Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          BqAOQOlEYD4v1Wm28OIvXkl3rga+jK+4Pf6/IWRo1bo=
Subject key identifier:   6F:18:8D:43:EC:B3:20:A8:AA:BB:A1:19:4B:3A:99:C6:80:8B:BE:CB
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       0198D5F1BD5F05269A8507CD2A7779A8B769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          05B8
Signing time:             Sat 23 Aug 2025 08:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:46 +0000
Files and hashes:         1: C8L1z84_2r_lzc2Lk6eIdrAoayw.roa (hash: phPZynXPFJJG35B8r3oO6DnbXPe6XC6xJ8y/JrqkIqE=)
                          2: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
                          3: Whud6EXW8Ij7woDF4rxVqwrjMn8.roa (hash: iWFxnOQlS0I23+Za/Ck33I86kKRns0q+3mmBdrj/6hQ=)
                          4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
                          5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
                          6: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: kwlBjdigzHj4bQaeOxZL30XgCDi75KBsmCTph1Yrzdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:bd:5f:05:26:9a:85:07:cd:2a:77:79:a8:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Aug 23 08:00:46 2025 GMT
            Not After : Aug 24 08:00:46 2025 GMT
        Subject: CN=6f188d43ecb320a8aabba1194b3a99c6808bbecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:a5:78:ac:b8:64:3b:34:c0:5f:da:d1:72:
                    57:92:8c:a7:de:df:b9:7f:2b:2b:ed:fa:a2:2b:75:
                    c4:a7:c6:99:4e:22:95:25:61:16:43:2d:f3:c7:db:
                    52:f9:5b:ec:7e:6d:08:bd:d3:99:7d:62:f4:40:ed:
                    36:76:9c:82:62:ac:8c:2c:d1:ba:80:85:88:c9:0f:
                    82:17:39:2a:95:34:35:35:37:02:89:b8:36:86:76:
                    eb:eb:9b:b1:ec:aa:18:af:36:56:a8:97:f0:a3:cf:
                    6b:2c:48:f6:55:b9:e9:fd:10:97:70:d1:2c:0f:ca:
                    8e:d0:81:61:7a:7c:3a:8b:91:51:20:e7:0a:50:26:
                    cf:e7:22:0e:b6:d7:b8:7a:2c:77:38:7d:11:12:68:
                    d3:56:80:f0:14:94:6c:f5:ec:23:4f:39:a8:41:de:
                    12:3a:25:87:88:a7:9d:18:43:a3:ed:53:7c:2b:54:
                    1f:23:cd:2d:38:49:a5:53:9b:79:15:4f:e9:db:5d:
                    f3:6c:10:18:f0:7f:17:13:a9:3f:a2:9f:52:6d:be:
                    9e:1f:bc:ed:f3:5e:31:5d:0d:88:0d:62:8f:db:5a:
                    42:47:c3:9c:2a:0b:08:c3:b9:d2:59:90:e3:2f:21:
                    4a:a7:43:95:be:bd:af:39:f6:31:b1:1b:84:f2:34:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:18:8D:43:EC:B3:20:A8:AA:BB:A1:19:4B:3A:99:C6:80:8B:BE:CB
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:db:4c:99:4b:c1:01:92:06:03:ca:54:ab:24:71:bb:1f:
         fc:10:54:15:1e:e4:34:ac:b2:e0:e4:e3:b8:d4:26:a4:8f:3f:
         19:2d:47:8d:e8:7c:ca:76:f1:fd:4b:b9:9c:90:78:22:9e:c5:
         05:11:5e:3d:1b:ef:49:7c:f4:9a:7d:32:6a:28:f4:4f:bc:74:
         40:d8:9f:29:39:57:92:9e:68:82:61:78:91:64:7a:a3:c1:97:
         56:2a:42:3d:af:d4:4d:f9:06:52:48:79:25:0e:ab:c2:6e:a4:
         38:79:0f:f6:d2:61:2d:55:c0:33:79:13:ee:56:23:cb:fe:f7:
         8f:d3:28:7b:24:d2:4d:0d:a6:2b:e2:04:7c:6a:01:c3:10:15:
         45:54:b0:b9:4a:77:fd:14:82:4e:7f:fb:06:ab:47:6e:90:9f:
         65:c4:34:90:5a:ae:c7:1d:f4:ed:a6:04:ea:58:22:8e:0f:39:
         58:1a:2a:ea:1a:cb:d1:58:bf:e3:0c:54:00:fb:69:7a:70:bc:
         1a:3f:10:5f:25:0b:61:2d:64:da:70:df:3a:03:88:6a:9b:bd:
         9e:2c:ac:4d:57:1c:05:e6:e5:3a:ad:d8:3b:b5:f6:52:03:fa:
         89:8b:de:f5:9c:4e:7f:25:55:17:00:0b:92:03:6c:74:6e:1f:
         5a:dd:3d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8b1fBSaahQfNKnd5qLdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5
YTI2OTQwHhcNMjUwODIzMDgwMDQ2WhcNMjUwODI0MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg2ZjE4OGQ0M2VjYjMyMGE4YWFiYmExMTk0YjNhOTljNjgwOGJiZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq6leKy4ZDs0wF/a0XJXkoyn3t+5
fysr7fqiK3XEp8aZTiKVJWEWQy3zx9tS+Vvsfm0IvdOZfWL0QO02dpyCYqyMLNG6
gIWIyQ+CFzkqlTQ1NTcCibg2hnbr65ux7KoYrzZWqJfwo89rLEj2Vbnp/RCXcNEs
D8qO0IFhenw6i5FRIOcKUCbP5yIOtte4eix3OH0REmjTVoDwFJRs9ewjTzmoQd4S
OiWHiKedGEOj7VN8K1QfI80tOEmlU5t5FU/p213zbBAY8H8XE6k/op9Sbb6eH7zt
814xXQ2IDWKP21pCR8OcKgsIw7nSWZDjLyFKp0OVvr2vOfYxsRuE8jSkywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8YjUPssyCoqruhGUs6mcaAi77LMB8GA1UdIwQY
MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt
ODM4ZWJmNDEyYTYxLzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx
LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/DbTJlL
wQGSBgPKVKskcbsf/BBUFR7kNKyy4OTjuNQmpI8/GS1Hjeh8ynbx/Uu5nJB4Ip7F
BRFePRvvSXz0mn0yaij0T7x0QNifKTlXkp5ogmF4kWR6o8GXVipCPa/UTfkGUkh5
JQ6rwm6kOHkP9tJhLVXAM3kT7lYjy/73j9MoeyTSTQ2mK+IEfGoBwxAVRVSwuUp3
/RSCTn/7BqtHbpCfZcQ0kFquxx307aYE6lgijg85WBoq6hrL0Vi/4wxUAPtpenC8
Gj8QXyULYS1k2nDfOgOIapu9niysTVccBeblOq3YO7X2UgP6iYve9ZxOfyVVFwAL
kgNsdG4fWt09yg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:30 2025 by rpki-client