Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File:                     yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier:          byLtDnjazANVUkFi5toFw+hXouKXj4Ofrnj+642QfnI=
Subject key identifier:   74:26:C8:B5:F4:D7:B2:4D:D3:AA:95:FE:A6:E5:79:6F:B4:01:F7:63
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer:       /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial:       01976F99FCD09E0268A9135B41D8A9BE03B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number:          01FD
Signing time:             Sat 14 Jun 2025 18:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:52 +0000
Files and hashes:         1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
                          2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
                          3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
                          4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: Tsq3sGxYtliWnlVP3+E/8CVKkt2hqf46FU/L6L7LpYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:fc:d0:9e:02:68:a9:13:5b:41:d8:a9:be:03:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
        Validity
            Not Before: Jun 14 18:00:52 2025 GMT
            Not After : Jun 15 18:00:52 2025 GMT
        Subject: CN=7426c8b5f4d7b24dd3aa95fea6e5796fb401f763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:09:60:33:8a:77:79:13:b5:37:77:57:f7:ed:
                    07:77:c1:79:f9:fb:55:85:a7:f9:d8:dc:e2:bf:78:
                    35:45:80:d7:2d:9a:4d:fe:14:d9:86:28:d9:fa:2d:
                    da:2f:99:2a:d5:d7:48:2a:f4:81:ed:2e:b1:90:0f:
                    a5:5c:1d:b1:af:81:8e:4f:59:bb:b6:e8:1f:1b:64:
                    99:33:d9:e7:06:c6:a5:4d:bd:8e:4e:04:1e:a4:ce:
                    0e:5e:bf:7a:62:73:e3:63:db:bb:6c:99:b0:fc:18:
                    0f:a0:33:04:fd:34:0f:db:0d:ff:c2:91:45:f2:db:
                    96:2e:12:32:21:da:80:cf:ca:04:a8:3f:50:38:64:
                    15:c0:94:8a:5e:6d:b3:36:dd:58:95:06:ac:a7:0d:
                    89:33:2b:a0:2e:8c:4d:09:d3:03:6f:28:df:fb:3f:
                    0a:7b:fd:9a:62:c3:40:84:af:d2:58:6e:ed:c1:b3:
                    df:ae:9c:03:9d:45:5e:88:b9:ee:ab:99:1d:6f:1b:
                    69:cc:61:08:0c:9b:9f:9c:4e:fc:27:99:96:b4:b8:
                    5a:9c:ba:63:91:51:b7:f3:46:09:d2:e7:2f:04:0c:
                    81:07:d1:bd:48:7b:39:f5:f1:c1:14:2b:cb:7d:43:
                    4f:70:81:8d:a4:62:d7:cb:d7:e9:81:38:b5:39:7b:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:C8:B5:F4:D7:B2:4D:D3:AA:95:FE:A6:E5:79:6F:B4:01:F7:63
            X509v3 Authority Key Identifier:
                keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:9a:4b:2c:95:fd:3f:41:b7:e1:cf:0c:21:0c:72:4d:0a:da:
         e1:c2:9b:43:17:70:46:88:bb:6f:71:b2:90:66:bd:a2:e2:4c:
         58:6c:ed:1c:1e:6b:93:d7:a1:8c:5d:5e:55:ae:2e:50:f1:43:
         15:72:0e:28:16:14:70:5a:97:67:3b:6f:f2:d8:32:f4:25:9a:
         7b:8e:2f:9b:e1:fc:de:82:29:63:28:d8:80:4d:91:2d:fe:ee:
         82:a3:15:f5:ca:ff:37:04:95:e0:33:62:e3:a7:82:fb:77:66:
         58:ee:0f:df:bb:8f:8a:51:98:9f:15:57:f7:9b:10:e4:47:96:
         ce:53:56:44:fe:5f:fa:fe:70:c6:ef:ac:1f:4e:56:90:c5:de:
         1f:dc:e7:e1:70:d7:59:64:4a:ca:04:5f:82:24:47:53:8d:b8:
         0b:49:2d:c0:5b:b8:d0:71:d0:3f:eb:0f:04:da:0d:a5:87:8c:
         fe:8f:40:fd:32:21:df:b2:e7:ca:fb:c3:5c:cc:f0:e9:b7:da:
         4a:13:82:e4:8d:36:16:b7:3a:88:30:42:24:01:91:71:67:f0:
         1b:ab:36:a8:8a:96:09:e5:db:99:a8:c5:f7:cf:b6:9e:5b:1e:
         14:ad:84:3d:52:2e:87:ae:56:9e:1c:73:d9:65:eb:c3:2d:6a:
         b5:d2:51:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmfzQngJoqRNbQdipvgOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjUwNjE0MTgwMDUyWhcNMjUwNjE1MTgwMDUyWjAzMTEwLwYDVQQD
Eyg3NDI2YzhiNWY0ZDdiMjRkZDNhYTk1ZmVhNmU1Nzk2ZmI0MDFmNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwlgM4p3eRO1N3dX9+0Hd8F5+ftV
haf52Nziv3g1RYDXLZpN/hTZhijZ+i3aL5kq1ddIKvSB7S6xkA+lXB2xr4GOT1m7
tugfG2SZM9nnBsalTb2OTgQepM4OXr96YnPjY9u7bJmw/BgPoDME/TQP2w3/wpFF
8tuWLhIyIdqAz8oEqD9QOGQVwJSKXm2zNt1YlQaspw2JMyugLoxNCdMDbyjf+z8K
e/2aYsNAhK/SWG7twbPfrpwDnUVeiLnuq5kdbxtpzGEIDJufnE78J5mWtLhanLpj
kVG380YJ0ucvBAyBB9G9SHs59fHBFCvLfUNPcIGNpGLXy9fpgTi1OXsrPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQmyLX017JN06qV/qbleW+0AfdjMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ZpLLJX9
P0G34c8MIQxyTQra4cKbQxdwRoi7b3GykGa9ouJMWGztHB5rk9ehjF1eVa4uUPFD
FXIOKBYUcFqXZztv8tgy9CWae44vm+H83oIpYyjYgE2RLf7ugqMV9cr/NwSV4DNi
46eC+3dmWO4P37uPilGYnxVX95sQ5EeWzlNWRP5f+v5wxu+sH05WkMXeH9zn4XDX
WWRKygRfgiRHU424C0ktwFu40HHQP+sPBNoNpYeM/o9A/TIh37LnyvvDXMzw6bfa
ShOC5I02Frc6iDBCJAGRcWfwG6s2qIqWCeXbmajF98+2nlseFK2EPVIuh65Wnhxz
2WXrwy1qtdJRSA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:54:18 2025 by rpki-client