Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          R/1ioTn94ee3QOZFGeBzYwjIA2Pj1jcGrzm9KXedH+0=
Subject key identifier:   98:3A:75:E8:A4:BB:EC:05:63:2A:F3:23:32:67:02:5B:AF:17:A2:D2
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       0197BB21E0FBE3B1AE7B559E06E63D53435E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 10:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 10:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 10:00:49 +0000
Files and hashes:         1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: g88YDjOfE2IkjqUfDW2AjL1QtevD2MxhWXJSnHt14x8=)
                          2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:21:e0:fb:e3:b1:ae:7b:55:9e:06:e6:3d:53:43:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Jun 29 10:00:49 2025 GMT
            Not After : Jun 30 10:00:49 2025 GMT
        Subject: CN=983a75e8a4bbec05632af3233267025baf17a2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:81:b2:dc:25:05:ab:55:20:a9:6e:16:e3:
                    9d:1d:bc:bb:49:d6:6b:e6:0f:eb:d9:c0:7c:e6:41:
                    f4:9a:44:18:ba:f2:64:47:a3:a3:09:1a:f3:ea:b5:
                    45:67:37:30:8f:45:03:45:31:46:e9:45:19:a4:b9:
                    6e:77:29:72:d8:41:19:52:c2:a2:44:26:8b:22:49:
                    9c:33:72:a4:34:ff:d0:33:ec:57:e7:a2:4a:95:91:
                    52:be:df:9d:4c:ac:e1:0b:8d:bf:84:2a:54:7e:a4:
                    15:7d:fd:88:bc:c9:5f:22:dc:e2:8c:51:bb:7b:de:
                    a2:0a:6a:6c:3f:6c:73:43:b4:e5:07:c0:cd:a9:16:
                    b7:c4:44:35:b3:c0:a1:93:dd:13:0d:07:37:a5:0d:
                    59:23:08:14:2e:ee:4a:cd:8d:8b:63:7b:9b:af:a8:
                    4d:4d:57:a6:61:83:39:b2:a0:29:dc:bf:40:2b:fc:
                    c1:18:3d:35:50:10:e5:a2:3c:b3:5d:b7:5e:2d:60:
                    79:bd:4a:11:72:a1:4c:f0:9e:4e:fe:6a:70:4e:3c:
                    ab:f5:c1:ca:53:8e:53:1a:38:d4:b2:d6:c4:6b:0e:
                    07:24:65:ad:89:8b:01:91:b0:ce:9b:0e:af:2f:e8:
                    46:15:17:27:23:e3:2f:75:4c:59:32:1a:dc:c5:77:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3A:75:E8:A4:BB:EC:05:63:2A:F3:23:32:67:02:5B:AF:17:A2:D2
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:16:e1:0f:d3:ae:13:08:9a:48:79:0c:0d:73:e2:fc:ce:
         61:e6:44:c6:8f:b7:54:8a:b3:11:bb:2a:a6:a7:9b:25:01:32:
         38:99:16:4e:7f:a2:7d:25:96:00:b0:bc:4d:0b:aa:27:c8:a6:
         f2:d3:ba:a3:85:c4:6d:78:ca:9f:7f:86:34:67:b3:76:3a:1e:
         1a:07:fc:bb:27:03:e1:07:6e:89:d8:e9:0f:1b:a1:c0:a7:48:
         90:45:53:0d:ec:4f:a2:24:dd:91:c2:35:39:95:8b:0b:6d:c3:
         78:a8:68:e6:70:0b:09:1c:b8:5e:96:e6:1e:e5:68:ca:a1:ad:
         ad:9b:7f:50:48:5c:db:77:1d:2d:43:03:ee:ce:3c:7b:5b:fc:
         6f:da:c3:83:d2:46:fe:4e:25:6a:6f:5a:bd:f0:57:14:49:12:
         70:8e:a9:f6:d1:d5:25:8f:58:20:a2:0c:a4:78:9e:5b:b3:dc:
         7b:74:27:6a:80:7a:88:aa:5c:43:66:e4:31:7b:a1:a2:7f:de:
         68:49:8b:89:10:f3:7f:41:2a:f1:08:59:a3:53:cc:cc:8c:ce:
         b4:46:fd:d8:fd:84:f9:6c:7a:23:37:e7:0b:19:4c:ca:f5:5a:
         ea:15:b5:4f:4c:0d:53:45:a0:db:d4:0d:85:2d:20:85:30:c2:
         0b:a1:38:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7IeD747Gue1WeBuY9U0NeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYmM5ZTkxMDMxNmJlMmYwNDMzYWE5NTM5MmNkNjczOWRj
MjZiODYwHhcNMjUwNjI5MTAwMDQ5WhcNMjUwNjMwMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg5ODNhNzVlOGE0YmJlYzA1NjMyYWYzMjMzMjY3MDI1YmFmMTdhMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZqBstwlBatVIKluFuOdHby7SdZr
5g/r2cB85kH0mkQYuvJkR6OjCRrz6rVFZzcwj0UDRTFG6UUZpLludyly2EEZUsKi
RCaLIkmcM3KkNP/QM+xX56JKlZFSvt+dTKzhC42/hCpUfqQVff2IvMlfItzijFG7
e96iCmpsP2xzQ7TlB8DNqRa3xEQ1s8Chk90TDQc3pQ1ZIwgULu5KzY2LY3ubr6hN
TVemYYM5sqAp3L9AK/zBGD01UBDlojyzXbdeLWB5vUoRcqFM8J5O/mpwTjyr9cHK
U45TGjjUstbEaw4HJGWtiYsBkbDOmw6vL+hGFRcnI+MvdUxZMhrcxXfexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJg6deiku+wFYyrzIzJnAluvF6LSMB8GA1UdIwQY
MBaAFP28npEDFr4vBDOqlTks1nOdwmuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYt
YTE0NmQ2MDQ3MzM3LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kOGU1YWEtYjExOS00NTllLTkzZjYtYTE0NmQ2MDQ3MzM3
LzEvX2J5ZWtRTVd2aThFTTZxVk9TeldjNTNDYTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUAW4Q/T
rhMImkh5DA1z4vzOYeZExo+3VIqzEbsqpqebJQEyOJkWTn+ifSWWALC8TQuqJ8im
8tO6o4XEbXjKn3+GNGezdjoeGgf8uycD4QduidjpDxuhwKdIkEVTDexPoiTdkcI1
OZWLC23DeKho5nALCRy4XpbmHuVoyqGtrZt/UEhc23cdLUMD7s48e1v8b9rDg9JG
/k4lam9avfBXFEkScI6p9tHVJY9YIKIMpHieW7Pce3QnaoB6iKpcQ2bkMXuhon/e
aEmLiRDzf0Eq8QhZo1PMzIzOtEb92P2E+Wx6IzfnCxlMyvVa6hW1T0wNU0Wg29QN
hS0ghTDCC6E4iQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:27:41 2025 by rpki-client