Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          o5Sc7N6o7Iw8fl2Uz9/sBrLvjqLiqtrYhZTHB+b3WpQ=
Subject key identifier:   27:D6:40:19:6F:31:03:C4:47:40:25:29:8C:DD:C1:F2:1B:A6:E2:12
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       0198D77385466A8020E23965CAA43D2CAA97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          04BF
Signing time:             Sat 23 Aug 2025 15:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:08 +0000
Files and hashes:         1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: uMyClw/IF71RWleeigEBEcTvMo+fiY0QQoZsb+4skVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:85:46:6a:80:20:e2:39:65:ca:a4:3d:2c:aa:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Aug 23 15:02:08 2025 GMT
            Not After : Aug 24 15:02:08 2025 GMT
        Subject: CN=27d640196f3103c4474025298cddc1f21ba6e212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:75:cb:75:53:95:7d:84:cd:68:cd:15:84:24:
                    22:ab:eb:4a:ec:41:89:95:c0:2d:97:bc:b7:ba:b6:
                    8b:28:22:5a:41:c8:e1:07:6f:49:c5:d2:5f:66:d5:
                    fa:b8:63:e8:45:ff:e6:47:89:15:d7:61:04:8f:26:
                    47:54:e7:d1:89:13:d1:16:dd:ee:5b:3a:96:19:c3:
                    65:4f:20:f6:3c:ab:e6:9e:61:11:c2:aa:91:be:f8:
                    a8:57:12:57:97:98:2b:ca:0e:aa:7d:0f:4e:15:91:
                    92:c0:ca:96:32:c0:d0:88:2c:41:fb:34:eb:3a:37:
                    ab:9b:8d:eb:21:e6:06:7f:81:e6:e5:5e:1b:b7:31:
                    d7:f0:94:d6:bf:5e:66:7c:aa:72:ee:2d:e4:7a:16:
                    2f:40:10:57:f0:89:2f:83:2b:ef:19:ac:d6:d9:3e:
                    d3:c4:11:0d:33:8a:c6:f8:c4:da:cd:7b:9f:a5:bb:
                    3d:07:e9:48:71:39:d0:2d:33:49:36:24:0c:b3:2f:
                    76:ed:89:41:6b:bb:5d:1e:4a:1c:70:b4:7b:cb:b6:
                    1d:1b:25:c5:dd:82:17:4a:16:87:e1:e2:01:5e:1a:
                    01:63:7e:0c:71:43:0f:65:8f:50:cb:b2:88:77:64:
                    f1:ff:e6:d7:04:88:4f:c1:ba:c6:18:f9:ba:cf:11:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D6:40:19:6F:31:03:C4:47:40:25:29:8C:DD:C1:F2:1B:A6:E2:12
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:5c:13:1a:e3:f1:e5:f3:e2:f7:67:e4:f7:e0:90:c7:4e:
         1c:dd:c2:97:56:3b:1f:2c:c9:11:76:34:e5:41:44:90:a8:17:
         27:40:82:e8:81:c4:aa:31:b4:07:28:9f:c9:76:09:7a:b9:f0:
         51:04:50:35:dd:fe:5e:a2:4f:e5:21:64:00:ec:6c:66:53:cb:
         02:f9:ec:59:cd:39:e7:30:8f:7f:73:42:5a:8a:c7:e4:3a:e4:
         3a:03:7e:de:77:42:49:d1:72:12:f1:ad:f9:07:59:bd:8a:c7:
         d6:a6:10:29:a7:dd:21:2d:16:a7:c3:59:de:02:b7:cf:d1:af:
         7c:f8:cd:91:9a:85:5a:ed:f5:77:da:ab:8c:b6:72:f9:77:2d:
         07:e5:fb:e5:5e:6e:11:6b:8d:70:db:be:47:15:69:d4:8b:39:
         0f:28:46:ea:58:5a:2a:fd:12:0f:c6:5c:65:20:61:76:f2:13:
         4c:7e:83:db:c1:ca:3e:e8:4e:71:17:bf:ae:b0:91:7b:55:b3:
         22:52:47:d9:14:5f:cf:b2:bd:32:38:f2:88:75:67:80:aa:59:
         3e:df:c1:2c:b2:3d:29:4b:67:27:d1:2b:68:5f:47:1b:d7:be:
         9f:b0:f3:31:c2:38:ab:df:d6:bd:81:a0:be:40:d5:55:ea:c9:
         31:c8:f3:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc4VGaoAg4jllyqQ9LKqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmE3ZmRmY2ViYzA3YTI3MmRiODljZGFmODc3ODcwYzY4
N2UwNGYwHhcNMjUwODIzMTUwMjA4WhcNMjUwODI0MTUwMjA4WjAzMTEwLwYDVQQD
EygyN2Q2NDAxOTZmMzEwM2M0NDc0MDI1Mjk4Y2RkYzFmMjFiYTZlMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83XLdVOVfYTNaM0VhCQiq+tK7EGJ
lcAtl7y3uraLKCJaQcjhB29JxdJfZtX6uGPoRf/mR4kV12EEjyZHVOfRiRPRFt3u
WzqWGcNlTyD2PKvmnmERwqqRvvioVxJXl5gryg6qfQ9OFZGSwMqWMsDQiCxB+zTr
Ojerm43rIeYGf4Hm5V4btzHX8JTWv15mfKpy7i3kehYvQBBX8IkvgyvvGazW2T7T
xBENM4rG+MTazXufpbs9B+lIcTnQLTNJNiQMsy927YlBa7tdHkoccLR7y7YdGyXF
3YIXShaH4eIBXhoBY34McUMPZY9Qy7KId2Tx/+bXBIhPwbrGGPm6zxGmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfWQBlvMQPER0AlKYzdwfIbpuISMB8GA1UdIwQY
MBaAFGD6f9/OvAeictuJza+HeHDGh+BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMt
ZjllYzMwY2I5YjRiLzEvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMtZjllYzMwY2I5YjRi
LzEvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWpcExrj
8eXz4vdn5PfgkMdOHN3Cl1Y7HyzJEXY05UFEkKgXJ0CC6IHEqjG0ByifyXYJernw
UQRQNd3+XqJP5SFkAOxsZlPLAvnsWc055zCPf3NCWorH5DrkOgN+3ndCSdFyEvGt
+QdZvYrH1qYQKafdIS0Wp8NZ3gK3z9GvfPjNkZqFWu31d9qrjLZy+XctB+X75V5u
EWuNcNu+RxVp1Is5DyhG6lhaKv0SD8ZcZSBhdvITTH6D28HKPuhOcRe/rrCRe1Wz
IlJH2RRfz7K9MjjyiHVngKpZPt/BLLI9KUtnJ9EraF9HG9e+n7DzMcI4q9/WvYGg
vkDVVerJMcjztQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:13 2025 by rpki-client