Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File:                     rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier:          sBpozM4yD3Kb+rTzBiLuCYuk4ylIV2BTPb9VVCbwPHM=
Subject key identifier:   77:02:64:9D:35:CC:A0:20:95:37:B5:2A:9E:68:C1:A2:52:3D:32:0F
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer:       /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial:       0198D47408D447B58C1FC1332D7E435B3AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number:          0898
Signing time:             Sat 23 Aug 2025 01:03:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:50 +0000
Files and hashes:         1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
                          2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: mrvH7hh5UtkC2iJMRGLH6AD/WBld4f6k3UGfmTArPW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:08:d4:47:b5:8c:1f:c1:33:2d:7e:43:5b:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
        Validity
            Not Before: Aug 23 01:03:50 2025 GMT
            Not After : Aug 24 01:03:50 2025 GMT
        Subject: CN=7702649d35cca0209537b52a9e68c1a2523d320f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:4c:be:a3:0b:a3:43:b7:84:6b:00:20:dc:
                    c6:94:59:94:9d:fa:56:fa:26:c5:21:4e:1e:82:bf:
                    86:45:c7:b8:a8:66:6a:62:1b:f9:9a:be:6e:cf:9a:
                    c3:84:ff:5e:3f:de:8f:d8:26:7f:35:c5:c1:bb:76:
                    c9:e6:ba:09:33:66:c2:f7:79:07:8a:19:9b:4e:f7:
                    70:a6:1e:59:68:f9:0c:8f:14:38:e9:fb:5e:34:f0:
                    ba:2c:7a:36:00:af:7a:73:cf:7c:2d:b0:37:c2:f2:
                    a2:01:6d:d6:e5:1e:68:45:09:e5:65:ed:14:ab:b4:
                    e3:d6:a0:cc:21:cb:b8:74:84:61:3e:73:9c:91:92:
                    ba:60:53:de:89:79:0f:2f:7c:d3:ba:3c:2e:66:ea:
                    6e:d1:e4:73:d3:8d:7d:f6:ab:e4:6d:16:6c:68:61:
                    dc:c0:7f:67:ba:74:12:3f:10:45:ff:a1:ce:b6:94:
                    24:67:ec:1e:01:24:16:43:b7:c3:53:c8:da:4f:48:
                    6b:97:2f:9c:e3:d2:b5:be:be:f8:d5:33:3e:8d:91:
                    eb:0a:38:14:a4:76:e7:60:ca:18:71:fd:7a:2b:2c:
                    f6:d9:45:81:10:70:14:00:72:bb:53:d4:c1:18:49:
                    8a:4f:9e:f8:b7:1f:ac:2d:43:41:c7:bd:18:20:ff:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:02:64:9D:35:CC:A0:20:95:37:B5:2A:9E:68:C1:A2:52:3D:32:0F
            X509v3 Authority Key Identifier:
                keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:14:6e:a1:3f:16:27:7e:d4:07:10:42:33:87:5a:c9:88:3c:
         a7:5f:5d:69:18:45:90:0e:48:02:d3:44:50:aa:46:19:18:9d:
         e3:95:98:01:fe:db:11:48:ea:4c:44:49:2e:2d:e4:36:60:fe:
         67:e1:b4:2f:48:24:71:66:31:9f:76:e1:c3:56:38:8a:58:de:
         9c:29:db:35:a5:70:0f:f3:fa:a7:8e:52:3b:fd:5c:85:4a:8c:
         dd:99:63:08:49:fa:59:1e:74:36:e1:ea:a9:32:d1:e5:b4:4c:
         27:6e:f7:1c:e0:fb:78:35:2f:ff:31:79:d4:09:39:38:76:3d:
         30:d5:d8:fe:99:02:d2:b2:54:15:e6:a0:11:54:7c:73:1e:47:
         db:4b:c8:6b:6b:81:8e:f5:29:22:83:05:85:18:d8:1c:fe:73:
         7c:8c:d4:d0:49:f8:8a:73:af:87:a8:58:fc:15:49:8d:f4:05:
         8b:43:f9:0d:ee:2f:03:e3:46:ca:92:bd:1b:35:ea:02:d9:d7:
         27:e2:bf:b9:d7:a3:b6:3e:53:1b:34:f9:17:fb:39:21:ed:b0:
         21:c0:84:29:02:d9:3e:81:06:f0:f4:50:c7:58:3a:fe:ab:c5:
         3d:a0:ff:18:05:c6:b8:ce:62:a3:99:e9:0d:25:8e:b7:76:d7:
         28:85:38:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdAjUR7WMH8EzLX5DWzrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3
MTQ4NzAwHhcNMjUwODIzMDEwMzUwWhcNMjUwODI0MDEwMzUwWjAzMTEwLwYDVQQD
Eyg3NzAyNjQ5ZDM1Y2NhMDIwOTUzN2I1MmE5ZTY4YzFhMjUyM2QzMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsRMvqMLo0O3hGsAINzGlFmUnfpW
+ibFIU4egr+GRce4qGZqYhv5mr5uz5rDhP9eP96P2CZ/NcXBu3bJ5roJM2bC93kH
ihmbTvdwph5ZaPkMjxQ46fteNPC6LHo2AK96c898LbA3wvKiAW3W5R5oRQnlZe0U
q7Tj1qDMIcu4dIRhPnOckZK6YFPeiXkPL3zTujwuZupu0eRz04199qvkbRZsaGHc
wH9nunQSPxBF/6HOtpQkZ+weASQWQ7fDU8jaT0hrly+c49K1vr741TM+jZHrCjgU
pHbnYMoYcf16Kyz22UWBEHAUAHK7U9TBGEmKT574tx+sLUNBx70YIP+AjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcCZJ01zKAglTe1Kp5owaJSPTIPMB8GA1UdIwQY
MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt
YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl
LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhRuoT8W
J37UBxBCM4dayYg8p19daRhFkA5IAtNEUKpGGRid45WYAf7bEUjqTERJLi3kNmD+
Z+G0L0gkcWYxn3bhw1Y4iljenCnbNaVwD/P6p45SO/1chUqM3ZljCEn6WR50NuHq
qTLR5bRMJ273HOD7eDUv/zF51Ak5OHY9MNXY/pkC0rJUFeagEVR8cx5H20vIa2uB
jvUpIoMFhRjYHP5zfIzU0En4inOvh6hY/BVJjfQFi0P5De4vA+NGypK9GzXqAtnX
J+K/udejtj5TGzT5F/s5Ie2wIcCEKQLZPoEG8PRQx1g6/qvFPaD/GAXGuM5io5np
DSWOt3bXKIU4Ag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:22 2025 by rpki-client