91:03:b0:4c:a4:79:70:e7:cc:7a:40:2b:27:
                    f6:31:5d:db:62:f6:00:2f:a1:e3:89:9f:02:a2:b6:
                    22:87:77:58:fc:ee:a2:40:96:63:ea:6d:23:56:32:
                    e0:2a:32:ae:cd:61:38:83:f0:fa:5f:d9:9f:1f:df:
                    d7:2b:56:2f:1c:6c:3a:87:5f:93:76:48:a0:8b:11:
                    eb:16:fa:e0:ac:fd:96:cd:50:03:a7:84:3a:0f:30:
                    94:79:74:44:b4:b1:87:16:52:e5:65:6c:f1:62:c3:
                    a9:57:d4:ed:df:16:c6:6e:c8:ce:6b:aa:93:5c:f9:
                    87:64:1d:1b:39:59:1c:26:b3:03:35:39:3f:7b:e1:
                    dd:e6:55:bf:11:15:76:6d:37:e8:a3:c4:74:4c:ae:
                    94:38:52:f3:49:f8:72:ce:2a:0c:49:f8:bb:8d:72:
                    14:15:45:18:4d:6b:de:43:91:c5:87:9d:fc:49:f2:
                    a2:36:73:34:5e:f3:2b:c8:88:9d:df:84:a5:32:31:
                    ba:2d:ee:64:30:aa:08:93:87:e9:84:eb:3c:f9:90:
                    d3:b4:d0:3f:a1:c1:a8:03:01:0d:3e:88:3a:fb:79:
                    40:ec:1f:22:8d:b8:ef:5b:3e:b9:37:61:1a:c1:46:
                    18:54:1a:60:74:a8:58:88:f7:b7:ce:13:06:e1:a9:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C3:CD:B4:C4:BB:06:5B:D2:71:4D:73:7D:E3:F1:90:89:5A:29:7D
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:a5:e9:79:b0:64:81:23:53:5c:f4:e5:da:23:88:34:bb:
         ad:a7:c3:6c:d9:88:72:64:0c:0d:07:00:3f:94:8e:9b:5b:f5:
         15:26:33:b6:25:fa:db:6a:39:1c:95:1f:de:11:ee:02:aa:ac:
         f3:a2:c9:b4:8b:20:47:b1:b0:f5:a9:0e:5b:0b:17:a0:e2:ab:
         17:b0:8f:ac:63:6c:7f:33:c2:65:70:b3:7f:c5:57:26:5e:e4:
         8c:cf:6c:2e:b4:8b:50:cf:c0:d0:cd:d1:b6:d4:38:2c:7b:58:
         8f:a0:6b:54:71:12:57:e5:48:1a:4f:e7:84:83:35:88:9a:17:
         36:32:85:55:fe:aa:f7:3b:fb:b1:1d:c0:53:fa:12:db:9f:47:
         33:33:de:f5:6c:10:0f:9b:ac:df:56:3a:45:11:e9:4f:2c:ae:
         6e:0f:3a:0d:4d:4b:d1:9a:fd:49:cf:b7:69:7c:61:28:3a:d9:
         d0:dd:cf:1e:af:af:67:4b:29:45:77:6a:29:76:ad:98:98:ce:
         aa:b1:f1:e4:20:8d:b8:f1:fd:55:a8:d2:21:c7:77:fd:19:71:
         ca:fd:04:f7:36:81:6b:f4:30:c9:f5:31:21:19:c9:9a:be:30:
         ca:46:07:08:de:81:c3:7a:4d:82:fd:bf:3a:e7:9f:de:d6:dd:
         84:b7:b3:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10XW9C+LGnOHWfHABORM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjUwODA0MTYwMTU4WhcNMjUwODA1MTYwMTU4WjAzMTEwLwYDVQQD
EygzOGMzY2RiNGM0YmIwNjViZDI3MTRkNzM3ZGUzZjE5MDg5NWEyOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JEDsEykeXDnzHpAKyf2MV3bYvYA
L6HjiZ8CorYih3dY/O6iQJZj6m0jVjLgKjKuzWE4g/D6X9mfH9/XK1YvHGw6h1+T
dkigixHrFvrgrP2WzVADp4Q6DzCUeXREtLGHFlLlZWzxYsOpV9Tt3xbGbsjOa6qT
XPmHZB0bOVkcJrMDNTk/e+Hd5lW/ERV2bTfoo8R0TK6UOFLzSfhyzioMSfi7jXIU
FUUYTWveQ5HFh538SfKiNnM0XvMryIid34SlMjG6Le5kMKoIk4fphOs8+ZDTtNA/
ocGoAwENPog6+3lA7B8ijbjvWz65N2EawUYYVBpgdKhYiPe3zhMG4am6jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjDzbTEuwZb0nFNc33j8ZCJWil9MB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsCl6Xmw
ZIEjU1z05dojiDS7rafDbNmIcmQMDQcAP5SOm1v1FSYztiX622o5HJUf3hHuAqqs
86LJtIsgR7Gw9akOWwsXoOKrF7CPrGNsfzPCZXCzf8VXJl7kjM9sLrSLUM/A0M3R
ttQ4LHtYj6BrVHESV+VIGk/nhIM1iJoXNjKFVf6q9zv7sR3AU/oS259HMzPe9WwQ
D5us31Y6RRHpTyyubg86DU1L0Zr9Sc+3aXxhKDrZ0N3PHq+vZ0spRXdqKXatmJjO
qrHx5CCNuPH9VajSIcd3/Rlxyv0E9zaBa/QwyfUxIRnJmr4wykYHCN6Bw3pNgv2/
Ouef3tbdhLezDg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:52 2025 by rpki-client