Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier:          kmJUQfFCgEsNd0MZtnunQQTaeF5DC+hVcVqJBuXkI3s=
Subject key identifier:   75:33:7B:C7:AA:62:C0:83:12:28:8C:8F:72:A8:37:C5:AA:85:E0:6E
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer:       /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial:       0198D4DFF0F6E60877EF304320E153E6747A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:42 +0000
Files and hashes:         1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
                          2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: Jg7QV3UUuv2IhTf7/ciHhbsZvBYwgE2RnRF6R8JP3X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:f0:f6:e6:08:77:ef:30:43:20:e1:53:e6:74:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Validity
            Not Before: Aug 23 03:01:42 2025 GMT
            Not After : Aug 24 03:01:42 2025 GMT
        Subject: CN=75337bc7aa62c08312288c8f72a837c5aa85e06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:fe:54:ab:c1:22:19:9e:39:6a:b7:1a:51:
                    4d:f2:39:ac:ab:24:76:85:ac:31:d5:31:1a:c5:bd:
                    25:11:26:41:e2:48:69:b4:5f:9c:4e:c3:fa:80:9c:
                    76:b1:12:cf:3c:d4:f2:81:6a:03:3b:7d:27:b4:74:
                    57:ce:fa:6f:5d:52:38:7e:6b:f6:44:4c:82:b1:8e:
                    9b:1a:c2:a5:df:c5:af:3e:9c:a8:52:3a:50:3b:ca:
                    87:a7:3f:82:3e:31:1a:9a:63:77:e5:3f:a1:69:42:
                    13:de:21:7f:cc:b7:d3:a4:f6:e7:06:80:a9:c5:9a:
                    fa:be:23:0b:ca:f9:0a:93:b9:d6:8c:95:f9:9a:21:
                    3e:ec:b7:23:c6:8c:63:da:d3:99:14:6c:c4:62:2d:
                    53:9d:4d:cd:14:92:39:bf:13:9f:ad:31:6d:b0:cd:
                    83:6e:8c:67:df:83:7f:61:26:9d:72:f7:16:a1:d1:
                    18:d6:44:3f:73:3e:bf:2b:44:1c:5d:bb:60:5f:00:
                    0d:1d:44:83:e3:98:a5:a0:ed:ff:d3:5f:8b:c5:8c:
                    6d:bf:21:da:5c:6b:4e:51:a6:5b:85:e6:99:2c:85:
                    51:11:d1:ce:9a:b7:5a:79:01:3e:d4:b1:6d:20:33:
                    74:da:c2:af:d4:61:e8:c8:42:ce:02:a9:61:26:7c:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:7B:C7:AA:62:C0:83:12:28:8C:8F:72:A8:37:C5:AA:85:E0:6E
            X509v3 Authority Key Identifier:
                keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:45:1c:92:1c:3f:c5:fb:df:a7:a6:03:97:83:ea:5a:ea:ee:
         f9:6f:6a:14:4c:ba:bc:35:3c:be:f1:0d:e8:57:a6:d6:0e:34:
         30:0b:eb:41:62:b7:4b:51:d3:56:68:10:ad:68:8c:b3:70:3a:
         1a:07:08:c5:13:0a:a0:09:8b:2b:e9:ab:ce:f6:37:84:d2:71:
         0b:c5:e6:ce:ea:4b:fd:1c:fc:3a:f9:29:24:31:85:45:ee:31:
         ec:c0:a9:c1:2d:0e:f6:76:bc:b0:3c:30:54:1c:23:8e:68:cf:
         e0:5a:41:83:fb:cf:1d:a7:46:22:df:3c:30:c1:17:68:1f:91:
         ee:d7:e3:37:00:fe:67:68:0e:38:61:e0:76:57:0f:7b:dc:35:
         02:9f:c3:ae:bb:d4:bc:3e:8f:dd:44:f5:72:4e:64:42:a0:58:
         63:4e:a7:d3:ee:13:59:35:ec:a7:d9:94:4a:6e:5c:28:b9:08:
         6d:df:bf:0f:d5:ca:dc:89:5f:c8:9e:5b:c0:5a:e1:55:5b:18:
         1f:4c:56:dc:ea:3f:7b:22:1c:32:bf:7a:81:57:80:9b:1c:4a:
         05:ae:98:e2:88:74:d0:21:84:be:ab:d7:04:2e:bf:41:31:e5:
         54:61:4a:cd:2f:a4:dc:67:82:c4:0d:6e:09:53:99:84:0d:16:
         b3:fd:20:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3/D25gh37zBDIOFT5nR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMGMyZGFjYWZkZmE1Mzk5N2VkM2IwYTcwZGZiYzI3MGE5
MzNiZjQwHhcNMjUwODIzMDMwMTQyWhcNMjUwODI0MDMwMTQyWjAzMTEwLwYDVQQD
Eyg3NTMzN2JjN2FhNjJjMDgzMTIyODhjOGY3MmE4MzdjNWFhODVlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyr+VKvBIhmeOWq3GlFN8jmsqyR2
hawx1TEaxb0lESZB4khptF+cTsP6gJx2sRLPPNTygWoDO30ntHRXzvpvXVI4fmv2
REyCsY6bGsKl38WvPpyoUjpQO8qHpz+CPjEammN35T+haUIT3iF/zLfTpPbnBoCp
xZr6viMLyvkKk7nWjJX5miE+7Lcjxoxj2tOZFGzEYi1TnU3NFJI5vxOfrTFtsM2D
boxn34N/YSadcvcWodEY1kQ/cz6/K0QcXbtgXwANHUSD45iloO3/01+LxYxtvyHa
XGtOUaZbheaZLIVREdHOmrdaeQE+1LFtIDN02sKv1GHoyELOAqlhJnzVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUze8eqYsCDEiiMj3KoN8WqheBuMB8GA1UdIwQY
MBaAFMoMLayv36U5l+07CnDfvCcKkzv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUt
OTllYzg4YzQ3NzYwLzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83MzM1OTgtNzRlOC00N2FhLThjOGUtOTllYzg4YzQ3NzYw
LzEveWd3dHJLX2ZwVG1YN1RzS2NOLThKd3FUT19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkUckhw/
xfvfp6YDl4PqWuru+W9qFEy6vDU8vvEN6Fem1g40MAvrQWK3S1HTVmgQrWiMs3A6
GgcIxRMKoAmLK+mrzvY3hNJxC8XmzupL/Rz8OvkpJDGFRe4x7MCpwS0O9na8sDww
VBwjjmjP4FpBg/vPHadGIt88MMEXaB+R7tfjNwD+Z2gOOGHgdlcPe9w1Ap/DrrvU
vD6P3UT1ck5kQqBYY06n0+4TWTXsp9mUSm5cKLkIbd+/D9XK3IlfyJ5bwFrhVVsY
H0xW3Oo/eyIcMr96gVeAmxxKBa6Y4oh00CGEvqvXBC6/QTHlVGFKzS+k3GeCxA1u
CVOZhA0Ws/0gfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:20 2025 by rpki-client