Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          z3Q7Z69Djs8hWn8oaTxkGyR4vatPA8mzqYUFbLFKKKI=
Subject key identifier:   74:06:93:5B:87:75:68:DB:EE:22:0D:46:58:DC:F1:BB:C5:16:4B:49
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       0197B70E635BC1D985CBF07A46063452D559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0A0B
Signing time:             Sat 28 Jun 2025 15:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:02 +0000
Files and hashes:         1: MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa (hash: 4Iv06Vc4XP2DcLEHGwIUaAZcm9hUIsAMlBV/dIzvxtA=)
                          2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: tfSxIzk0qtHex1hft/Q48UmMxB1PqavTd3v9m5V9o4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:63:5b:c1:d9:85:cb:f0:7a:46:06:34:52:d5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Jun 28 15:01:02 2025 GMT
            Not After : Jun 29 15:01:02 2025 GMT
        Subject: CN=7406935b877568dbee220d4658dcf1bbc5164b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5c:68:f2:6c:e6:08:04:00:ea:01:e4:f9:db:
                    d0:90:cc:b1:d7:7c:7f:27:2e:8e:f8:c2:f6:14:29:
                    22:38:e8:a6:c2:b6:d9:74:6b:c5:23:64:f7:5f:f2:
                    c1:de:27:fb:88:df:fb:fe:63:d7:71:e1:8d:8e:ee:
                    ae:4f:92:34:66:cb:f0:24:2c:65:53:7d:28:95:34:
                    42:69:ab:43:9f:e0:0f:5b:ac:e7:c3:26:c8:56:3d:
                    1b:65:8a:ce:0c:4e:ec:c8:40:cf:01:af:35:07:19:
                    09:22:81:a5:85:12:9d:1b:19:5b:b1:43:14:45:d3:
                    db:c6:70:aa:9c:33:a5:19:99:7f:31:0d:17:66:cc:
                    2f:ba:cd:bd:81:29:67:4f:1c:a3:3c:f9:b5:9a:87:
                    0b:5e:8f:cc:10:aa:3b:9a:c9:d2:ea:b2:ee:a1:a6:
                    49:fc:63:89:5f:1f:b3:f7:ec:fb:c1:3f:46:97:a9:
                    d9:2d:1a:a9:5b:a9:05:bf:d4:67:3a:35:b3:d2:70:
                    2a:42:36:bd:8f:b1:01:39:57:52:07:33:e0:14:34:
                    22:74:69:bf:51:2d:64:07:02:88:0a:6f:e6:8e:c0:
                    95:40:62:3c:e4:6e:7e:c2:49:50:ab:95:08:63:24:
                    86:2b:d1:a8:00:82:ec:a8:89:2d:88:62:16:0f:03:
                    0e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:93:5B:87:75:68:DB:EE:22:0D:46:58:DC:F1:BB:C5:16:4B:49
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:db:9c:ce:3d:9d:54:0e:5a:a9:38:67:d4:f5:05:ca:61:2b:
         c6:0a:3c:52:48:b6:b3:ae:a4:05:11:a8:7f:1a:88:8a:fb:77:
         99:1f:80:a1:cf:e4:10:69:25:74:18:a8:16:43:1e:cf:6f:42:
         3d:1f:fb:86:ae:ce:34:2a:a9:2a:18:da:ff:70:e1:ca:05:25:
         12:df:7c:2e:eb:a1:55:0a:57:d8:22:1b:cf:05:30:b7:b6:c7:
         15:9e:4c:ea:80:96:79:39:f1:a3:9b:af:4d:b5:06:dd:00:04:
         ea:8d:47:ee:46:62:b0:e0:24:75:4f:04:d9:58:ee:ee:8d:5a:
         9a:5d:0e:00:a0:ca:99:a4:64:d2:c2:9b:da:78:83:37:72:6c:
         7d:a4:57:5b:67:ff:15:3f:89:52:a0:a7:f5:c1:47:5b:75:0a:
         eb:48:3a:04:02:59:e0:14:b3:18:ae:8f:07:06:7a:44:58:ef:
         b1:57:be:4a:59:f3:a1:39:e1:fb:59:a2:d7:c0:66:a2:02:16:
         17:8a:ec:51:ed:a9:a5:a3:f7:99:b4:57:98:ba:ab:39:57:71:
         ba:7a:f5:d1:88:d3:1a:cd:13:71:cc:29:ba:98:95:58:d6:ae:
         e9:d7:9b:f2:56:d9:15:dd:1c:dd:90:59:a9:a3:bb:9c:4c:5a:
         12:38:f3:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DmNbwdmFy/B6RgY0UtVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUwNjI4MTUwMTAyWhcNMjUwNjI5MTUwMTAyWjAzMTEwLwYDVQQD
Eyg3NDA2OTM1Yjg3NzU2OGRiZWUyMjBkNDY1OGRjZjFiYmM1MTY0YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Fxo8mzmCAQA6gHk+dvQkMyx13x/
Jy6O+ML2FCkiOOimwrbZdGvFI2T3X/LB3if7iN/7/mPXceGNju6uT5I0ZsvwJCxl
U30olTRCaatDn+APW6znwybIVj0bZYrODE7syEDPAa81BxkJIoGlhRKdGxlbsUMU
RdPbxnCqnDOlGZl/MQ0XZswvus29gSlnTxyjPPm1mocLXo/MEKo7msnS6rLuoaZJ
/GOJXx+z9+z7wT9Gl6nZLRqpW6kFv9RnOjWz0nAqQja9j7EBOVdSBzPgFDQidGm/
US1kBwKICm/mjsCVQGI85G5+wklQq5UIYySGK9GoAILsqIktiGIWDwMObQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQGk1uHdWjb7iINRljc8bvFFktJMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9uczj2d
VA5aqThn1PUFymErxgo8Uki2s66kBRGofxqIivt3mR+Aoc/kEGkldBioFkMez29C
PR/7hq7ONCqpKhja/3DhygUlEt98LuuhVQpX2CIbzwUwt7bHFZ5M6oCWeTnxo5uv
TbUG3QAE6o1H7kZisOAkdU8E2Vju7o1aml0OAKDKmaRk0sKb2niDN3JsfaRXW2f/
FT+JUqCn9cFHW3UK60g6BAJZ4BSzGK6PBwZ6RFjvsVe+SlnzoTnh+1mi18BmogIW
F4rsUe2ppaP3mbRXmLqrOVdxunr10YjTGs0TccwpupiVWNau6deb8lbZFd0c3ZBZ
qaO7nExaEjjzzg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:08 2025 by rpki-client