Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          ImaJWy5SwnxymJoxKsWfpRlh7b578Z+lS4hvtad8OIw=
Subject key identifier:   55:BB:EC:CB:7D:F0:58:EA:F0:1C:B6:0B:87:30:B7:69:0F:A6:A7:A4
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       01987CAE1C61FA8F6F611D2DD1C7BFFA986B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          067F
Signing time:             Wed 06 Aug 2025 00:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:41 +0000
Files and hashes:         1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=)
                          2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: bCSW0/J8v0WKqZNQ6pKrEvM0afWMgpH0dNt1c79vens=)
                          4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:1c:61:fa:8f:6f:61:1d:2d:d1:c7:bf:fa:98:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: Aug  6 00:00:41 2025 GMT
            Not After : Aug  7 00:00:41 2025 GMT
        Subject: CN=55bbeccb7df058eaf01cb60b8730b7690fa6a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:66:fc:23:89:16:e5:9d:26:48:a9:38:55:cd:
                    f9:cd:fe:69:da:79:8c:b0:0a:7e:33:02:31:8c:9c:
                    a6:04:62:5e:dc:96:4c:a2:43:04:44:01:3f:5f:ce:
                    8b:01:d5:93:05:18:2a:86:c8:03:43:6c:4e:e3:be:
                    3b:49:9e:72:f2:76:96:00:4b:7a:b8:6b:f5:00:11:
                    3e:3a:f6:25:ea:f1:28:d9:85:c1:80:d9:5e:39:7a:
                    78:da:c3:fa:5e:fd:fb:36:00:cb:43:24:54:d3:9b:
                    7a:74:22:78:03:21:be:2e:b7:04:21:be:28:cb:76:
                    15:65:3e:64:40:fd:ad:ad:e4:47:74:0d:b2:fd:5e:
                    73:59:ba:c1:3e:4e:5e:57:f2:96:5f:8d:8a:44:d4:
                    b9:0a:b0:ef:72:86:ae:5d:4a:47:3e:33:be:b8:cc:
                    00:88:bd:38:ea:d5:9d:52:71:07:cf:f4:a2:1f:b0:
                    22:79:2e:f9:b9:b2:0b:a9:8f:56:2b:ac:fb:8d:27:
                    ea:b0:ac:e8:47:3a:9f:41:ef:0a:6d:f3:02:c0:d3:
                    b0:b4:19:d2:19:7f:bc:63:d3:f6:da:6f:65:7e:ea:
                    37:41:62:7e:b1:a8:66:8c:18:27:9c:64:07:f5:55:
                    a4:fa:a2:98:73:ef:f1:ee:50:16:49:13:1f:9f:90:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BB:EC:CB:7D:F0:58:EA:F0:1C:B6:0B:87:30:B7:69:0F:A6:A7:A4
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:e0:a1:d3:12:1d:da:ac:fb:51:14:b2:66:b6:41:34:ec:
         3a:28:94:22:ae:13:60:88:da:fb:6d:ab:df:63:38:d9:24:67:
         4e:a2:4e:f7:96:90:15:7b:fc:bb:c5:11:d1:c2:2c:70:4f:93:
         17:68:b9:cd:94:3a:76:1b:94:96:15:99:e8:ce:74:b6:7c:9d:
         8d:39:00:7a:78:ea:9d:17:9f:a1:18:98:50:5a:8c:48:ff:9f:
         1d:b8:8d:ce:2b:bd:42:dc:cb:b0:ff:95:ca:53:6e:79:56:42:
         1b:46:ed:ff:a8:b4:fc:f4:6e:bb:b6:17:02:b4:4d:09:f0:cf:
         00:5a:93:38:1d:a6:ed:bd:9b:d9:7c:eb:5a:f7:f5:b7:9b:44:
         3f:10:25:9d:98:c3:e8:9b:af:fd:c6:2d:72:d0:86:23:75:ff:
         8f:6e:95:17:fd:39:83:6e:4b:9f:0a:0f:6b:5a:7f:19:64:7c:
         ae:20:39:7f:11:91:38:6a:62:64:79:d7:46:3b:21:59:8b:26:
         64:65:a9:6c:12:e3:18:86:82:d4:6d:d9:23:f2:8e:1b:47:33:
         34:34:64:45:39:f5:e7:20:4a:77:17:18:f9:44:5f:62:58:29:
         01:91:7a:8b:3a:e1:67:1f:63:9f:73:5f:9b:bc:c1:94:66:7a:
         3e:74:76:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rhxh+o9vYR0t0ce/+phrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzQ0ZGZmNzE4Nzk4NjNlYTcxNDQyMDIzYjdmMzU0ZGMz
ZGFkN2MwHhcNMjUwODA2MDAwMDQxWhcNMjUwODA3MDAwMDQxWjAzMTEwLwYDVQQD
Eyg1NWJiZWNjYjdkZjA1OGVhZjAxY2I2MGI4NzMwYjc2OTBmYTZhN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmb8I4kW5Z0mSKk4Vc35zf5p2nmM
sAp+MwIxjJymBGJe3JZMokMERAE/X86LAdWTBRgqhsgDQ2xO4747SZ5y8naWAEt6
uGv1ABE+OvYl6vEo2YXBgNleOXp42sP6Xv37NgDLQyRU05t6dCJ4AyG+LrcEIb4o
y3YVZT5kQP2treRHdA2y/V5zWbrBPk5eV/KWX42KRNS5CrDvcoauXUpHPjO+uMwA
iL046tWdUnEHz/SiH7AieS75ubILqY9WK6z7jSfqsKzoRzqfQe8KbfMCwNOwtBnS
GX+8Y9P22m9lfuo3QWJ+sahmjBgnnGQH9VWk+qKYc+/x7lAWSRMfn5DKHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFW77Mt98Fjq8By2C4cwt2kPpqekMB8GA1UdIwQY
MBaAFGDETf9xh5hj6nFEICO381TcPa18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWIt
YjJkNzM2Nzg3MjdiLzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWItYjJkNzM2Nzg3Mjdi
LzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA/godMS
Hdqs+1EUsma2QTTsOiiUIq4TYIja+22r32M42SRnTqJO95aQFXv8u8UR0cIscE+T
F2i5zZQ6dhuUlhWZ6M50tnydjTkAenjqnRefoRiYUFqMSP+fHbiNziu9QtzLsP+V
ylNueVZCG0bt/6i0/PRuu7YXArRNCfDPAFqTOB2m7b2b2XzrWvf1t5tEPxAlnZjD
6Juv/cYtctCGI3X/j26VF/05g25LnwoPa1p/GWR8riA5fxGROGpiZHnXRjshWYsm
ZGWpbBLjGIaC1G3ZI/KOG0czNDRkRTn15yBKdxcY+URfYlgpAZF6izrhZx9jn3Nf
m7zBlGZ6PnR2Pg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:15:13 2025 by rpki-client