Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File:                     SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier:          0iuCBjypo4PBgFBdtSyLsTJyJ4Erusa/oCwSJTG+yJk=
Subject key identifier:   93:24:07:86:DE:D1:61:87:69:94:FD:AB:57:74:8C:44:2D:F2:F0:A2
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer:       /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial:       019873E2EC2E3877E9BF9CF37C4A6ADB942E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number:          0D88
Signing time:             Mon 04 Aug 2025 07:01:48 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:48 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:48 +0000
Files and hashes:         1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
                          2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: A/u3EwK/3Cphxg5W0uCpFJY7rkJiSzlRj32b5eQWncY=)
                          3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:ec:2e:38:77:e9:bf:9c:f3:7c:4a:6a:db:94:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
        Validity
            Not Before: Aug  4 07:01:48 2025 GMT
            Not After : Aug  5 07:01:48 2025 GMT
        Subject: CN=93240786ded161876994fdab57748c442df2f0a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:f2:d6:b3:87:36:7b:00:27:06:84:82:4b:
                    a5:aa:41:94:26:02:6b:5c:dd:ad:58:9f:3a:60:16:
                    19:2d:28:e4:c2:27:28:7e:d5:2a:e9:84:23:98:d8:
                    8e:90:87:cd:55:56:af:69:ae:0d:15:df:85:dc:88:
                    ab:63:d4:67:63:c6:f5:61:a6:f7:59:40:49:11:d0:
                    17:ac:ad:d5:d4:2b:96:ef:b9:04:39:3f:bc:58:7c:
                    ce:d7:e8:1b:fd:b5:07:c2:bc:f7:fa:da:ce:ba:77:
                    da:23:a0:e4:84:28:d4:fb:d6:34:57:ca:9f:78:76:
                    67:09:b2:3a:c4:43:f4:e8:48:46:d9:4d:f4:cd:ce:
                    dd:df:46:d1:ef:16:4d:28:13:02:fd:a2:a6:71:52:
                    50:da:2a:eb:b2:20:d0:3c:57:72:9a:5d:3b:29:9f:
                    95:77:d6:6e:1b:26:4e:01:c1:38:15:65:7f:7c:b1:
                    a3:7f:ec:a8:f0:7c:0a:56:aa:11:c8:24:fb:66:db:
                    94:49:eb:4f:fd:5a:e6:e5:91:61:fd:cb:58:2f:b2:
                    66:58:55:c1:a5:ed:a7:8f:8b:7d:11:78:c7:0d:43:
                    99:e0:2a:b0:7c:12:73:4c:30:7f:13:28:34:26:f7:
                    e2:17:01:a3:81:40:a0:4c:0e:8b:09:ba:a3:d1:61:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:07:86:DE:D1:61:87:69:94:FD:AB:57:74:8C:44:2D:F2:F0:A2
            X509v3 Authority Key Identifier:
                keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:15:d0:c8:e6:11:51:dd:90:af:ba:be:d4:a4:89:53:ca:7f:
         5b:5d:7e:a2:13:32:b4:6b:21:c0:14:07:4d:55:c5:b0:67:2f:
         03:0d:a1:92:58:ba:16:37:93:92:79:43:ac:99:e9:f3:56:c2:
         93:3b:a3:89:7c:85:38:58:b3:24:66:1b:f4:d4:33:1e:5e:22:
         84:93:05:15:3a:ba:ae:b5:11:bd:5a:6c:c7:2e:b6:9b:bb:f0:
         00:36:8d:59:ba:54:e7:d7:1b:3b:ff:9a:13:29:01:86:90:63:
         e0:0a:73:f9:6b:de:b3:1e:59:12:3a:d8:b8:1a:e3:df:06:47:
         77:5a:f5:be:03:01:3f:4d:56:01:7b:1c:87:84:64:39:72:19:
         66:c4:36:8c:bb:be:97:f3:a3:62:1d:ff:40:b8:18:e7:51:7f:
         10:3c:b7:82:e5:09:28:3b:f5:08:7f:e5:f6:94:b8:cc:03:d9:
         98:01:a8:15:57:f2:41:1a:c5:d6:e9:8e:29:78:b0:46:35:25:
         5d:9b:bc:23:57:94:6c:82:5c:35:e9:b0:53:1a:56:0c:81:f7:
         1e:2b:70:55:8f:94:23:e7:52:db:bd:1e:9b:33:ce:09:5b:f3:
         f9:19:af:fa:9c:d5:38:d4:2b:1e:45:bc:0a:e3:26:70:ea:65:
         9e:e3:df:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4uwuOHfpv5zzfEpq25QuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2
ZTVmYmIwHhcNMjUwODA0MDcwMTQ4WhcNMjUwODA1MDcwMTQ4WjAzMTEwLwYDVQQD
Eyg5MzI0MDc4NmRlZDE2MTg3Njk5NGZkYWI1Nzc0OGM0NDJkZjJmMGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44fy1rOHNnsAJwaEgkulqkGUJgJr
XN2tWJ86YBYZLSjkwicoftUq6YQjmNiOkIfNVVavaa4NFd+F3IirY9RnY8b1Yab3
WUBJEdAXrK3V1CuW77kEOT+8WHzO1+gb/bUHwrz3+trOunfaI6DkhCjU+9Y0V8qf
eHZnCbI6xEP06EhG2U30zc7d30bR7xZNKBMC/aKmcVJQ2irrsiDQPFdyml07KZ+V
d9ZuGyZOAcE4FWV/fLGjf+yo8HwKVqoRyCT7ZtuUSetP/Vrm5ZFh/ctYL7JmWFXB
pe2nj4t9EXjHDUOZ4CqwfBJzTDB/Eyg0JvfiFwGjgUCgTA6LCbqj0WHMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMkB4be0WGHaZT9q1d0jEQt8vCiMB8GA1UdIwQY
MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt
NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi
LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBXQyOYR
Ud2Qr7q+1KSJU8p/W11+ohMytGshwBQHTVXFsGcvAw2hkli6FjeTknlDrJnp81bC
kzujiXyFOFizJGYb9NQzHl4ihJMFFTq6rrURvVpsxy62m7vwADaNWbpU59cbO/+a
EykBhpBj4Apz+Wvesx5ZEjrYuBrj3wZHd1r1vgMBP01WAXsch4RkOXIZZsQ2jLu+
l/OjYh3/QLgY51F/EDy3guUJKDv1CH/l9pS4zAPZmAGoFVfyQRrF1umOKXiwRjUl
XZu8I1eUbIJcNemwUxpWDIH3HitwVY+UI+dS270emzPOCVvz+Rmv+pzVONQrHkW8
CuMmcOplnuPfIw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:31 2025 by rpki-client