Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          Ci2dKmy5PvP6PdKlpjyjNJwjHUIiIlLjYuM0efEeQ58=
Subject key identifier:   2A:D1:15:83:87:17:40:37:70:FA:F3:37:25:52:27:D1:68:41:95:81
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       0198D473E4ED10538C2F60A0D66AB6AE0B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          03EE
Signing time:             Sat 23 Aug 2025 01:03:41 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:41 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:41 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: Inv/mz9fWEhe99K7EBEXrmC8wAtauDFrWftDjyXPDWs=)
                          2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e4:ed:10:53:8c:2f:60:a0:d6:6a:b6:ae:0b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Aug 23 01:03:41 2025 GMT
            Not After : Aug 24 01:03:41 2025 GMT
        Subject: CN=2ad115838717403770faf337255227d168419581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:13:b8:8d:f7:51:9f:45:e5:d4:74:22:16:af:
                    f0:8d:eb:a3:af:4e:ab:c7:1d:47:b8:78:7f:bf:3d:
                    13:c9:09:3b:57:b1:4a:c7:5f:20:f5:75:64:30:d5:
                    97:d7:0d:e7:e2:b5:78:01:28:22:f8:81:08:41:14:
                    fa:93:11:3c:72:f0:86:9c:46:28:37:72:46:44:c7:
                    14:7f:d7:eb:42:73:5b:26:42:dc:e4:70:34:8e:0a:
                    16:28:84:c4:f3:69:f7:ac:a2:89:52:81:f7:69:85:
                    42:ff:36:d1:6b:bb:3e:c3:ac:1f:f1:ba:c4:55:6c:
                    b2:2b:26:dc:71:5d:5b:bd:8f:a3:aa:5d:e3:71:19:
                    90:aa:97:a5:1c:af:40:95:de:c3:8f:f5:41:70:40:
                    34:eb:e3:ca:5a:42:cf:fc:4d:53:a3:02:2e:e5:52:
                    61:8d:12:18:d6:1c:1f:7e:38:87:e0:7e:e3:08:52:
                    08:6b:32:1f:b1:ef:c5:09:f3:50:56:34:6a:25:d2:
                    a9:bb:18:8c:f2:7c:e0:b0:69:b8:2b:a7:42:76:28:
                    72:e5:04:b2:cc:10:e6:ca:e2:f7:98:c3:3b:4a:06:
                    74:eb:df:f1:34:2e:f6:c7:d7:46:2a:e2:07:d6:ac:
                    65:91:3c:9e:f0:f7:fc:1b:77:cf:a7:33:c2:c2:8f:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:15:83:87:17:40:37:70:FA:F3:37:25:52:27:D1:68:41:95:81
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:0c:53:21:30:bb:bf:7d:7a:59:f1:07:28:23:9c:43:59:
         17:12:b8:9e:74:d8:67:99:dc:fc:60:f6:60:6d:f5:c3:83:bc:
         19:83:51:57:fa:5b:e6:a0:5e:9a:32:b7:b4:b5:fa:91:50:95:
         06:33:28:66:28:34:f6:74:19:b5:90:88:94:52:06:2e:54:15:
         92:e1:70:a3:5b:ee:68:b7:28:2a:4f:70:07:23:c5:7c:6e:f3:
         f1:9f:8d:c1:1b:70:ab:43:c4:20:24:62:03:6b:e6:06:ab:22:
         6f:01:99:a5:20:af:db:78:69:61:53:40:c7:cb:27:5d:e4:02:
         1a:a3:3d:1f:e9:e9:1b:12:67:11:1e:c2:fb:00:a0:cd:b0:e0:
         b5:d1:df:fd:20:2d:a0:5b:bc:6c:8d:27:30:ab:07:c3:58:b3:
         84:b4:26:f2:34:a4:7f:01:08:67:3d:1d:9e:7a:0c:c3:5a:1e:
         86:f1:10:e5:d0:f2:61:84:23:95:2d:e7:61:ff:d1:82:8f:d2:
         a0:fd:d5:89:5c:84:a5:c1:43:58:89:37:e2:c4:20:8f:a4:af:
         8b:41:cc:a1:9e:a1:d0:d6:2d:e0:61:1f:68:24:f9:61:9f:75:
         42:1e:02:1f:84:4f:20:99:ee:43:b3:42:aa:e4:82:ba:95:34:
         94:4f:72:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+TtEFOML2Cg1mq2rguLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzdkMmZjYmQ0M2E1MWU1MzFiYzk4YmZhYjVlYWY3MTkw
MDkwYWYwHhcNMjUwODIzMDEwMzQxWhcNMjUwODI0MDEwMzQxWjAzMTEwLwYDVQQD
EygyYWQxMTU4Mzg3MTc0MDM3NzBmYWYzMzcyNTUyMjdkMTY4NDE5NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xO4jfdRn0Xl1HQiFq/wjeujr06r
xx1HuHh/vz0TyQk7V7FKx18g9XVkMNWX1w3n4rV4ASgi+IEIQRT6kxE8cvCGnEYo
N3JGRMcUf9frQnNbJkLc5HA0jgoWKITE82n3rKKJUoH3aYVC/zbRa7s+w6wf8brE
VWyyKybccV1bvY+jql3jcRmQqpelHK9Ald7Dj/VBcEA06+PKWkLP/E1TowIu5VJh
jRIY1hwffjiH4H7jCFIIazIfse/FCfNQVjRqJdKpuxiM8nzgsGm4K6dCdihy5QSy
zBDmyuL3mMM7SgZ069/xNC72x9dGKuIH1qxlkTye8Pf8G3fPpzPCwo9znwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrRFYOHF0A3cPrzNyVSJ9FoQZWBMB8GA1UdIwQY
MBaAFGE30vy9Q6UeUxvJi/q16vcZAJCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYt
NzMyNjUzYzRmZTJjLzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMjlmZjItOGU2My00ZTZjLThhZmYtNzMyNjUzYzRmZTJj
LzEvWVRmU19MMURwUjVURzhtTC1yWHE5eGtBa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtIMUyEw
u799elnxBygjnENZFxK4nnTYZ5nc/GD2YG31w4O8GYNRV/pb5qBemjK3tLX6kVCV
BjMoZig09nQZtZCIlFIGLlQVkuFwo1vuaLcoKk9wByPFfG7z8Z+NwRtwq0PEICRi
A2vmBqsibwGZpSCv23hpYVNAx8snXeQCGqM9H+npGxJnER7C+wCgzbDgtdHf/SAt
oFu8bI0nMKsHw1izhLQm8jSkfwEIZz0dnnoMw1oehvEQ5dDyYYQjlS3nYf/Rgo/S
oP3ViVyEpcFDWIk34sQgj6Svi0HMoZ6h0NYt4GEfaCT5YZ91Qh4CH4RPIJnuQ7NC
quSCupU0lE9yQw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:52 2025 by rpki-client