Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
File:                     YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft (raw, json)
Hash identifier:          2xwkLBdP18jovpaqt/OgULdc337SLoEOxVJMy2V9P9U=
Subject key identifier:   77:94:66:1B:50:B3:98:EA:48:3A:59:18:FC:C5:67:7D:80:67:93:2E
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Certificate issuer:       /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial:       019832A676C641B22214B225BDD52352E85C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
Manifest number:          15FF
Signing time:             Tue 22 Jul 2025 15:00:26 +0000
Manifest this update:     Tue 22 Jul 2025 15:00:26 +0000
Manifest next update:     Wed 23 Jul 2025 15:00:26 +0000
Files and hashes:         1: NRlbji1zgmp6wd1PjpDk0T2ZUGk.roa (hash: TKAQNNpSaY4TAI1TdJLCf/Ljbi9ccCQ85au2gXamNHA=)
                          2: YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl (hash: FYM83axYsyI/XFr0OhlC6p3o+m36N11LZR5fPlgGEe8=)
                          3: a-LdFc8kFHmTn2Z0Vu6JHLUtEY4.roa (hash: zTR8ty0nmJzU13XE2BvXWY2tGZYklQKm1YYaB327LpQ=)
                          4: el7j1J3bDKT27ieG83FPrQYbZJc.roa (hash: T0KRecSjSVtSKj2we6RG/6efDR4xy2f/rpalGX+ig90=)
                          5: od_NfkWMgnzZGkwU7wJ-RgWOeM4.roa (hash: OZscsQ8cir5jkIZyLY0FUkHozKmgjWJmCvTcbzJzQOg=)
                          6: tinXUk407KICO2MXsH1p4TReydw.roa (hash: linbqgFB5KTsziPayiqOokYdnyWHwGO4kAHLVkJgE3k=)
                          7: wxZtKKgCuX_XkT9wjC8PBIL2aLI.roa (hash: tIV+HptpEfjZ8DjgmHhOJU8c4e/cERhkwqc7ixWl0UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 13:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:32:a6:76:c6:41:b2:22:14:b2:25:bd:d5:23:52:e8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
        Validity
            Not Before: Jul 22 15:00:26 2025 GMT
            Not After : Jul 23 15:00:26 2025 GMT
        Subject: CN=7794661b50b398ea483a5918fcc5677d8067932e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:37:11:a5:24:21:28:b2:2a:a7:ea:71:4b:
                    57:ae:80:41:14:76:13:b3:03:a1:08:36:24:f2:e2:
                    1d:8f:89:8f:76:31:49:13:a0:8b:d7:75:81:1d:e7:
                    63:60:12:cf:0a:2c:2f:24:88:08:03:60:ba:98:23:
                    50:30:4a:f1:3d:9f:62:38:0a:7d:b5:9c:64:04:fd:
                    a6:9b:dd:40:db:b5:b9:c3:66:3d:6b:b8:7f:b2:f1:
                    30:1a:ec:6f:da:3f:49:b6:a0:76:4b:1f:8d:b4:48:
                    95:4e:00:1c:7a:93:d6:8b:bf:b2:fe:6a:63:09:60:
                    71:b4:af:9f:a1:12:32:85:54:28:5b:3e:fa:56:49:
                    93:26:39:f2:90:28:f7:1a:f6:22:c7:ea:8b:e7:74:
                    e7:ab:dc:a4:6c:72:c0:98:29:ef:60:e5:6d:c0:1d:
                    20:e7:d9:7a:e9:87:76:58:34:5a:74:5d:37:4b:68:
                    fe:3f:fd:db:f7:e5:66:1f:1d:eb:33:6a:a1:bb:fb:
