Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File:                     nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier:          v54PreQvMSDsZOGrhZrnkBpDDJxaU7+DWq8fVCiT518=
Subject key identifier:   D9:30:4B:32:65:E4:A9:16:A3:05:DE:E1:66:87:40:98:D3:43:64:A9
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer:       /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial:       0198925A01542BA1751D73A27826E6C8738B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number:          1517
Signing time:             Sun 10 Aug 2025 05:00:28 +0000
Manifest this update:     Sun 10 Aug 2025 05:00:28 +0000
Manifest next update:     Mon 11 Aug 2025 05:00:28 +0000
Files and hashes:         1: KpbjIIUZw0-XxCl1KqQDZ_EUKkY.roa (hash: KJWoFU4L0w8L8ZUG5csCrTHWK3udD7xALiAnkocVeD0=)
                          2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: y3NX4AmujjhTcaAsORiCOoZ76yQkHGgv3D7PiNKKBwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:5a:01:54:2b:a1:75:1d:73:a2:78:26:e6:c8:73:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
        Validity
            Not Before: Aug 10 05:00:28 2025 GMT
            Not After : Aug 11 05:00:28 2025 GMT
        Subject: CN=d9304b3265e4a916a305dee166874098d34364a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:2d:3b:2a:2c:a6:4b:7c:b6:d3:34:8d:10:
                    b0:72:08:c6:5a:9c:47:30:25:99:42:8f:be:0a:8b:
                    11:a2:fe:97:55:09:74:3c:0a:55:03:bd:b7:fc:6e:
                    7e:48:61:3f:59:a6:c7:23:2a:01:57:ba:de:01:8a:
                    02:6e:4a:43:0f:c0:81:6d:04:e7:a9:7b:3e:e4:f0:
                    84:c7:ec:ea:d5:8d:31:b3:f0:65:6a:f2:a5:a4:a0:
                    48:60:f1:59:b2:79:3c:17:9d:ed:95:af:5c:97:4d:
                    58:22:ef:d3:bc:8a:f9:c1:5e:55:f1:94:34:93:32:
                    14:cc:ff:23:fb:1a:4a:02:3a:9f:52:cb:a2:bf:ec:
                    02:6f:b0:94:3e:29:fe:74:30:5d:49:72:99:1b:e3:
                    34:5b:85:db:74:28:e1:6e:a8:9c:a3:69:91:f0:d9:
                    9d:18:c8:87:34:de:67:55:55:19:a3:9f:38:36:6f:
                    3c:c5:4a:43:82:9a:2d:ee:8c:0c:80:98:ed:a3:5a:
                    76:5e:6e:b7:41:09:bd:2a:fc:6e:cd:ca:e8:86:eb:
                    f8:b2:5f:fc:f0:79:9a:87:60:c7:8a:6e:6b:23:50:
                    a7:7f:45:31:0a:b4:cf:d3:0f:63:d8:ca:1b:6c:45:
                    29:61:05:97:68:f7:ba:27:f2:d3:d9:0c:5d:0b:8a:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:30:4B:32:65:E4:A9:16:A3:05:DE:E1:66:87:40:98:D3:43:64:A9
            X509v3 Authority Key Identifier:
                keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:b4:6b:dd:67:85:74:4b:8a:75:eb:e8:a0:3f:98:72:93:
         1c:21:28:66:c6:ba:66:e3:d1:9b:aa:69:33:61:ba:17:33:3c:
         6e:cc:d5:92:19:fb:45:75:fc:59:2c:1c:a5:11:98:81:18:b9:
         4d:a0:d7:53:b2:40:1b:c9:4f:61:fa:5d:19:34:5e:56:aa:31:
         8c:4c:0a:3c:00:33:bd:0c:47:a1:0b:48:fb:f9:b2:b9:bf:89:
         7b:15:45:4f:d0:0e:12:1e:0f:43:ec:06:9e:06:c2:6b:4b:cc:
         d3:9f:b8:ed:e9:c7:98:53:bf:5a:fe:d4:64:dc:3f:db:6a:e7:
         c3:0a:cd:18:fc:1b:e3:64:9e:6f:86:13:0a:55:cc:08:42:93:
         3d:d0:b0:d3:8b:4f:38:4e:5c:ac:c0:62:df:fb:1b:2c:bd:f6:
         3b:4a:8e:f5:fa:1b:60:6d:ae:e8:1e:93:20:fb:9f:90:37:52:
         32:2c:cb:2d:98:1a:62:b0:f1:dc:4e:0c:3d:f8:c7:45:d0:74:
         e5:9e:c2:bf:d1:12:dd:af:f5:46:5d:13:2d:be:19:a5:97:24:
         46:b4:c3:91:1f:eb:13:28:57:04:6a:e4:ff:f2:84:78:1b:75:
         5e:fd:2c:59:8f:c2:e4:de:f5:75:39:3b:07:36:49:b1:f2:c8:
         05:5b:12:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSWgFUK6F1HXOieCbmyHOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3
MzNlYTQwHhcNMjUwODEwMDUwMDI4WhcNMjUwODExMDUwMDI4WjAzMTEwLwYDVQQD
EyhkOTMwNGIzMjY1ZTRhOTE2YTMwNWRlZTE2Njg3NDA5OGQzNDM2NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZAtOyospkt8ttM0jRCwcgjGWpxH
MCWZQo++CosRov6XVQl0PApVA723/G5+SGE/WabHIyoBV7reAYoCbkpDD8CBbQTn
qXs+5PCEx+zq1Y0xs/BlavKlpKBIYPFZsnk8F53tla9cl01YIu/TvIr5wV5V8ZQ0
kzIUzP8j+xpKAjqfUsuiv+wCb7CUPin+dDBdSXKZG+M0W4XbdCjhbqico2mR8Nmd
GMiHNN5nVVUZo584Nm88xUpDgpot7owMgJjto1p2Xm63QQm9Kvxuzcrohuv4sl/8
8Hmah2DHim5rI1Cnf0UxCrTP0w9j2MobbEUpYQWXaPe6J/LT2QxdC4rdNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkwSzJl5KkWowXe4WaHQJjTQ2SpMB8GA1UdIwQY
MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt
ZWQ0YTEzOGM0MTEzLzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz
LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr+0a91n
hXRLinXr6KA/mHKTHCEoZsa6ZuPRm6ppM2G6FzM8bszVkhn7RXX8WSwcpRGYgRi5
TaDXU7JAG8lPYfpdGTReVqoxjEwKPAAzvQxHoQtI+/myub+JexVFT9AOEh4PQ+wG
ngbCa0vM05+47enHmFO/Wv7UZNw/22rnwwrNGPwb42Seb4YTClXMCEKTPdCw04tP
OE5crMBi3/sbLL32O0qO9fobYG2u6B6TIPufkDdSMizLLZgaYrDx3E4MPfjHRdB0
5Z7Cv9ES3a/1Rl0TLb4ZpZckRrTDkR/rEyhXBGrk//KEeBt1Xv0sWY/C5N71dTk7
BzZJsfLIBVsSAA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:23 2025 by rpki-client