Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File:                     yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier:          EAWRyD1aYl/3QnhGBd6J4ER+ilI3V20zkOuU1oH0IiM=
Subject key identifier:   9D:93:82:47:5F:1B:74:D2:64:80:D9:24:A2:4C:47:55:B9:EB:D9:4A
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer:       /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial:       0197B8FD2C8576FF52E18B7C1B4BA753A236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number:          15B6
Signing time:             Sun 29 Jun 2025 00:01:29 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:29 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:29 +0000
Files and hashes:         1: pYoc9X1YFz8YYR89i5sgiEjfdJw.roa (hash: sFvU0iwBwXOnCyH6HrRHLCBIGEqrilg6LM2sI9y67eU=)
                          2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: k5cTp14BRg1prkFEAZj36izTSZzXZXGjmh/5moN6vWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:2c:85:76:ff:52:e1:8b:7c:1b:4b:a7:53:a2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
        Validity
            Not Before: Jun 29 00:01:29 2025 GMT
            Not After : Jun 30 00:01:29 2025 GMT
        Subject: CN=9d9382475f1b74d26480d924a24c4755b9ebd94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:bc:52:ed:36:ef:c5:43:72:ff:7e:20:af:
                    c8:87:6e:1b:de:fe:cf:33:5e:39:5c:a1:9f:55:f6:
                    d0:5d:d6:c0:25:91:11:da:82:ea:b7:cd:8c:16:32:
                    68:9c:c0:83:5c:d8:00:5c:83:78:53:fa:a1:f2:b7:
                    55:b1:7d:b6:b3:20:a9:bf:78:e1:c7:7d:65:e1:36:
                    a2:de:7a:bf:cd:b8:b3:17:48:0d:e5:5b:93:11:8e:
                    36:ff:91:e7:f3:18:f1:8f:a7:5d:12:f3:91:73:c4:
                    c3:20:88:6d:f4:ac:79:47:5e:e8:6b:4c:c6:e2:6a:
                    4b:c3:bc:b7:07:51:06:4d:1e:e2:67:8c:7b:d3:b9:
                    48:8c:c5:96:76:4f:b2:7c:ff:08:0f:4b:81:2b:66:
                    2e:ab:ed:65:79:79:3e:ea:c2:71:fb:42:e8:72:4e:
                    aa:bd:94:df:d3:f5:ee:f3:0a:89:8c:43:f0:3e:92:
                    1c:f1:ac:f0:c4:57:3a:c3:b0:18:11:7d:64:35:bb:
                    1a:3b:d8:ed:89:55:35:24:8c:f5:e6:84:b7:42:de:
                    1c:a5:d9:9b:d1:d6:b4:1b:43:b1:40:fb:37:3d:b3:
                    bd:2d:54:13:d9:75:f7:9d:6c:4c:0f:07:68:69:4d:
                    bd:2e:a6:0e:ad:bc:33:a9:ab:df:07:73:c3:84:24:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:82:47:5F:1B:74:D2:64:80:D9:24:A2:4C:47:55:B9:EB:D9:4A
            X509v3 Authority Key Identifier:
                keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:c1:8b:e0:32:c7:ce:82:75:53:20:ba:75:02:f1:6e:aa:
         94:c5:84:10:d5:cc:0e:38:b8:db:74:3b:2c:35:cc:b2:ad:69:
         e1:7d:89:fa:17:ce:0b:d1:d5:7b:83:83:1f:ba:70:6c:c0:1f:
         65:72:ce:3b:3c:68:e5:c3:73:f4:ce:d0:1b:03:ab:c2:db:6b:
         14:1e:6c:94:d4:72:52:9e:f0:58:d5:e3:ee:0b:03:da:6a:76:
         30:e4:7a:d2:9a:8f:1b:a4:91:22:b2:c9:1d:e5:65:02:9a:ef:
         ce:b5:7a:18:22:39:9d:a6:2e:a7:04:aa:b1:b7:5f:bd:0d:32:
         d9:ee:28:3d:eb:c5:26:da:63:f6:e2:cd:8a:25:86:c5:e8:3b:
         68:71:8a:23:fa:29:c1:9e:fe:8f:dc:39:0a:fb:93:aa:6b:71:
         be:17:ee:f5:6e:dc:8b:18:e9:43:6c:c0:f2:e1:44:73:c5:d6:
         4d:56:ca:95:05:47:60:ef:d6:66:6f:c2:85:8c:cf:db:ab:4b:
         90:c0:f5:22:42:54:fb:2d:f9:b0:ff:70:90:4a:66:ca:82:71:
         e3:ea:97:81:ac:43:a4:3b:bd:c8:08:89:1f:13:d8:e3:fe:9a:
         64:7d:57:3f:a4:9a:8c:66:3d:be:2a:57:20:57:3b:34:88:7b:
         98:84:ff:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/SyFdv9S4Yt8G0unU6I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMmE0OWZiYTE0OWUxYTFiMTMxMzliZDAxNjAxYzg2Y2Qy
OTU4YTUwHhcNMjUwNjI5MDAwMTI5WhcNMjUwNjMwMDAwMTI5WjAzMTEwLwYDVQQD
Eyg5ZDkzODI0NzVmMWI3NGQyNjQ4MGQ5MjRhMjRjNDc1NWI5ZWJkOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZS8Uu0278VDcv9+IK/Ih24b3v7P
M145XKGfVfbQXdbAJZER2oLqt82MFjJonMCDXNgAXIN4U/qh8rdVsX22syCpv3jh
x31l4Tai3nq/zbizF0gN5VuTEY42/5Hn8xjxj6ddEvORc8TDIIht9Kx5R17oa0zG
4mpLw7y3B1EGTR7iZ4x707lIjMWWdk+yfP8ID0uBK2Yuq+1leXk+6sJx+0Lock6q
vZTf0/Xu8wqJjEPwPpIc8azwxFc6w7AYEX1kNbsaO9jtiVU1JIz15oS3Qt4cpdmb
0da0G0OxQPs3PbO9LVQT2XX3nWxMDwdoaU29LqYOrbwzqavfB3PDhCSyVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2TgkdfG3TSZIDZJKJMR1W569lKMB8GA1UdIwQY
MBaAFMsqSfuhSeGhsTE5vQFgHIbNKVilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjct
NjJkNGExZjFhNTBjLzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MTAyM2MtMjE0Ny00OWI5LWIyNjctNjJkNGExZjFhNTBj
LzEveXlwSi02Rko0YUd4TVRtOUFXQWNoczBwV0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfvBi+Ay
x86CdVMgunUC8W6qlMWEENXMDji423Q7LDXMsq1p4X2J+hfOC9HVe4ODH7pwbMAf
ZXLOOzxo5cNz9M7QGwOrwttrFB5slNRyUp7wWNXj7gsD2mp2MOR60pqPG6SRIrLJ
HeVlAprvzrV6GCI5naYupwSqsbdfvQ0y2e4oPevFJtpj9uLNiiWGxeg7aHGKI/op
wZ7+j9w5CvuTqmtxvhfu9W7cixjpQ2zA8uFEc8XWTVbKlQVHYO/WZm/ChYzP26tL
kMD1IkJU+y35sP9wkEpmyoJx4+qXgaxDpDu9yAiJHxPY4/6aZH1XP6SajGY9vipX
IFc7NIh7mIT/ng==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:03:13 2025 by rpki-client