Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          AaTPU0U0UFdgp5ZZeZPVSyTM8SOzM3szBYXs+XqnGAY=
Subject key identifier:   93:C6:47:DB:26:F1:BA:59:B8:F9:59:B8:D0:DA:77:9B:C9:8E:BC:26
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       0198D4E004CB83B4E7661AD9A02059DF20BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0AEF
Signing time:             Sat 23 Aug 2025 03:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:47 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: /bK1k7xDhYOZII64eP09UurOHYwZ6LrYLyEo5MwnRss=)
                          2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:04:cb:83:b4:e7:66:1a:d9:a0:20:59:df:20:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: Aug 23 03:01:47 2025 GMT
            Not After : Aug 24 03:01:47 2025 GMT
        Subject: CN=93c647db26f1ba59b8f959b8d0da779bc98ebc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:16:a5:cf:f6:7d:5a:da:96:7f:76:bd:14:
                    f9:d6:39:34:64:b9:5d:f7:03:82:70:e3:72:31:b0:
                    15:e4:8d:f6:27:a8:e1:39:50:6f:95:16:3c:bc:8d:
                    74:d5:d4:c0:fb:18:fe:97:9b:3f:7f:50:4c:b8:fe:
                    90:6d:7f:e4:73:78:e3:f6:80:50:c3:f7:c9:cf:7c:
                    96:0c:39:fa:2f:b6:a1:c1:9f:8a:39:0b:d6:b8:cc:
                    18:34:70:0e:dc:d9:3d:b5:12:3b:27:34:9c:8b:95:
                    f2:4a:9c:7f:e0:9f:8e:ca:98:d7:be:4b:3c:9d:8b:
                    0f:ab:56:63:e3:36:c8:d9:9f:6b:51:e2:ee:fd:cc:
                    ef:30:4f:27:ba:fc:5b:d6:8e:e8:33:45:0b:c9:d5:
                    bf:6c:14:c8:2d:cc:02:d4:39:72:ed:73:f9:f0:d6:
                    80:d3:52:fd:34:1b:fb:da:d0:fd:57:74:6e:29:a6:
                    d5:84:12:8f:fb:f5:45:15:7a:2f:44:e7:d6:07:01:
                    20:0d:2e:9d:a9:22:da:49:a9:c2:a4:8b:98:bc:fc:
                    93:2c:8d:b0:8e:91:fc:1f:82:09:93:70:ad:c1:c3:
                    8e:98:9e:7a:dc:d4:db:7e:3b:58:43:e1:9f:3a:0e:
                    fa:88:66:ba:fa:49:7e:76:7d:bd:07:32:16:52:47:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C6:47:DB:26:F1:BA:59:B8:F9:59:B8:D0:DA:77:9B:C9:8E:BC:26
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:21:6e:7e:84:d1:f7:16:0d:20:38:f3:fb:c0:ea:6c:af:
         7b:05:79:a1:9f:63:c5:9b:ca:a9:40:4e:8b:30:e4:d9:95:89:
         2a:2b:ae:c0:83:19:ea:cf:70:ef:98:a8:b8:80:74:dc:a4:e7:
         c7:92:aa:5a:fc:41:c9:13:8f:5a:8b:f3:aa:83:a3:bd:b1:73:
         6a:6e:d1:e7:56:de:0a:21:d6:ef:ab:ca:af:64:77:1b:1e:08:
         ab:29:4a:bb:c9:15:ad:11:bb:45:de:db:6a:50:34:9c:9e:d0:
         5b:d7:f9:de:52:42:d8:9e:f4:79:7d:2c:20:be:19:db:34:f5:
         a9:c1:b0:3f:91:2d:89:03:89:46:78:fe:f6:8d:20:96:86:8e:
         bf:b1:f9:fe:28:57:3d:c4:77:43:b3:bb:e6:e8:f1:9f:f8:65:
         d5:5e:ef:0a:e2:ba:37:58:8d:06:1c:57:0c:44:9f:7c:ef:4a:
         07:fc:0f:7d:9f:f5:f5:df:b3:fe:f7:84:0c:fe:41:db:e9:5e:
         83:26:f4:f6:00:cc:08:8f:de:50:91:c8:28:2f:1c:19:94:b3:
         5b:66:6a:b1:83:f0:1f:48:3d:5a:ac:1e:85:00:19:42:38:29:
         01:93:21:ed:68:c4:20:f1:bd:97:d0:2b:53:7f:d3:84:ee:11:
         28:8f:10:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ATLg7TnZhrZoCBZ3yC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1
MTk1YTQwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
Eyg5M2M2NDdkYjI2ZjFiYTU5YjhmOTU5YjhkMGRhNzc5YmM5OGViYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7kWpc/2fVraln92vRT51jk0ZLld
9wOCcONyMbAV5I32J6jhOVBvlRY8vI101dTA+xj+l5s/f1BMuP6QbX/kc3jj9oBQ
w/fJz3yWDDn6L7ahwZ+KOQvWuMwYNHAO3Nk9tRI7JzSci5XySpx/4J+OypjXvks8
nYsPq1Zj4zbI2Z9rUeLu/czvME8nuvxb1o7oM0ULydW/bBTILcwC1Dly7XP58NaA
01L9NBv72tD9V3RuKabVhBKP+/VFFXovROfWBwEgDS6dqSLaSanCpIuYvPyTLI2w
jpH8H4IJk3CtwcOOmJ563NTbfjtYQ+GfOg76iGa6+kl+dn29BzIWUkctIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPGR9sm8bpZuPlZuNDad5vJjrwmMB8GA1UdIwQY
MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt
ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi
LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+shbn6E
0fcWDSA48/vA6myvewV5oZ9jxZvKqUBOizDk2ZWJKiuuwIMZ6s9w75iouIB03KTn
x5KqWvxByROPWovzqoOjvbFzam7R51beCiHW76vKr2R3Gx4IqylKu8kVrRG7Rd7b
alA0nJ7QW9f53lJC2J70eX0sIL4Z2zT1qcGwP5EtiQOJRnj+9o0gloaOv7H5/ihX
PcR3Q7O75ujxn/hl1V7vCuK6N1iNBhxXDESffO9KB/wPfZ/19d+z/veEDP5B2+le
gyb09gDMCI/eUJHIKC8cGZSzW2ZqsYPwH0g9WqwehQAZQjgpAZMh7WjEIPG9l9Ar
U3/ThO4RKI8Qfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:26 2025 by rpki-client