Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          0dnOsvGdI8fvNwkI24x9MoH8Uv8EX+zheMaIuEKoLSI=
Subject key identifier:   76:6F:75:A2:74:BA:86:52:07:8C:0C:B3:E0:9D:11:F3:09:A4:85:59
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       0197B77C944C91546806BED230BC61848721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          0548
Signing time:             Sat 28 Jun 2025 17:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:24 +0000
Files and hashes:         1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: G/khYDuFJJGS9kv0ncnUP5D0mHPAbOr8fwmSulkrdQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:94:4c:91:54:68:06:be:d2:30:bc:61:84:87:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Jun 28 17:01:24 2025 GMT
            Not After : Jun 29 17:01:24 2025 GMT
        Subject: CN=766f75a274ba8652078c0cb3e09d11f309a48559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:f6:1e:2a:94:42:e7:b5:88:ba:a9:b5:d3:
                    d0:c2:7f:bd:64:c1:67:65:e6:b5:8b:74:38:5f:32:
                    6a:85:fc:88:26:e4:ad:ae:e7:6f:2b:a4:ce:8e:b6:
                    59:95:a5:52:8b:3b:1e:dd:11:f6:53:f0:fa:52:80:
                    5a:34:20:ea:a0:fe:89:eb:a5:65:48:f0:5c:37:54:
                    be:52:f7:a8:8d:4e:90:16:c1:cf:3c:7d:9c:c6:74:
                    6f:77:cc:0e:00:53:65:e8:07:8a:c0:8f:3b:2c:59:
                    33:44:89:bc:20:ff:29:47:fe:56:3e:78:a6:bc:b9:
                    4e:38:19:3d:f7:3b:65:9d:8e:ec:5b:4b:19:0e:f1:
                    11:7a:32:ac:6b:9e:3b:ab:62:07:61:6f:ea:79:88:
                    2e:3a:dc:49:70:1d:ab:e3:8d:08:d5:4c:1a:f6:ab:
                    47:95:d2:d8:fa:80:3a:77:3d:bf:65:1c:67:16:79:
                    a5:0d:a9:c6:c9:c7:e0:07:b2:9b:5e:f2:12:0d:67:
                    3c:e7:71:9c:52:95:05:af:47:1e:a8:1f:27:40:ed:
                    17:65:56:ca:83:4a:ba:df:ef:6b:eb:8b:5f:20:66:
                    90:71:45:00:8b:71:49:8a:76:91:99:2a:0b:0d:78:
                    f0:de:0a:3f:8c:ea:24:f8:a5:39:9c:4a:a6:c7:7e:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6F:75:A2:74:BA:86:52:07:8C:0C:B3:E0:9D:11:F3:09:A4:85:59
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:8c:73:e9:d1:6b:a3:b1:d4:fc:bb:7f:8a:77:0b:ba:1c:
         91:82:bb:52:5b:a9:77:e4:6b:18:03:78:d9:18:7e:a8:e3:39:
         77:9f:b1:9e:64:c8:e0:b9:c2:6f:bc:7c:62:ec:57:04:c2:b5:
         0c:26:a5:51:d9:c4:9d:ed:dc:b9:98:5e:b6:f2:70:b1:5e:48:
         4f:88:1c:f8:22:1b:f6:36:ff:ca:a4:35:ed:86:d4:97:1b:08:
         b9:21:56:09:c0:2e:61:b2:50:c2:0a:bc:a4:83:8c:67:34:f4:
         b8:56:c1:e6:49:af:35:68:ab:f9:68:e6:07:5e:a8:35:05:92:
         85:60:28:f2:a1:8a:45:40:ce:fb:1f:c5:f0:6d:71:1b:e5:9b:
         10:6e:1e:74:61:a6:f5:00:34:c3:49:e9:e4:41:ee:0e:d0:7c:
         b3:16:99:ee:3f:1a:e8:50:cf:f3:3f:54:3b:fe:76:bf:6e:c0:
         26:5d:dc:07:b8:ab:5b:58:ed:a3:8d:0a:b9:5b:64:5f:57:e0:
         c2:cf:f5:47:1f:67:8b:06:be:59:70:97:ff:a9:1f:d8:8e:62:
         ca:0f:0d:af:74:30:9c:32:bf:32:77:a8:01:27:3c:dd:8f:bf:
         73:6e:1c:bd:50:f8:7c:35:bd:32:30:4c:92:14:db:30:fb:e2:
         4d:b6:40:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJRMkVRoBr7SMLxhhIchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4M2M0YzlkMmZjZTYxNjY1MTY1YzA1YTEwMWU4MTUwNDdi
NjRmNmEwHhcNMjUwNjI4MTcwMTI0WhcNMjUwNjI5MTcwMTI0WjAzMTEwLwYDVQQD
Eyg3NjZmNzVhMjc0YmE4NjUyMDc4YzBjYjNlMDlkMTFmMzA5YTQ4NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7P2HiqUQue1iLqptdPQwn+9ZMFn
Zea1i3Q4XzJqhfyIJuStrudvK6TOjrZZlaVSizse3RH2U/D6UoBaNCDqoP6J66Vl
SPBcN1S+UveojU6QFsHPPH2cxnRvd8wOAFNl6AeKwI87LFkzRIm8IP8pR/5WPnim
vLlOOBk99ztlnY7sW0sZDvERejKsa547q2IHYW/qeYguOtxJcB2r440I1Uwa9qtH
ldLY+oA6dz2/ZRxnFnmlDanGycfgB7KbXvISDWc853GcUpUFr0ceqB8nQO0XZVbK
g0q63+9r64tfIGaQcUUAi3FJinaRmSoLDXjw3go/jOok+KU5nEqmx34BcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZvdaJ0uoZSB4wMs+CdEfMJpIVZMB8GA1UdIwQY
MBaAFMg8TJ0vzmFmUWXAWhAegVBHtk9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjkt
NDJlZjMzYTI2ZTY2LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82NzQ0MDgtNDE2My00ZTdlLWFhYjktNDJlZjMzYTI2ZTY2
LzEveUR4TW5TX09ZV1pSWmNCYUVCNkJVRWUyVDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHneMc+nR
a6Ox1Py7f4p3C7ockYK7Ulupd+RrGAN42Rh+qOM5d5+xnmTI4LnCb7x8YuxXBMK1
DCalUdnEne3cuZhetvJwsV5IT4gc+CIb9jb/yqQ17YbUlxsIuSFWCcAuYbJQwgq8
pIOMZzT0uFbB5kmvNWir+WjmB16oNQWShWAo8qGKRUDO+x/F8G1xG+WbEG4edGGm
9QA0w0np5EHuDtB8sxaZ7j8a6FDP8z9UO/52v27AJl3cB7irW1jto40KuVtkX1fg
ws/1Rx9niwa+WXCX/6kf2I5iyg8Nr3QwnDK/MneoASc83Y+/c24cvVD4fDW9MjBM
khTbMPviTbZAPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:40 2025 by rpki-client