Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File:                     1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier:          rySTPAkXGWndaFE05BSqjrslQ8mb/JWizEqWTE/1My8=
Subject key identifier:   57:A1:67:56:5B:F8:9D:EB:07:57:BB:37:3B:93:55:A4:68:BC:E3:47
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer:       /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial:       0197CC15E76765DBC6C8930930366055AB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number:          0977
Signing time:             Wed 02 Jul 2025 17:01:16 +0000
Manifest this update:     Wed 02 Jul 2025 17:01:16 +0000
Manifest next update:     Thu 03 Jul 2025 17:01:16 +0000
Files and hashes:         1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: pxh1lnLXgqFBXuv6ffkXY+8qSwHXLTHlB1/P/5L6Ihk=)
                          2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 17:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:15:e7:67:65:db:c6:c8:93:09:30:36:60:55:ab:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
        Validity
            Not Before: Jul  2 17:01:16 2025 GMT
            Not After : Jul  3 17:01:16 2025 GMT
        Subject: CN=57a167565bf89deb0757bb373b9355a468bce347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:86:70:b6:e2:41:33:ae:64:86:40:df:a1:64:
                    e8:fa:61:05:14:1b:10:0e:7a:43:db:cc:5c:1d:42:
                    21:9d:e6:88:43:cf:fb:2b:f2:06:48:b7:e0:b1:0f:
                    eb:0d:b3:d5:ce:f8:12:18:ff:c6:a1:fd:1a:99:c3:
                    be:73:cd:55:b6:a6:10:03:c0:6c:d8:d6:88:30:f7:
                    c8:2f:94:9b:46:01:37:a3:de:c5:a8:57:78:3c:a4:
                    ad:e4:aa:c1:71:94:72:d4:a9:08:36:44:b7:7b:0c:
                    09:b6:02:24:cd:b5:75:51:cd:c8:b8:e6:6f:67:7f:
                    19:42:59:84:84:4d:01:e6:a0:24:af:33:ed:85:8f:
                    1b:bf:05:b5:99:09:d6:f4:b7:97:c7:fa:cc:ad:d3:
                    cd:bd:69:2c:97:de:06:8a:cf:8c:c9:da:1c:bc:cb:
                    aa:5d:71:17:63:e1:c2:66:f1:aa:47:e7:bf:9f:7f:
                    1b:e3:0b:20:91:3b:26:0a:08:85:ec:09:49:00:54:
                    ca:6a:68:ed:b9:cf:09:b6:df:0a:57:2d:29:7f:73:
                    ee:8f:b1:8d:db:98:d1:5c:e6:49:0e:32:45:b7:31:
                    a2:fd:fa:5a:c6:40:83:73:94:0c:9a:4e:85:07:58:
                    d8:72:be:e9:6c:29:4f:11:68:14:bc:0d:f3:cc:f7:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:67:56:5B:F8:9D:EB:07:57:BB:37:3B:93:55:A4:68:BC:E3:47
            X509v3 Authority Key Identifier:
                keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:52:01:6a:d4:0a:46:0e:88:1c:41:5c:c2:d7:6f:df:8d:4d:
         fa:87:87:d6:bc:fa:81:ef:a3:12:49:20:e1:18:95:b2:b4:12:
         57:91:ac:ba:44:8d:b4:81:40:bf:79:7c:2d:b1:03:8a:4e:4a:
         2a:98:53:0d:d2:f6:b4:51:c8:61:99:d9:3c:d7:e7:49:52:16:
         af:86:2c:09:71:96:d5:e1:c2:df:cf:fa:8e:e1:9d:1d:e0:83:
         58:1d:69:09:f3:51:86:9b:ad:aa:29:f2:1d:d2:6f:e1:06:5d:
         4d:21:96:b9:3d:e9:a0:d3:71:58:45:78:12:77:07:59:4a:5c:
         fd:a4:bf:18:d4:79:3f:b3:8f:cc:16:4a:bb:a9:ad:81:5c:d5:
         ba:93:de:84:59:b4:c2:85:30:ae:34:58:47:8b:12:46:82:be:
         3c:2a:4e:11:41:5a:b4:94:79:3b:d1:21:fc:98:13:c2:2e:c5:
         f4:a7:09:75:fa:bf:4f:83:03:f6:72:87:b3:a2:4d:b3:e6:ab:
         23:ce:27:a4:2d:5c:d1:e1:20:e2:d9:a6:47:cc:1e:7c:3c:6b:
         d7:7c:2b:0a:88:d1:f7:78:b2:10:6c:1a:4a:1c:76:b7:87:ea:
         2f:7c:5a:71:56:7a:1c:f8:1c:20:cf:52:96:3b:13:08:69:4d:
         b1:ae:e5:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZfMFednZdvGyJMJMDZgVauZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5
YWFhOGYwHhcNMjUwNzAyMTcwMTE2WhcNMjUwNzAzMTcwMTE2WjAzMTEwLwYDVQQD
Eyg1N2ExNjc1NjViZjg5ZGViMDc1N2JiMzczYjkzNTVhNDY4YmNlMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YZwtuJBM65khkDfoWTo+mEFFBsQ
DnpD28xcHUIhneaIQ8/7K/IGSLfgsQ/rDbPVzvgSGP/Gof0amcO+c81VtqYQA8Bs
2NaIMPfIL5SbRgE3o97FqFd4PKSt5KrBcZRy1KkINkS3ewwJtgIkzbV1Uc3IuOZv
Z38ZQlmEhE0B5qAkrzPthY8bvwW1mQnW9LeXx/rMrdPNvWksl94Gis+MydocvMuq
XXEXY+HCZvGqR+e/n38b4wsgkTsmCgiF7AlJAFTKamjtuc8Jtt8KVy0pf3Puj7GN
25jRXOZJDjJFtzGi/fpaxkCDc5QMmk6FB1jYcr7pbClPEWgUvA3zzPczwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFehZ1Zb+J3rB1e7NzuTVaRovONHMB8GA1UdIwQY
MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2
LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl
ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVIB
atQKRg6IHEFcwtdv341N+oeH1rz6ge+jEkkg4RiVsrQSV5GsukSNtIFAv3l8LbED
ik5KKphTDdL2tFHIYZnZPNfnSVIWr4YsCXGW1eHC38/6juGdHeCDWB1pCfNRhput
qinyHdJv4QZdTSGWuT3poNNxWEV4EncHWUpc/aS/GNR5P7OPzBZKu6mtgVzVupPe
hFm0woUwrjRYR4sSRoK+PCpOEUFatJR5O9Eh/JgTwi7F9KcJdfq/T4MD9nKHs6JN
s+arI84npC1c0eEg4tmmR8wefDxr13wrCojR93iyEGwaShx2t4fqL3xacVZ6HPgc
IM9SljsTCGlNsa7lFg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 00:12:07 2025 by rpki-client