Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File:                     YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier:          ncEX3ZZFAqkXHydbVe/hC2HjnevFpeQ+K0a/Zlf9VNk=
Subject key identifier:   A9:C0:F5:E7:80:B6:37:44:41:BD:5F:D9:25:69:B3:C5:BE:E6:CE:CB
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer:       /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial:       0197B82128FE13CA80A86D1C6BE2271BF66E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 20:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:10 +0000
Files and hashes:         1: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: D+jWoXe0w97ZJPnbgsRYBRuNjrWXJaIvuHGFxe4/Jok=)
                          2: bdP3lbH5ZQAyroCoiOKXaEW3gls.roa (hash: cDp8fKJxsr66s5SbMWdrl57QdYSD9f5YI04JxjPak0U=)
                          3: qiJ5Co2COWp43yOD01u1VY4pCJY.roa (hash: Anp0UBOibdiSB6xGLwvRtwG1gQPGc4uydYTJppvlKoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:28:fe:13:ca:80:a8:6d:1c:6b:e2:27:1b:f6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
        Validity
            Not Before: Jun 28 20:01:10 2025 GMT
            Not After : Jun 29 20:01:10 2025 GMT
        Subject: CN=a9c0f5e780b6374441bd5fd92569b3c5bee6cecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:3a:0e:bc:da:d1:af:1d:b9:50:8f:16:43:
                    7a:45:a2:e9:46:3d:4d:40:34:91:bc:c0:65:00:5e:
                    00:9c:17:2c:ad:3b:d6:39:04:a7:ee:41:53:36:c6:
                    ed:61:da:b4:05:d8:7e:42:5e:2d:ad:6d:bb:88:0a:
                    65:10:b5:14:4f:26:a1:94:ac:67:47:75:70:52:e6:
                    36:ba:ac:47:84:e2:80:bb:86:1c:91:e6:2a:36:11:
                    ec:0b:de:0c:22:bf:de:8b:ba:0f:a8:11:5d:19:4e:
                    e7:be:99:d0:b1:50:b3:9f:24:c5:6b:6b:f4:ac:a5:
                    f7:6a:7a:3a:e8:4d:02:38:ae:e4:1f:c5:a1:92:0d:
                    3b:12:f1:c1:6e:a9:fa:fe:89:6a:34:b7:d2:ab:55:
                    a1:53:ed:88:a6:61:87:53:14:8d:c0:1f:c4:33:bc:
                    fd:64:29:c4:00:ae:13:2c:9d:67:d2:40:00:6f:10:
                    1d:0c:f2:39:eb:c9:a3:1e:7b:af:85:87:57:3b:bf:
                    9f:57:ca:f5:06:d7:46:91:e8:cd:8b:e0:45:c9:47:
                    4d:3f:52:19:1b:e7:7f:4d:e5:37:e2:4f:4d:0b:f3:
                    32:b8:09:f7:5e:ac:69:6e:fc:98:1d:62:00:5f:7e:
                    83:45:0f:29:1c:8e:f5:e1:c4:75:23:d2:77:6b:08:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C0:F5:E7:80:B6:37:44:41:BD:5F:D9:25:69:B3:C5:BE:E6:CE:CB
            X509v3 Authority Key Identifier:
                keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:69:54:41:d1:ea:3b:69:8e:28:da:0b:2e:d2:5d:08:e7:b2:
         0e:41:53:d2:03:c5:2a:cb:46:4a:15:2c:2b:b8:77:7d:73:69:
         a9:7c:2e:9a:4e:99:6f:2f:de:b9:49:fd:7d:83:8b:d4:79:90:
         cb:07:fd:5f:a7:98:ec:0a:10:33:2e:62:09:53:85:10:dc:33:
         7e:a9:a2:43:35:cf:87:a2:ce:1f:2c:84:d0:3a:46:fd:b4:dd:
         d5:49:2d:68:69:29:1b:b4:00:2b:f2:0e:a6:1c:d3:1e:03:63:
         12:cd:7a:24:32:fd:dc:9c:10:7e:0e:df:d5:2c:c4:1f:e0:6f:
         17:35:21:26:86:f7:b9:ca:26:22:50:45:4d:1d:75:3d:4d:52:
         3d:69:63:1a:a4:17:16:89:fa:f7:ed:0f:ba:12:16:40:3c:b4:
         ad:4c:5b:fc:c3:20:8a:74:44:90:f3:e9:a9:89:3f:e8:0e:8a:
         c8:28:30:2e:1f:5a:42:f6:e4:5c:b7:e0:a8:82:0e:10:58:1a:
         67:d9:c4:7e:2c:3a:26:ac:53:85:93:55:f7:08:4a:56:8f:b5:
         57:ce:6c:27:1b:37:0c:2f:ff:11:06:79:4a:06:b3:b9:13:d2:
         38:25:51:a2:84:a5:2e:dd:cb:e2:67:16:2c:1e:6d:5a:07:a8:
         1c:35:6b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ISj+E8qAqG0ca+InG/ZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMWFjYTVmOWExZGNmYTE5NzA0ZDFmMDM3N2YxYjlmZTkx
NDVlMDgwHhcNMjUwNjI4MjAwMTEwWhcNMjUwNjI5MjAwMTEwWjAzMTEwLwYDVQQD
EyhhOWMwZjVlNzgwYjYzNzQ0NDFiZDVmZDkyNTY5YjNjNWJlZTZjZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqU6Drza0a8duVCPFkN6RaLpRj1N
QDSRvMBlAF4AnBcsrTvWOQSn7kFTNsbtYdq0Bdh+Ql4trW27iAplELUUTyahlKxn
R3VwUuY2uqxHhOKAu4YckeYqNhHsC94MIr/ei7oPqBFdGU7nvpnQsVCznyTFa2v0
rKX3ano66E0COK7kH8Whkg07EvHBbqn6/olqNLfSq1WhU+2IpmGHUxSNwB/EM7z9
ZCnEAK4TLJ1n0kAAbxAdDPI568mjHnuvhYdXO7+fV8r1BtdGkejNi+BFyUdNP1IZ
G+d/TeU34k9NC/MyuAn3XqxpbvyYHWIAX36DRQ8pHI714cR1I9J3awinPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnA9eeAtjdEQb1f2SVps8W+5s7LMB8GA1UdIwQY
MBaAFGMayl+aHc+hlwTR8Dd/G5/pFF4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTkt
ZDJiMDJhNDAzYzdiLzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc3NWMtZGEyZS00ZDdkLTgwMTktZDJiMDJhNDAzYzdi
LzEvWXhyS1g1b2R6NkdYQk5Id04zOGJuLWtVWGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmlUQdHq
O2mOKNoLLtJdCOeyDkFT0gPFKstGShUsK7h3fXNpqXwumk6Zby/euUn9fYOL1HmQ
ywf9X6eY7AoQMy5iCVOFENwzfqmiQzXPh6LOHyyE0DpG/bTd1UktaGkpG7QAK/IO
phzTHgNjEs16JDL93JwQfg7f1SzEH+BvFzUhJob3ucomIlBFTR11PU1SPWljGqQX
Fon69+0PuhIWQDy0rUxb/MMginREkPPpqYk/6A6KyCgwLh9aQvbkXLfgqIIOEFga
Z9nEfiw6JqxThZNV9whKVo+1V85sJxs3DC//EQZ5SgazuRPSOCVRooSlLt3L4mcW
LB5tWgeoHDVrGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:55 2025 by rpki-client