                    45:26:b7:54:e9:d3:a8:53:19:5d:ba:6b:08:8b:e8:
                    56:dd:63:19:f3:65:77:55:ff:b9:cc:76:dc:66:b9:
                    ca:f2:5b:d0:26:73:e7:13:6a:3c:f3:c9:cb:d7:9e:
                    4c:1c:f2:dd:df:35:6f:dc:57:35:79:f5:f1:fa:20:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:66:1B:50:B3:98:EA:48:3A:59:18:FC:C5:67:7D:80:67:93:2E
            X509v3 Authority Key Identifier:
                keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:c3:d5:59:2a:3a:17:eb:27:f3:ba:5a:8b:81:6f:35:61:
         dd:00:61:fa:c9:c6:72:28:f6:c8:1e:9c:cf:2d:8d:95:2e:1e:
         75:9c:e8:9e:e3:27:6f:9f:cc:5d:95:69:b2:fd:8a:73:65:8b:
         e7:4a:bd:cf:21:5c:fb:bf:ff:a3:1c:fb:85:9a:92:52:49:4a:
         49:f5:73:52:47:a9:c4:70:2f:7d:6c:32:fa:f0:1f:d1:79:b9:
         14:89:2f:26:62:27:92:7e:a0:20:fd:84:b8:a0:29:a8:cb:dd:
         72:89:89:82:c7:5c:4a:76:72:5b:ae:de:6a:1c:f1:21:37:b8:
         e7:db:5b:36:d7:ff:df:ae:41:11:16:60:2c:c1:e2:d0:02:16:
         d6:e2:c9:d5:d8:8f:c1:08:d9:25:a7:18:fb:b4:47:b3:5e:c9:
         68:0f:04:2f:67:9c:ae:59:06:74:5a:b6:db:15:df:ed:28:b0:
         fe:b8:75:be:01:88:93:86:42:ed:db:01:73:b4:04:d8:10:9c:
         70:71:71:34:69:f9:01:a7:39:a9:54:87:53:4a:88:6c:71:7b:
         6b:4a:2f:f0:44:1e:ea:77:70:d7:c6:37:a1:bf:40:1c:36:e8:
         8d:06:ee:dd:c7:1c:db:e3:f0:86:38:0c:76:2b:09:88:f9:21:
         ea:7b:e9:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgypnbGQbIiFLIlvdUjUuhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTMxMDMwMjAxOGEzODdjNjkyMTQ2YTM1ZWZkMzNhNmVk
NmIxZWYwHhcNMjUwNzIyMTUwMDI2WhcNMjUwNzIzMTUwMDI2WjAzMTEwLwYDVQQD
Eyg3Nzk0NjYxYjUwYjM5OGVhNDgzYTU5MThmY2M1Njc3ZDgwNjc5MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaY3EaUkISiyKqfqcUtXroBBFHYT
swOhCDYk8uIdj4mPdjFJE6CL13WBHedjYBLPCiwvJIgIA2C6mCNQMErxPZ9iOAp9
tZxkBP2mm91A27W5w2Y9a7h/svEwGuxv2j9JtqB2Sx+NtEiVTgAcepPWi7+y/mpj
CWBxtK+foRIyhVQoWz76VkmTJjnykCj3GvYix+qL53Tnq9ykbHLAmCnvYOVtwB0g
59l66Yd2WDRadF03S2j+P/3b9+VmHx3rM2qhu/tFJrdU6dOoUxldumsIi+hW3WMZ
82V3Vf+5zHbcZrnK8lvQJnPnE2o888nL155MHPLd3zVv3Fc1efXx+iBsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeUZhtQs5jqSDpZGPzFZ32AZ5MuMB8GA1UdIwQY
MBaAFGITEDAgGKOHxpIUajXv0zpu1rHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjIt
YmU1N2Q3ZGZhMGRlLzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNThhYzgtNTNlOS00Y2E2LWFjYjItYmU1N2Q3ZGZhMGRl
LzEvWWhNUU1DQVlvNGZHa2hScU5lX1RPbTdXc2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo67D1Vkq
OhfrJ/O6WouBbzVh3QBh+snGcij2yB6czy2NlS4edZzonuMnb5/MXZVpsv2Kc2WL
50q9zyFc+7//oxz7hZqSUklKSfVzUkepxHAvfWwy+vAf0Xm5FIkvJmInkn6gIP2E
uKApqMvdcomJgsdcSnZyW67eahzxITe459tbNtf/365BERZgLMHi0AIW1uLJ1diP
wQjZJacY+7RHs17JaA8EL2ecrlkGdFq22xXf7Siw/rh1vgGIk4ZC7dsBc7QE2BCc
cHFxNGn5Aac5qVSHU0qIbHF7a0ov8EQe6ndw18Y3ob9AHDbojQbu3ccc2+PwhjgM
disJiPkh6nvpbg==
-----END CERTIFICATE-----
Generated at Tue Jul 22 19:31:59 2025 by rpki-client