Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          ug2IJ9bWb0zIHdQdENRYNjzc0jq9NRL2484y4UA1IMM=
Subject key identifier:   FF:E9:B1:06:23:B0:FA:C4:48:20:9C:52:71:04:F8:28:C5:97:D1:34
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       019847E51FBB4D32ADAEB62DBACEDBB23BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          1530
Signing time:             Sat 26 Jul 2025 18:00:54 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:54 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:54 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: uNPS5oT+XuSsNSXp3fGLw9+mTUeoxakyUhorIc41qUA=)
                          2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:1f:bb:4d:32:ad:ae:b6:2d:ba:ce:db:b2:3b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Jul 26 18:00:54 2025 GMT
            Not After : Jul 27 18:00:54 2025 GMT
        Subject: CN=ffe9b10623b0fac448209c527104f828c597d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:70:c4:3d:a0:40:f5:1a:a7:5b:0d:c4:27:
                    ab:d2:75:ab:b9:08:98:b3:9a:ab:54:1b:be:11:da:
                    ed:07:5a:19:c8:b6:7d:07:d9:df:0f:0c:23:98:54:
                    a5:fa:76:70:5a:55:91:bc:99:01:74:db:25:e8:bd:
                    cd:e2:7e:03:19:2a:39:1c:22:0b:4f:38:03:7a:f0:
                    dc:ec:ce:24:30:67:c8:a7:e6:6e:bc:a5:6f:cb:51:
                    f0:33:de:60:76:c4:20:ae:34:a8:63:58:e4:bd:67:
                    52:9b:1d:a6:fb:99:d7:33:13:0a:e5:89:ff:ae:9d:
                    88:a8:6e:76:a4:e8:65:51:2b:52:7e:3f:f3:1c:06:
                    16:a4:8b:f3:41:e5:5e:de:3c:d9:11:0e:90:37:7d:
                    ba:8f:4b:47:6a:e2:47:fa:1c:d5:8e:e4:e0:a4:2e:
                    3a:69:83:25:85:3b:05:01:a7:05:49:24:4c:9f:ed:
                    f8:6d:aa:f8:96:6d:a8:87:de:b9:19:31:0a:e6:71:
                    00:3c:3f:86:fa:ef:9a:36:3e:02:e5:2b:a5:26:c6:
                    2f:5f:d9:44:61:95:37:71:a5:71:fd:24:94:9c:b4:
                    a7:3d:b2:ee:77:6b:94:77:38:80:4c:0e:a5:aa:0a:
                    79:0d:40:4b:e6:6a:aa:d5:57:49:db:a8:dd:55:30:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E9:B1:06:23:B0:FA:C4:48:20:9C:52:71:04:F8:28:C5:97:D1:34
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8d:48:f0:75:94:e4:89:e5:0b:f7:6b:09:f1:c5:45:96:1d:
         6f:93:73:47:37:7a:17:47:ae:4a:c6:4c:a4:27:87:cd:53:e2:
         3b:31:ba:d4:8c:e1:bc:97:7e:16:43:7e:71:a8:a5:92:5d:10:
         bf:d9:4c:17:6d:af:b2:0f:93:9f:b1:16:39:90:e9:f8:85:26:
         6c:84:f4:d8:1a:a4:05:08:b8:f2:bd:81:f2:36:31:d5:6e:2b:
         61:f8:6e:fa:36:b1:b2:99:35:db:0a:d8:90:6e:88:96:d2:26:
         f3:1f:96:78:77:a8:b0:96:52:c8:5e:90:3c:4a:af:94:06:15:
         96:86:5d:01:68:fb:f3:f9:41:0b:d8:75:55:8a:2c:d0:bc:ff:
         7c:df:0f:11:7c:15:3e:42:45:44:6f:73:6e:67:b7:33:e8:e1:
         d1:63:57:84:f7:ee:32:97:b5:34:a0:83:6f:cb:19:d4:68:09:
         e8:cc:fb:62:fd:4f:c0:37:a1:27:2b:52:20:43:7a:8a:7e:c5:
         f3:f6:fb:c9:39:ef:58:56:b3:2b:93:f6:0c:95:ed:90:e7:85:
         62:3e:4b:f4:26:1d:53:15:cc:61:80:52:fd:7f:6c:c4:62:ad:
         b6:a1:6d:c0:32:6c:27:b1:4c:79:4c:e2:b0:ac:6e:dd:bb:32:
         65:7c:29:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5R+7TTKtrrYtus7bsjv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz
NjY3NzMwHhcNMjUwNzI2MTgwMDU0WhcNMjUwNzI3MTgwMDU0WjAzMTEwLwYDVQQD
EyhmZmU5YjEwNjIzYjBmYWM0NDgyMDljNTI3MTA0ZjgyOGM1OTdkMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBlwxD2gQPUap1sNxCer0nWruQiY
s5qrVBu+EdrtB1oZyLZ9B9nfDwwjmFSl+nZwWlWRvJkBdNsl6L3N4n4DGSo5HCIL
TzgDevDc7M4kMGfIp+ZuvKVvy1HwM95gdsQgrjSoY1jkvWdSmx2m+5nXMxMK5Yn/
rp2IqG52pOhlUStSfj/zHAYWpIvzQeVe3jzZEQ6QN326j0tHauJH+hzVjuTgpC46
aYMlhTsFAacFSSRMn+34bar4lm2oh965GTEK5nEAPD+G+u+aNj4C5SulJsYvX9lE
YZU3caVx/SSUnLSnPbLud2uUdziATA6lqgp5DUBL5mqq1VdJ26jdVTC6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/psQYjsPrESCCcUnEE+CjFl9E0MB8GA1UdIwQY
MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt
MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh
LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuo1I8HWU
5InlC/drCfHFRZYdb5NzRzd6F0euSsZMpCeHzVPiOzG61IzhvJd+FkN+cailkl0Q
v9lMF22vsg+Tn7EWOZDp+IUmbIT02BqkBQi48r2B8jYx1W4rYfhu+jaxspk12wrY
kG6IltIm8x+WeHeosJZSyF6QPEqvlAYVloZdAWj78/lBC9h1VYos0Lz/fN8PEXwV
PkJFRG9zbme3M+jh0WNXhPfuMpe1NKCDb8sZ1GgJ6Mz7Yv1PwDehJytSIEN6in7F
8/b7yTnvWFazK5P2DJXtkOeFYj5L9CYdUxXMYYBS/X9sxGKttqFtwDJsJ7FMeUzi
sKxu3bsyZXwprQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:03 2025 by rpki-client