Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          nMsF82f+Y8XN2JNqOKmzrtUSpKoXA0waoVuJkMAf4/o=
Subject key identifier:   95:BC:0F:9B:18:BB:F7:39:E7:B9:C2:93:AB:64:12:72:BC:B5:16:3C
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       0198D6298A50BA1D458455ACF4DE18AFF645
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          1428
Signing time:             Sat 23 Aug 2025 09:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:43 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: +0UjwUgNdXsTtR7jiae+XUXiMt9ZU6Md1VPK7jMwbMo=)
                          2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
                          3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
                          4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
                          5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=)
                          6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8a:50:ba:1d:45:84:55:ac:f4:de:18:af:f6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Aug 23 09:01:43 2025 GMT
            Not After : Aug 24 09:01:43 2025 GMT
        Subject: CN=95bc0f9b18bbf739e7b9c293ab641272bcb5163c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:2d:f5:47:de:ad:a0:c8:0f:4b:d9:b9:21:
                    9f:52:75:b2:69:15:0c:16:fb:f2:cd:13:f1:9a:35:
                    e1:f3:8c:81:23:1e:c7:dc:ae:82:cd:b1:5f:05:c0:
                    21:ac:5d:32:4b:48:88:19:66:7d:f1:22:c0:06:c7:
                    2d:e5:f2:e3:6e:7a:4b:29:5b:43:1d:1a:a6:41:dd:
                    a5:bf:cb:ea:6e:44:19:97:84:0e:ee:c2:e9:d2:77:
                    57:35:ba:28:9e:59:2b:46:fb:5c:ff:15:dd:0c:32:
                    99:4e:29:12:0b:d7:52:d6:17:8a:eb:90:ec:71:66:
                    f5:71:a1:8b:02:cb:06:ba:e5:3f:fe:34:b1:c0:4a:
                    d0:c5:f4:ef:d3:d5:ba:fd:4a:70:ea:0f:a5:2f:cd:
                    9a:1a:7c:e3:e7:67:bf:cc:3b:5f:cb:6f:cd:83:0e:
                    fa:60:67:fa:52:bc:2f:15:c1:90:73:93:a6:29:9d:
                    7c:4e:39:59:ad:60:a3:a7:c1:7c:82:61:43:1e:57:
                    61:c4:56:b9:77:9b:42:9b:73:8e:90:66:c6:05:72:
                    23:1a:37:92:65:b7:c0:1a:b2:47:bf:25:cc:61:df:
                    76:96:a6:c7:19:15:0f:48:bb:7c:11:02:27:4f:cf:
                    07:d0:59:05:a9:aa:5f:79:5c:70:04:33:52:11:86:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BC:0F:9B:18:BB:F7:39:E7:B9:C2:93:AB:64:12:72:BC:B5:16:3C
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:0d:f5:79:bf:a9:0d:5a:dd:c8:c1:d8:8c:d4:78:c5:dc:
         6b:64:5b:e4:f4:94:8a:6a:b7:54:6b:53:3d:38:56:49:d4:75:
         28:2c:86:f0:42:54:bc:58:e9:f4:52:21:60:94:76:48:02:98:
         a2:98:1b:80:05:3f:6a:9e:3c:d4:33:63:31:5e:72:c0:59:15:
         0f:71:6f:5e:f2:84:4b:a6:b4:57:a3:3c:c5:41:89:7b:38:23:
         84:c2:80:0f:92:91:28:bf:4c:82:b0:12:08:52:22:dc:aa:7c:
         0a:d6:09:d0:21:82:fb:73:ce:f2:f8:15:10:4a:cd:40:be:e7:
         da:4d:7e:4b:b9:48:8d:e9:83:ef:e9:ee:5b:bf:61:71:6d:de:
         fb:89:bd:72:03:c8:ad:af:04:c8:be:1f:07:71:24:7f:75:0c:
         e0:51:01:34:9c:e8:f5:1c:8a:3f:2e:3f:f7:c3:ec:59:f7:d6:
         f6:3c:07:18:bc:44:75:ec:49:42:3d:3b:87:01:ea:63:11:36:
         f4:36:ab:83:4f:33:43:d6:24:88:80:f3:1e:93:fe:c2:a7:a5:
         25:1f:52:e7:60:74:36:1d:24:65:b8:ed:d4:15:cc:69:69:7e:
         55:f3:da:f8:29:44:3e:39:6e:62:c9:1a:24:2e:c1:a7:16:e8:
         f5:78:65:04
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjWKYpQuh1FhFWs9N4Yr/ZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx
Zjg3YjMwHhcNMjUwODIzMDkwMTQzWhcNMjUwODI0MDkwMTQzWjAzMTEwLwYDVQQD
Eyg5NWJjMGY5YjE4YmJmNzM5ZTdiOWMyOTNhYjY0MTI3MmJjYjUxNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XAt9UferaDID0vZuSGfUnWyaRUM
FvvyzRPxmjXh84yBIx7H3K6CzbFfBcAhrF0yS0iIGWZ98SLABsct5fLjbnpLKVtD
HRqmQd2lv8vqbkQZl4QO7sLp0ndXNboonlkrRvtc/xXdDDKZTikSC9dS1heK65Ds
cWb1caGLAssGuuU//jSxwErQxfTv09W6/Upw6g+lL82aGnzj52e/zDtfy2/Ngw76
YGf6UrwvFcGQc5OmKZ18TjlZrWCjp8F8gmFDHldhxFa5d5tCm3OOkGbGBXIjGjeS
ZbfAGrJHvyXMYd92lqbHGRUPSLt8EQInT88H0FkFqapfeVxwBDNSEYb3bQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJW8D5sYu/c557nCk6tkEnK8tRY8MB8GA1UdIwQY
MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz
LWFjZTNkNjc1ZDNjZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdiL2E5MjA2ZS1jMWUxLTRjMTUtOTUzMy1hY2UzZDY3NWQz
Y2QvMS8xLVlvQzBneHJmZU5YRWw4NHNYTmNvYmtmaDdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEkN
9Xm/qQ1a3cjB2IzUeMXca2Rb5PSUimq3VGtTPThWSdR1KCyG8EJUvFjp9FIhYJR2
SAKYopgbgAU/ap481DNjMV5ywFkVD3FvXvKES6a0V6M8xUGJezgjhMKAD5KRKL9M
grASCFIi3Kp8CtYJ0CGC+3PO8vgVEErNQL7n2k1+S7lIjemD7+nuW79hcW3e+4m9
cgPIra8EyL4fB3Ekf3UM4FEBNJzo9RyKPy4/98PsWffW9jwHGLxEdexJQj07hwHq
YxE29Darg08zQ9YkiIDzHpP+wqelJR9S52B0Nh0kZbjt1BXMaWl+VfPa+ClEPjlu
YskaJC7Bpxbo9XhlBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:54 2025 by rpki-client