Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          qTX/ghww+GhbxWy08SbWAuqFntDUo9luBcGX8r1QOOY=
Subject key identifier:   C8:86:48:46:E3:45:55:C4:B0:AF:D4:1D:B5:32:31:5C:2E:4D:48:D4
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       0197B632DCB29F59BFEEF34A6307290A1F56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          15B3
Signing time:             Sat 28 Jun 2025 11:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:15 +0000
Files and hashes:         1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: TCEPJSa895wv6an6sUqsvh6ExSYLJkOcw+dVb7XwliQ=)
                          3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:dc:b2:9f:59:bf:ee:f3:4a:63:07:29:0a:1f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Jun 28 11:01:15 2025 GMT
            Not After : Jun 29 11:01:15 2025 GMT
        Subject: CN=c8864846e34555c4b0afd41db532315c2e4d48d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:53:26:c8:35:3c:72:0e:24:43:16:84:7a:
                    5a:02:e8:d0:94:2e:c0:22:aa:21:14:d4:75:19:47:
                    44:8e:35:ee:f2:4d:e0:fa:5a:bf:02:c1:e9:b0:fa:
                    73:3a:37:ba:17:1f:77:c8:e1:4c:e6:e9:09:76:4d:
                    fa:53:e5:0f:a0:9b:8d:47:7d:64:a1:b0:5a:ff:7c:
                    d2:ac:50:f4:3a:ab:92:05:38:49:f9:89:37:de:89:
                    0e:c2:93:5a:82:6d:39:b0:2b:55:bb:44:3b:26:93:
                    29:6b:18:89:47:da:9f:07:d8:fe:fc:ff:ce:51:ee:
                    ea:88:6f:5d:c6:03:9d:a5:ab:58:46:12:b1:8d:89:
                    cf:2b:c9:92:df:7b:61:1d:c2:9c:fa:82:45:d1:b7:
                    40:d9:68:1d:57:72:80:9a:51:38:5f:82:80:87:2a:
                    7c:a8:58:e1:90:77:fc:7b:b8:59:ad:4e:3a:e2:b2:
                    a0:60:d9:a8:f4:8b:86:e5:ad:3d:5a:63:b4:d1:a2:
                    66:8f:cf:04:b3:80:f6:97:be:84:c1:ba:5c:10:da:
                    73:97:4d:18:b5:e8:22:27:bc:5e:43:a1:7c:89:88:
                    ef:55:09:04:40:57:39:62:b0:b1:be:48:95:09:7f:
                    a9:22:63:31:a3:23:34:3b:a6:cd:96:13:65:ea:36:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:48:46:E3:45:55:C4:B0:AF:D4:1D:B5:32:31:5C:2E:4D:48:D4
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:27:4e:4a:b6:ee:16:75:5c:f1:db:d1:3d:0b:04:3e:8d:7d:
         ca:fd:d7:59:c7:a9:ca:e8:a7:31:1b:d3:41:e2:3a:5d:3a:7a:
         27:cb:f0:ab:97:de:e8:88:79:78:84:80:19:d4:a5:86:ac:b2:
         9c:51:27:b0:87:bb:3d:78:e5:a5:25:b4:4a:de:f5:3a:6a:d9:
         7d:e7:7e:b0:5c:77:bc:d5:e9:4e:ee:f5:4f:d6:1b:22:ba:ca:
         51:d3:c2:b8:e1:ff:b0:fa:17:3c:cb:8b:ea:20:5a:88:53:b0:
         89:76:48:3b:b1:f3:81:83:a7:15:9d:4d:d4:5e:a6:ea:d4:4c:
         60:5b:50:cd:34:ac:ab:8e:c7:31:7c:51:19:a4:d9:1b:ce:c5:
         c7:59:69:33:5b:a0:d2:4c:f7:39:d5:65:88:be:31:7c:6b:ca:
         17:0c:cc:3f:a6:f5:fd:c4:9a:02:6d:f2:1f:ba:6c:2c:b3:13:
         67:c5:61:f7:a7:0e:d0:f7:08:dd:01:fd:ed:e3:b5:0f:20:a6:
         01:b6:73:f0:27:e0:40:fb:bc:26:b8:94:98:1c:91:3d:c3:26:
         3b:1e:f4:f4:db:08:ce:58:aa:9d:9e:c4:80:e2:54:52:d4:d8:
         3a:6d:3e:e5:d5:8b:8e:7f:7a:3b:df:f6:13:3e:21:51:54:82:
         1d:51:52:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2Mtyyn1m/7vNKYwcpCh9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGNiZWU1MTk5MGYxZTA1YTlkMWRjMGMyZjJmM2E4YTM0
NzBjMTMwHhcNMjUwNjI4MTEwMTE1WhcNMjUwNjI5MTEwMTE1WjAzMTEwLwYDVQQD
EyhjODg2NDg0NmUzNDU1NWM0YjBhZmQ0MWRiNTMyMzE1YzJlNGQ0OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dRTJsg1PHIOJEMWhHpaAujQlC7A
IqohFNR1GUdEjjXu8k3g+lq/AsHpsPpzOje6Fx93yOFM5ukJdk36U+UPoJuNR31k
obBa/3zSrFD0OquSBThJ+Yk33okOwpNagm05sCtVu0Q7JpMpaxiJR9qfB9j+/P/O
Ue7qiG9dxgOdpatYRhKxjYnPK8mS33thHcKc+oJF0bdA2WgdV3KAmlE4X4KAhyp8
qFjhkHf8e7hZrU464rKgYNmo9IuG5a09WmO00aJmj88Es4D2l76EwbpcENpzl00Y
tegiJ7xeQ6F8iYjvVQkEQFc5YrCxvkiVCX+pImMxoyM0O6bNlhNl6jYD6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiGSEbjRVXEsK/UHbUyMVwuTUjUMB8GA1UdIwQY
MBaAFA2MvuUZkPHgWp0dwMLy86ijRwwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWIt
MWIxZTc4Y2JiYjA5LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83NjNkOGUtMjA4MS00Y2Y4LWI2NWItMWIxZTc4Y2JiYjA5
LzEvRFl5LTVSbVE4ZUJhblIzQXd2THpxS05IREJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCdOSrbu
FnVc8dvRPQsEPo19yv3XWcepyuinMRvTQeI6XTp6J8vwq5fe6Ih5eISAGdSlhqyy
nFEnsIe7PXjlpSW0St71OmrZfed+sFx3vNXpTu71T9YbIrrKUdPCuOH/sPoXPMuL
6iBaiFOwiXZIO7HzgYOnFZ1N1F6m6tRMYFtQzTSsq47HMXxRGaTZG87Fx1lpM1ug
0kz3OdVliL4xfGvKFwzMP6b1/cSaAm3yH7psLLMTZ8Vh96cO0PcI3QH97eO1DyCm
AbZz8CfgQPu8JriUmByRPcMmOx709NsIzliqnZ7EgOJUUtTYOm0+5dWLjn96O9/2
Ez4hUVSCHVFSDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:09 2025 by rpki-client