Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File:                     yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier:          P5FocOAXoqBvRvEOVUGL7xqwYIlfl23iZMvEg1JpoK8=
Subject key identifier:   FE:21:FD:FD:76:23:E8:68:66:1C:1B:C5:08:92:F7:D9:84:E3:F3:ED
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer:       /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial:       01988C57FA85E8F2E55D724B946A9BC34C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number:          11E5
Signing time:             Sat 09 Aug 2025 01:00:32 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:32 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:32 +0000
Files and hashes:         1: Dfh76wqLJFFyVrWGvNQ86Cd1ugg.roa (hash: cQ3NC144NOW+txHpDNWV4+CIEXIR87Btz3V4GE61yOA=)
                          2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: tyS/bLDjNxBKRQG3c+sKUr1JxSrv9wJCQmNDCf4hYfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:57:fa:85:e8:f2:e5:5d:72:4b:94:6a:9b:c3:4c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
        Validity
            Not Before: Aug  9 01:00:32 2025 GMT
            Not After : Aug 10 01:00:32 2025 GMT
        Subject: CN=fe21fdfd7623e868661c1bc50892f7d984e3f3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:c9:e9:12:9c:2c:3b:00:fe:69:20:ef:4c:
                    df:ea:ed:4a:40:2c:9d:7c:67:e6:5e:36:27:c4:18:
                    e1:b9:c9:83:75:68:ba:9b:2c:8d:f2:2c:f4:8e:2b:
                    4f:35:4c:ec:7c:30:4f:a2:41:44:b9:11:3e:25:bd:
                    b9:7d:86:f0:29:26:0e:9d:92:52:e0:75:43:bb:a8:
                    a0:b6:98:6d:ca:67:58:41:98:cc:6a:ee:42:7c:7e:
                    6a:d8:fe:bb:46:ae:a4:fb:08:28:ec:e2:a0:67:b4:
                    ac:58:be:52:50:d9:b1:64:b0:e6:b8:03:65:90:6f:
                    b4:e5:a1:af:1f:f5:8d:a1:ff:58:ca:af:3f:60:02:
                    4f:82:30:9b:b3:c6:a5:9b:c1:e6:57:c7:fe:e0:9b:
                    1e:42:be:a9:aa:c4:4d:8f:34:94:1b:8b:90:39:be:
                    77:3b:0f:14:03:5f:ce:8e:aa:a8:f1:8a:5a:11:b3:
                    74:1b:ca:31:6a:99:c8:99:4e:2c:30:22:f1:3a:2c:
                    dc:b5:9c:3f:8d:7d:a7:ce:de:29:7c:eb:28:31:6e:
                    b0:32:c7:25:31:69:7b:d9:e5:ac:69:5e:2f:df:8e:
                    a6:bf:fa:84:fe:75:6e:0c:32:1f:85:2a:ba:b4:6e:
                    30:38:3c:a2:e5:c0:e4:f7:8a:05:0e:7c:5b:6c:a0:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:21:FD:FD:76:23:E8:68:66:1C:1B:C5:08:92:F7:D9:84:E3:F3:ED
            X509v3 Authority Key Identifier:
                keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:b2:46:3d:96:f8:92:96:d9:a1:b7:95:ee:1a:34:b0:ed:
         4c:6f:47:74:7c:5f:30:dc:67:06:a9:ec:1d:03:5c:be:25:da:
         2c:cb:3a:61:35:5d:a1:13:38:aa:e3:8a:92:11:f5:2d:c9:46:
         22:ab:63:01:31:3b:3e:63:f3:9f:cd:20:84:1f:de:6f:74:fe:
         b5:ed:92:b3:3d:82:a3:21:db:18:b3:b2:04:23:e6:de:1b:8e:
         77:6f:87:38:f8:66:fb:58:7e:f3:41:c6:8b:12:4f:f4:5b:4c:
         f5:2a:e5:df:17:aa:b4:88:f5:23:ef:63:67:d7:47:fc:7a:88:
         eb:50:ff:57:91:46:00:e7:3d:e8:23:a7:09:09:b0:05:7c:cf:
         07:6c:aa:da:92:69:53:68:c3:17:f8:e7:89:0c:44:53:b9:cb:
         62:8e:37:bf:40:9e:24:9a:95:3d:ef:6a:ca:3e:42:e6:f5:42:
         93:74:8d:52:ea:a9:ce:b5:7a:ea:2a:82:40:37:4f:e9:0e:17:
         ec:ec:16:44:70:9e:d2:9f:b4:9a:bb:79:29:db:54:b0:d3:3b:
         b9:45:0c:de:b0:17:30:de:93:c3:93:35:32:3a:f1:17:02:4d:
         b4:6e:aa:48:c8:88:42:9b:30:3a:dc:83:75:7c:e1:bf:23:4b:
         b1:75:41:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMV/qF6PLlXXJLlGqbw0xRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YmViY2ZlODJiMjYyN2VhOGRlODE2MWNiOTI3YjI0NWIw
NThlNjkwHhcNMjUwODA5MDEwMDMyWhcNMjUwODEwMDEwMDMyWjAzMTEwLwYDVQQD
EyhmZTIxZmRmZDc2MjNlODY4NjYxYzFiYzUwODkyZjdkOTg0ZTNmM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1srJ6RKcLDsA/mkg70zf6u1KQCyd
fGfmXjYnxBjhucmDdWi6myyN8iz0jitPNUzsfDBPokFEuRE+Jb25fYbwKSYOnZJS
4HVDu6igtphtymdYQZjMau5CfH5q2P67Rq6k+wgo7OKgZ7SsWL5SUNmxZLDmuANl
kG+05aGvH/WNof9Yyq8/YAJPgjCbs8alm8HmV8f+4JseQr6pqsRNjzSUG4uQOb53
Ow8UA1/Ojqqo8YpaEbN0G8oxapnImU4sMCLxOizctZw/jX2nzt4pfOsoMW6wMscl
MWl72eWsaV4v346mv/qE/nVuDDIfhSq6tG4wODyi5cDk94oFDnxbbKAj3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4h/f12I+hoZhwbxQiS99mE4/PtMB8GA1UdIwQY
MBaAFMi+vP6CsmJ+qN6BYcuSeyRbBY5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgt
ZGVlZjdmMTUxZThlLzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYTE3YjMtZDU0ZS00Mjc5LWFkOTgtZGVlZjdmMTUxZThl
LzEveUw2OF9vS3lZbjZvM29GaHk1SjdKRnNGam1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROSyRj2W
+JKW2aG3le4aNLDtTG9HdHxfMNxnBqnsHQNcviXaLMs6YTVdoRM4quOKkhH1LclG
IqtjATE7PmPzn80ghB/eb3T+te2Ssz2CoyHbGLOyBCPm3huOd2+HOPhm+1h+80HG
ixJP9FtM9Srl3xeqtIj1I+9jZ9dH/HqI61D/V5FGAOc96COnCQmwBXzPB2yq2pJp
U2jDF/jniQxEU7nLYo43v0CeJJqVPe9qyj5C5vVCk3SNUuqpzrV66iqCQDdP6Q4X
7OwWRHCe0p+0mrt5KdtUsNM7uUUM3rAXMN6Tw5M1MjrxFwJNtG6qSMiIQpswOtyD
dXzhvyNLsXVBlg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:15 2025 by rpki-client