Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
File:                     my2tSBy6VIO6qw16DM3BregyrRY.mft (raw, json)
Hash identifier:          oKRFnNKCiV1RWjfsd9A8owfh8Nkfl5g3JeqdNlv+sUY=
Subject key identifier:   EF:81:08:50:AB:14:BF:F5:5C:2E:D0:CE:C6:FE:31:77:63:F3:C7:E0
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Certificate issuer:       /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial:       019874193AC309B79B53BF1068254C7F1381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
Manifest number:          07B2
Signing time:             Mon 04 Aug 2025 08:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:06 +0000
Files and hashes:         1: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (hash: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=)
                          2: my2tSBy6VIO6qw16DM3BregyrRY.crl (hash: hW9JrseL54nbKwzo0O9qldUZ5yYuvLY1z+0mP3U4IDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:3a:c3:09:b7:9b:53:bf:10:68:25:4c:7f:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
        Validity
            Not Before: Aug  4 08:01:06 2025 GMT
            Not After : Aug  5 08:01:06 2025 GMT
        Subject: CN=ef810850ab14bff55c2ed0cec6fe317763f3c7e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:2d:71:79:a2:55:da:15:d4:06:35:81:d1:
                    78:ee:ad:da:b4:5c:ae:94:d4:42:94:79:18:fe:18:
                    e2:5c:6e:bf:ff:7c:36:a2:d0:2f:99:a9:a0:ac:79:
                    cd:fc:a5:f4:8d:43:15:1a:68:3a:e3:9a:94:82:3e:
                    b8:ce:04:89:a1:39:8c:b7:d1:7e:06:32:86:89:ec:
                    bb:02:e9:26:a7:db:ec:86:77:c0:36:dd:00:ca:d5:
                    8a:47:71:25:cb:24:b7:88:57:01:28:4e:cb:e2:94:
                    fb:ad:ae:7e:31:80:1b:55:3c:ff:2f:58:9a:da:0e:
                    e5:e6:c5:05:4a:e3:72:c6:c9:d6:a2:a4:2b:2a:64:
                    ba:66:bb:9d:bd:55:b7:87:16:2c:23:2f:8d:c7:33:
                    50:fa:c2:eb:f3:ae:a2:bf:84:b8:75:d2:70:ef:e1:
                    5e:7a:49:1a:4c:1c:bb:66:e0:04:16:d9:e7:10:83:
                    e4:20:d8:08:66:f2:54:ee:23:0f:be:15:8d:aa:83:
                    53:b9:b8:25:54:33:a1:c2:24:4b:e7:7a:46:03:61:
                    10:21:5c:33:00:b5:93:25:b5:a7:0f:bc:88:c9:f0:
                    ab:34:12:2c:08:f8:6b:dd:0e:fc:80:c5:58:54:e7:
                    fa:0d:3d:81:9d:4f:71:8c:f2:5e:7e:08:9b:8e:5d:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:81:08:50:AB:14:BF:F5:5C:2E:D0:CE:C6:FE:31:77:63:F3:C7:E0
            X509v3 Authority Key Identifier:
                keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:b4:99:10:68:59:3e:69:3f:56:1a:6b:9f:fe:fc:3f:15:
         c8:ea:80:35:f9:0f:2e:b3:39:49:ab:91:f6:2a:63:ce:54:bc:
         82:72:be:fd:3c:d3:d3:00:80:d1:1f:33:60:4c:39:b2:58:df:
         4f:d9:48:01:96:3f:79:af:2a:12:10:f8:b7:0f:20:88:f7:e0:
         d7:2c:49:0c:bf:f9:17:1a:7e:a5:c1:67:ad:37:d9:8a:94:28:
         6f:9f:b3:cc:2c:a3:e5:43:f8:40:ca:06:fd:fb:b0:5a:a4:51:
         6a:ae:10:aa:5a:0d:f8:e0:2a:b0:40:4f:d4:6f:21:83:7e:55:
         df:9f:b5:ad:66:76:e0:62:f3:b4:5b:0b:6c:32:82:67:9d:8c:
         1c:73:05:c6:27:6b:52:08:82:37:db:94:10:e0:65:3c:12:02:
         bb:88:c7:47:3c:23:ea:ca:17:98:77:41:ab:0b:83:f2:21:c6:
         29:1c:7e:c6:f5:94:ab:9f:32:72:ea:5f:ca:2b:71:07:eb:10:
         e6:c5:ea:db:77:75:4b:4a:ff:c1:03:0d:2e:70:c8:7d:c9:13:
         8c:1b:c3:13:fc:fe:52:9e:4c:27:bb:e4:53:e0:70:e4:f6:9f:
         63:fc:cf:c0:6d:b2:06:e3:61:9f:a1:75:47:85:ed:fa:f1:84:
         ee:0d:44:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GTrDCbebU78QaCVMfxOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmRhZDQ4MWNiYTU0ODNiYWFiMGQ3YTBjY2RjMWFkZTgz
MmFkMTYwHhcNMjUwODA0MDgwMTA2WhcNMjUwODA1MDgwMTA2WjAzMTEwLwYDVQQD
EyhlZjgxMDg1MGFiMTRiZmY1NWMyZWQwY2VjNmZlMzE3NzYzZjNjN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNUtcXmiVdoV1AY1gdF47q3atFyu
lNRClHkY/hjiXG6//3w2otAvmamgrHnN/KX0jUMVGmg645qUgj64zgSJoTmMt9F+
BjKGiey7Aukmp9vshnfANt0AytWKR3ElyyS3iFcBKE7L4pT7ra5+MYAbVTz/L1ia
2g7l5sUFSuNyxsnWoqQrKmS6ZrudvVW3hxYsIy+NxzNQ+sLr866iv4S4ddJw7+Fe
ekkaTBy7ZuAEFtnnEIPkINgIZvJU7iMPvhWNqoNTubglVDOhwiRL53pGA2EQIVwz
ALWTJbWnD7yIyfCrNBIsCPhr3Q78gMVYVOf6DT2BnU9xjPJefgibjl3UtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+BCFCrFL/1XC7Qzsb+MXdj88fgMB8GA1UdIwQY
MBaAFJstrUgculSDuqsNegzNwa3oMq0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMt
ODVhMmFlYjA3OThkLzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMtODVhMmFlYjA3OThk
LzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeO0mRBo
WT5pP1Yaa5/+/D8VyOqANfkPLrM5SauR9ipjzlS8gnK+/TzT0wCA0R8zYEw5sljf
T9lIAZY/ea8qEhD4tw8giPfg1yxJDL/5Fxp+pcFnrTfZipQob5+zzCyj5UP4QMoG
/fuwWqRRaq4QqloN+OAqsEBP1G8hg35V35+1rWZ24GLztFsLbDKCZ52MHHMFxidr
UgiCN9uUEOBlPBICu4jHRzwj6soXmHdBqwuD8iHGKRx+xvWUq58ycupfyitxB+sQ
5sXq23d1S0r/wQMNLnDIfckTjBvDE/z+Up5MJ7vkU+Bw5PafY/zPwG2yBuNhn6F1
R4Xt+vGE7g1EBg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:44 2025 by rpki-client