Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File:                     yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier:          PxNPOr7R6iEahgJ1cmz3ZWTHY8Qp1nSHmfaK7wkMRpM=
Subject key identifier:   7D:82:F4:9B:EC:CB:2B:6C:2F:6A:72:8D:5A:C3:24:66:52:D0:69:EA
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer:       /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial:       01976DE29372520C6D9979F4B8DCFD169BE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number:          11C4
Signing time:             Sat 14 Jun 2025 10:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 10:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 10:00:54 +0000
Files and hashes:         1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
                          2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: MTMsrFBwqh/cxukUEHc2wwhOLp7f1vf/fijt464rKWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e2:93:72:52:0c:6d:99:79:f4:b8:dc:fd:16:9b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
        Validity
            Not Before: Jun 14 10:00:54 2025 GMT
            Not After : Jun 15 10:00:54 2025 GMT
        Subject: CN=7d82f49beccb2b6c2f6a728d5ac3246652d069ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:b4:18:8d:93:2d:38:d8:0d:99:d7:e9:40:
                    c1:54:68:66:98:60:20:5a:ca:32:97:bf:12:e7:e8:
                    ff:2d:e5:7f:6b:34:7f:9f:62:e2:85:64:79:4c:03:
                    9c:99:8c:77:ef:04:9a:f2:6b:7d:60:40:10:ae:50:
                    b1:8b:15:ca:3c:d4:2f:04:c1:ca:0b:63:61:16:e7:
                    ca:15:da:ac:2b:87:e9:4c:ef:94:2a:09:87:4b:ed:
                    00:67:d1:99:32:37:e6:11:5f:7d:bc:82:8e:85:90:
                    54:c5:ea:61:ca:34:cf:c9:6a:e5:72:bb:08:83:ed:
                    7c:b5:82:e3:c3:c7:a5:12:48:67:c7:20:a1:1c:bd:
                    51:51:7b:37:8b:e9:4c:e8:7d:bd:96:c1:c6:9c:97:
                    69:32:8b:e5:4b:fe:58:12:d7:77:2d:f2:72:13:9c:
                    2d:d2:37:6b:28:17:17:68:bc:8c:bf:9b:a4:ff:bf:
                    71:cb:22:07:3b:7e:91:eb:5e:45:83:31:89:df:1e:
                    8f:76:cb:2b:cb:ec:bc:36:d8:3c:96:cc:99:25:d9:
                    d1:66:a9:d3:71:99:38:9d:65:7e:fd:71:26:d0:20:
                    0e:b3:3b:07:b4:5a:61:29:dd:52:8f:6f:56:cf:c5:
                    f0:5c:13:cc:93:25:c3:4f:1a:f1:5e:4a:e4:11:3e:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:F4:9B:EC:CB:2B:6C:2F:6A:72:8D:5A:C3:24:66:52:D0:69:EA
            X509v3 Authority Key Identifier:
                keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:76:13:77:9b:02:ed:35:62:6e:53:e6:7c:ce:8e:09:4e:
         70:36:1e:80:02:53:ab:6d:2b:f0:b2:a8:80:b6:e4:1e:15:ef:
         87:dc:ec:88:fb:ba:b0:7e:7d:87:26:af:d4:00:3b:67:1d:4b:
         bf:c5:5e:be:39:de:82:c2:51:fc:10:92:46:d0:0b:bb:7a:5b:
         0e:aa:37:f0:0f:b2:ec:a4:53:7a:3e:0a:d0:1d:b2:30:a8:ab:
         b3:dc:0a:6b:97:0a:bc:af:02:83:93:90:6c:eb:83:f4:b1:de:
         0b:4a:25:da:cd:78:7b:49:0d:2d:17:eb:eb:15:92:b0:d0:ec:
         87:04:99:5c:02:ee:7b:29:28:03:3e:a4:40:99:dc:3c:c4:1c:
         fe:f9:55:b9:01:12:49:fb:90:8e:56:fb:ec:d2:60:bd:78:36:
         dc:de:a6:64:f9:d5:cd:3c:7a:b6:8d:d3:ee:2e:52:5c:91:d5:
         12:70:36:c3:e7:1f:69:81:d0:b9:56:3c:23:9b:18:2c:f5:20:
         27:d9:90:cb:37:28:79:b0:4e:17:07:91:14:fb:61:74:a0:ce:
         5b:28:cd:66:17:e7:77:1a:dd:2c:87:99:a0:ab:5c:48:78:9b:
         b5:fc:7d:fd:03:12:28:65:0d:28:40:68:a8:fc:2e:23:fe:e0:
         0b:a5:62:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4pNyUgxtmXn0uNz9FpvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZTkwYjE3MmY4OGJlMjFiYjk5ZDU3M2ZkNzViMjdmNWJm
NzQ1YzIwHhcNMjUwNjE0MTAwMDU0WhcNMjUwNjE1MTAwMDU0WjAzMTEwLwYDVQQD
Eyg3ZDgyZjQ5YmVjY2IyYjZjMmY2YTcyOGQ1YWMzMjQ2NjUyZDA2OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQi0GI2TLTjYDZnX6UDBVGhmmGAg
Wsoyl78S5+j/LeV/azR/n2LihWR5TAOcmYx37wSa8mt9YEAQrlCxixXKPNQvBMHK
C2NhFufKFdqsK4fpTO+UKgmHS+0AZ9GZMjfmEV99vIKOhZBUxephyjTPyWrlcrsI
g+18tYLjw8elEkhnxyChHL1RUXs3i+lM6H29lsHGnJdpMovlS/5YEtd3LfJyE5wt
0jdrKBcXaLyMv5uk/79xyyIHO36R615FgzGJ3x6Pdssry+y8Ntg8lsyZJdnRZqnT
cZk4nWV+/XEm0CAOszsHtFphKd1Sj29Wz8XwXBPMkyXDTxrxXkrkET5eCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2C9JvsyytsL2pyjVrDJGZS0GnqMB8GA1UdIwQY
MBaAFMjpCxcviL4hu5nVc/11sn9b90XCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUt
NTZjNWQ3NmRkY2Q4LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wOGM0YTctNGQyYS00ZDFjLThiOGUtNTZjNWQ3NmRkY2Q4
LzEveU9rTEZ5LUl2aUc3bWRWel9YV3lmMXYzUmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNh2E3eb
Au01Ym5T5nzOjglOcDYegAJTq20r8LKogLbkHhXvh9zsiPu6sH59hyav1AA7Zx1L
v8VevjnegsJR/BCSRtALu3pbDqo38A+y7KRTej4K0B2yMKirs9wKa5cKvK8Cg5OQ
bOuD9LHeC0ol2s14e0kNLRfr6xWSsNDshwSZXALueykoAz6kQJncPMQc/vlVuQES
SfuQjlb77NJgvXg23N6mZPnVzTx6to3T7i5SXJHVEnA2w+cfaYHQuVY8I5sYLPUg
J9mQyzcoebBOFweRFPthdKDOWyjNZhfndxrdLIeZoKtcSHibtfx9/QMSKGUNKEBo
qPwuI/7gC6ViDA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:27 2025 by rpki-client