Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          yMc2kCtaHSTH+IRIf1qjyxgWFJnfscl7cxikh38reII=
Subject key identifier:   59:80:39:DC:C4:44:D3:22:D2:67:3D:23:C4:D8:B1:5C:D3:F0:EA:99
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019833829A4D2205585BA02C46B87E118DED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          161C
Signing time:             Tue 22 Jul 2025 19:00:53 +0000
Manifest this update:     Tue 22 Jul 2025 19:00:53 +0000
Manifest next update:     Wed 23 Jul 2025 19:00:53 +0000
Files and hashes:         1: N1MG3ptUi6lRkgCQgC4sjQwbS5E.roa (hash: JXk8TsLqv4eNpEsTxzdAoUG6ec7BUvgM4Lyhjc+WI9U=)
                          2: pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa (hash: KI7tUZnJYI1JaBjFs0d5L727l5SVVoE+xByQFUZQZZI=)
                          3: uiLIHzK4-mf16_OjnZc2yUpW0us.roa (hash: RlQY7OlYxlif+RwnDDphDKPVhonzC8U4YVG2wYszXJM=)
                          4: wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa (hash: /EPsVJFiMZ3O3IoH+IOAZdQSfyIhjr2V/FlxWvt6e5c=)
                          5: xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa (hash: rdwu1BaRed5RxmIo/GH4jXiyNp3cFaIjeNX4kVrFm70=)
                          6: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: 3nHJugTQDPE/xLLdaq5on2+ZuHlxIQZ6y5fawxk1jB8=)
                          7: zPFc5xzrxxMWf2K11uBlgIiWqTo.roa (hash: 3x/T35aDdfP5Wrtlu3UJYc2NEgecLDM5KH+dyoNyYx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:82:9a:4d:22:05:58:5b:a0:2c:46:b8:7e:11:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jul 22 19:00:53 2025 GMT
            Not After : Jul 23 19:00:53 2025 GMT
        Subject: CN=598039dcc444d322d2673d23c4d8b15cd3f0ea99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:07:dc:92:0a:c7:9c:7f:bd:d5:35:b4:8e:
                    5f:70:9d:c9:f1:d2:ad:e9:ee:c5:ea:8d:18:a1:a8:
                    47:54:f8:30:19:93:70:12:89:17:d9:9a:93:86:ad:
                    9c:d4:40:48:ec:46:52:90:1e:42:51:d5:41:09:4f:
                    1e:16:ec:4a:8f:74:8c:4a:01:d4:26:58:07:03:eb:
                    3b:69:90:85:26:b6:43:3e:b9:58:4a:73:ec:ba:c6:
                    bf:25:30:da:df:12:19:6a:79:81:83:84:5b:59:6c:
                    13:53:22:4c:24:6e:f9:c4:a8:b5:39:70:52:f3:e2:
                    ba:30:dc:bb:4f:47:e1:12:77:24:d9:62:6d:bd:59:
                    58:7a:e4:ec:a6:17:18:aa:27:21:b8:6e:fb:78:69:
                    18:42:50:d4:06:69:04:12:f5:f9:b2:3a:b3:76:92:
                    47:bd:f7:70:7f:93:9e:9d:11:18:f0:f5:0e:3e:f7:
                    f3:df:2d:0c:87:20:b7:f9:b9:ec:c9:8e:39:5b:92:
                    73:09:35:84:72:94:e6:ae:66:02:3a:a3:8a:55:50:
                    c4:66:c4:fc:e0:9e:ea:ea:ff:26:34:ff:e0:c3:a4:
                    ce:8c:be:7d:77:72:b2:4c:9c:ba:4f:9c:8a:5d:2b:
                    5f:0d:a2:d3:a9:2e:8e:df:92:3e:11:89:f2:cd:4e:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:39:DC:C4:44:D3:22:D2:67:3D:23:C4:D8:B1:5C:D3:F0:EA:99
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:10:54:ed:29:6b:3b:bd:67:19:44:8e:42:5c:02:64:40:7a:
         67:f0:8f:68:19:41:37:9e:5d:dc:31:5f:8f:8c:e6:08:98:f1:
         6c:5a:bc:ab:14:1b:d0:65:a2:5c:53:4c:b5:00:66:db:0f:46:
         f8:05:ea:6e:a5:f2:16:f8:ba:ae:8e:f3:22:1e:dd:1a:d5:83:
         d3:37:6e:40:2b:e5:88:52:45:c5:84:62:1a:2a:f3:8b:af:a3:
         3f:2e:12:52:a0:77:bb:73:46:af:bc:77:7e:8e:2b:6b:e7:72:
         38:7a:bd:37:23:7e:59:bf:fb:79:4a:c8:6c:21:85:17:66:45:
         99:eb:9b:8e:46:62:d4:44:3b:07:c0:02:c2:35:2c:67:b9:32:
         c0:d6:53:c2:0d:c4:01:27:bb:e1:e6:15:19:8e:4e:70:c6:da:
         cb:09:46:01:0c:3e:fa:89:d4:c2:72:35:d9:3d:c1:85:0c:52:
         15:17:39:28:fe:fa:d3:96:70:5b:ce:5e:45:f4:b9:04:ce:1f:
         cc:f0:69:e6:38:6b:f6:38:9d:2e:60:4c:78:2d:b2:b2:57:3c:
         01:17:1f:ba:4d:e3:d8:a8:ef:51:b3:72:d3:34:64:cf:53:25:
         c5:dd:ed:e4:44:60:e9:86:e9:af:dd:d1:25:17:05:e9:94:a2:
         f9:b2:c5:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgzgppNIgVYW6AsRrh+EY3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjUwNzIyMTkwMDUzWhcNMjUwNzIzMTkwMDUzWjAzMTEwLwYDVQQD
Eyg1OTgwMzlkY2M0NDRkMzIyZDI2NzNkMjNjNGQ4YjE1Y2QzZjBlYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03cH3JIKx5x/vdU1tI5fcJ3J8dKt
6e7F6o0YoahHVPgwGZNwEokX2ZqThq2c1EBI7EZSkB5CUdVBCU8eFuxKj3SMSgHU
JlgHA+s7aZCFJrZDPrlYSnPsusa/JTDa3xIZanmBg4RbWWwTUyJMJG75xKi1OXBS
8+K6MNy7T0fhEnck2WJtvVlYeuTsphcYqichuG77eGkYQlDUBmkEEvX5sjqzdpJH
vfdwf5OenREY8PUOPvfz3y0MhyC3+bnsyY45W5JzCTWEcpTmrmYCOqOKVVDEZsT8
4J7q6v8mNP/gw6TOjL59d3KyTJy6T5yKXStfDaLTqS6O35I+EYnyzU4LrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmAOdzERNMi0mc9I8TYsVzT8OqZMB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRBU7Slr
O71nGUSOQlwCZEB6Z/CPaBlBN55d3DFfj4zmCJjxbFq8qxQb0GWiXFNMtQBm2w9G
+AXqbqXyFvi6ro7zIh7dGtWD0zduQCvliFJFxYRiGirzi6+jPy4SUqB3u3NGr7x3
fo4ra+dyOHq9NyN+Wb/7eUrIbCGFF2ZFmeubjkZi1EQ7B8ACwjUsZ7kywNZTwg3E
ASe74eYVGY5OcMbaywlGAQw++onUwnI12T3BhQxSFRc5KP7605ZwW85eRfS5BM4f
zPBp5jhr9jidLmBMeC2yslc8ARcfuk3j2KjvUbNy0zRkz1Mlxd3t5ERg6Ybpr93R
JRcF6ZSi+bLFuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:00:36 2025 by rpki-client