Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
File:                     yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft (raw, json)
Hash identifier:          VydFFZivM8iNO+RV8I0bMBONBntx/8LI8FY+zvoQqXc=
Subject key identifier:   16:F4:76:4D:CF:16:AA:5A:F9:B4:8A:19:C3:B4:28:3A:AB:1C:12:13
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Certificate issuer:       /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial:       0198D4A7DDA9B9EE057BD4AF59F2D49F35DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
Manifest number:          01A6
Signing time:             Sat 23 Aug 2025 02:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:27 +0000
Files and hashes:         1: Dribm7v4eJGFRaCGtu-42niad5g.roa (hash: COADFM31Atbne40gqBHSktN8SaWdLigZF/t1VPBNlag=)
                          2: yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl (hash: E9JhzIN1udgkza4R70NTgBwuuuugnhfcJQyyj/8xvS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:dd:a9:b9:ee:05:7b:d4:af:59:f2:d4:9f:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
        Validity
            Not Before: Aug 23 02:00:27 2025 GMT
            Not After : Aug 24 02:00:27 2025 GMT
        Subject: CN=16f4764dcf16aa5af9b48a19c3b4283aab1c1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9c:f9:3e:01:8f:85:84:3f:22:ac:bc:cf:bf:
                    da:a4:b9:d8:63:3c:c2:58:8d:93:d3:96:e1:fc:a6:
                    6f:aa:36:81:1c:10:9c:1f:e5:22:9e:78:8c:e8:d0:
                    f6:d7:69:31:f5:99:c8:d9:9f:86:ed:8f:95:eb:08:
                    db:de:77:5a:11:4b:b9:dd:84:55:0b:36:d4:cd:e3:
                    ef:60:ec:2e:1f:95:5c:76:99:bb:aa:93:b3:04:bc:
                    9d:7b:91:a0:d7:73:d7:f7:95:c9:98:62:a5:98:0f:
                    75:61:8f:c6:06:8d:36:77:78:45:d2:4f:db:b1:51:
                    7e:47:a5:92:a9:3e:ba:10:7c:61:f8:9e:23:11:c4:
                    3a:36:f0:d3:85:27:68:4e:a1:a3:a7:d6:fc:c5:2a:
                    e4:57:40:ba:b4:02:cf:20:97:26:62:3f:15:c8:63:
                    03:b6:93:e0:42:5e:70:87:54:d2:86:a4:54:78:53:
                    6b:16:56:52:0d:c8:fd:a0:df:12:a0:39:09:ed:b5:
                    78:95:1d:52:44:b9:a1:41:4d:a2:4c:ca:2f:cb:e8:
                    00:8a:2d:fe:93:87:ea:33:d7:75:e6:71:3e:c8:9c:
                    74:3d:3d:a8:e7:6c:a6:4e:a7:4b:ab:24:6f:70:72:
                    04:61:07:6f:b6:9b:6a:45:5d:0f:50:e0:93:1b:af:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:76:4D:CF:16:AA:5A:F9:B4:8A:19:C3:B4:28:3A:AB:1C:12:13
            X509v3 Authority Key Identifier:
                keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:6a:88:87:86:f2:0e:d5:29:93:ea:62:2b:92:6b:71:32:
         b8:7d:b9:fd:80:d1:2b:da:9e:52:f1:7b:51:d9:bc:ff:84:f4:
         a0:82:8c:be:1d:9e:c4:96:46:5a:3e:cc:ce:1c:a8:9a:9a:24:
         ea:dd:9e:cd:01:71:3d:1e:53:51:d9:d2:dd:0c:82:71:07:96:
         18:3b:b9:29:3d:ce:c8:e3:94:27:b6:40:8b:2b:ba:c1:b1:1c:
         2a:b0:ed:e9:ef:ff:d4:ea:4c:4e:97:c1:7f:de:29:43:c1:35:
         f8:0c:71:b9:71:74:1e:2c:30:e7:fa:55:f3:78:07:fb:d3:ce:
         26:0f:de:18:16:ba:5d:f5:aa:51:95:42:fc:51:51:3e:c4:70:
         94:76:3e:e6:ed:2a:11:5f:79:b4:3d:75:52:17:0f:07:b4:df:
         76:64:4c:22:2a:fc:d8:62:8f:d7:7d:60:e6:06:60:54:a9:ff:
         60:b9:7e:21:e0:8a:e9:e0:a9:65:cf:61:84:71:c7:7b:cd:73:
         f9:40:bc:9f:4a:b0:69:2d:59:74:0a:27:e0:01:ea:ab:b2:ec:
         7f:52:06:1a:d7:74:40:7a:56:8c:1e:60:dc:5f:2d:c6:15:08:
         06:63:17:20:d0:47:83:51:2d:1e:16:87:51:11:fe:03:5f:32:
         84:8a:c5:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp92pue4Fe9SvWfLUnzXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYWNjNGZlYmI0ODc5OTZkNGVlMDFkNTNiMTFmODQyMDNj
YTgzNjcwHhcNMjUwODIzMDIwMDI3WhcNMjUwODI0MDIwMDI3WjAzMTEwLwYDVQQD
EygxNmY0NzY0ZGNmMTZhYTVhZjliNDhhMTljM2I0MjgzYWFiMWMxMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5z5PgGPhYQ/Iqy8z7/apLnYYzzC
WI2T05bh/KZvqjaBHBCcH+UinniM6ND212kx9ZnI2Z+G7Y+V6wjb3ndaEUu53YRV
CzbUzePvYOwuH5Vcdpm7qpOzBLyde5Gg13PX95XJmGKlmA91YY/GBo02d3hF0k/b
sVF+R6WSqT66EHxh+J4jEcQ6NvDThSdoTqGjp9b8xSrkV0C6tALPIJcmYj8VyGMD
tpPgQl5wh1TShqRUeFNrFlZSDcj9oN8SoDkJ7bV4lR1SRLmhQU2iTMovy+gAii3+
k4fqM9d15nE+yJx0PT2o52ymTqdLqyRvcHIEYQdvtptqRV0PUOCTG68XOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb0dk3PFqpa+bSKGcO0KDqrHBITMB8GA1UdIwQY
MBaAFMqsxP67SHmW1O4B1TsR+EIDyoNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGIt
YTdlZGM0Yzk5OTQ3LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83MWIyYWItMTU3ZS00ODIwLWE1OGItYTdlZGM0Yzk5OTQ3
LzEveXF6RV9ydEllWmJVN2dIVk94SDRRZ1BLZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwlqiIeG
8g7VKZPqYiuSa3EyuH25/YDRK9qeUvF7Udm8/4T0oIKMvh2exJZGWj7Mzhyompok
6t2ezQFxPR5TUdnS3QyCcQeWGDu5KT3OyOOUJ7ZAiyu6wbEcKrDt6e//1OpMTpfB
f94pQ8E1+AxxuXF0Hiww5/pV83gH+9POJg/eGBa6XfWqUZVC/FFRPsRwlHY+5u0q
EV95tD11UhcPB7TfdmRMIir82GKP131g5gZgVKn/YLl+IeCK6eCpZc9hhHHHe81z
+UC8n0qwaS1ZdAon4AHqq7Lsf1IGGtd0QHpWjB5g3F8txhUIBmMXINBHg1EtHhaH
URH+A18yhIrFHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:44 2025 by rpki-client