Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          zK7lxNdUBF2QXz2IqemhDIXZQrFbLHNmSR5Y+if62h8=
Subject key identifier:   A2:DB:31:30:2D:02:C4:88:40:80:0D:66:12:B9:E9:6C:CE:25:29:E7
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       01984F31A05935895DD032FD2DE729427A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          1603
Signing time:             Mon 28 Jul 2025 04:01:48 +0000
Manifest this update:     Mon 28 Jul 2025 04:01:48 +0000
Manifest next update:     Tue 29 Jul 2025 04:01:48 +0000
Files and hashes:         1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
                          2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
                          3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: qe0eIG8tOSGHIgwmN4oFvROAGNM4BrEG/iSXB4oJNjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4f:31:a0:59:35:89:5d:d0:32:fd:2d:e7:29:42:7a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: Jul 28 04:01:48 2025 GMT
            Not After : Jul 29 04:01:48 2025 GMT
        Subject: CN=a2db31302d02c48840800d6612b9e96cce2529e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:18:91:19:55:ad:a2:63:89:be:63:ca:c6:f9:
                    f4:6e:aa:c7:71:3f:75:f9:63:a6:4a:b6:7b:a7:f1:
                    0e:22:03:62:b7:9e:4d:ba:d8:79:34:51:71:96:5e:
                    1e:b1:d4:a2:e6:f6:9c:ea:99:f8:65:ef:df:9b:1b:
                    12:a8:81:ab:2f:be:a7:4f:21:79:40:84:7e:6b:b7:
                    15:9d:a4:58:76:fd:6f:26:03:4d:f8:e5:37:d2:bd:
                    18:dc:1e:31:1b:37:8c:1a:79:21:d0:fa:fd:9a:dd:
                    0f:e6:74:e2:3e:64:17:bc:a5:76:1e:73:f5:1a:f4:
                    e7:88:2a:32:85:44:ae:c9:a3:fb:78:dc:04:52:4a:
                    03:cc:a1:2e:57:48:5e:4b:2c:01:47:c2:b4:db:4c:
                    cb:82:1b:73:19:a2:1a:87:59:13:4d:34:ac:30:df:
                    42:cf:54:b2:8b:6f:c9:ab:b1:ca:80:72:64:84:73:
                    8f:54:4b:4d:63:ff:8e:de:a5:d9:ce:ab:53:78:b3:
                    21:0c:99:ef:bf:cf:32:b7:70:00:7d:57:8a:42:8c:
                    a0:c7:dc:8c:5b:5e:9f:93:37:4c:d4:79:74:b6:40:
                    da:a5:8b:5d:a6:26:47:0d:b8:e8:e1:0d:cf:82:c0:
                    3b:b0:b5:d2:3c:8f:e9:4c:62:7b:42:c4:40:c8:db:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:31:30:2D:02:C4:88:40:80:0D:66:12:B9:E9:6C:CE:25:29:E7
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:30:ba:0c:4f:ff:4b:18:2c:84:10:3e:03:c3:00:1e:e5:68:
         fd:fc:47:fd:2e:a4:0d:75:a0:12:fa:a1:c5:4c:a4:df:96:a9:
         94:7e:e8:e1:9a:b8:1f:80:94:b6:69:2c:cd:6e:a4:d8:1f:95:
         75:69:eb:fd:3c:d4:4c:b7:aa:6a:3c:3a:a9:92:a0:ef:e9:55:
         28:04:d0:8c:22:0a:91:63:44:50:7d:b4:c5:78:54:c9:0d:df:
         19:3d:ed:26:53:f5:b2:10:11:8e:97:a9:3a:06:71:9c:2e:b2:
         b0:b6:d8:a2:7f:c9:a5:59:61:39:fe:1e:e5:02:70:92:68:9d:
         67:fd:79:54:96:06:20:62:44:c5:7f:b7:b0:70:c3:b8:80:54:
         25:ef:eb:78:5e:33:ad:77:65:dc:0b:b9:71:79:9b:d8:97:9b:
         ba:59:ba:0a:c9:25:00:1e:99:a4:90:53:e4:fb:4b:94:d4:62:
         ef:d9:b7:37:05:bb:25:b3:39:2b:5c:d1:db:45:17:f5:86:a5:
         75:3b:04:b5:bd:62:f1:7f:e3:98:81:31:0d:90:c8:c7:c9:d0:
         e1:1b:f7:6c:16:44:a0:2a:ba:db:79:d0:75:f9:f2:b0:23:c3:
         b1:2f:73:8b:23:a4:be:9f:2d:49:a8:36:ca:6f:1f:43:7f:9b:
         59:23:48:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhPMaBZNYld0DL9LecpQnomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi
NjIyOWEwHhcNMjUwNzI4MDQwMTQ4WhcNMjUwNzI5MDQwMTQ4WjAzMTEwLwYDVQQD
EyhhMmRiMzEzMDJkMDJjNDg4NDA4MDBkNjYxMmI5ZTk2Y2NlMjUyOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hiRGVWtomOJvmPKxvn0bqrHcT91
+WOmSrZ7p/EOIgNit55Nuth5NFFxll4esdSi5vac6pn4Ze/fmxsSqIGrL76nTyF5
QIR+a7cVnaRYdv1vJgNN+OU30r0Y3B4xGzeMGnkh0Pr9mt0P5nTiPmQXvKV2HnP1
GvTniCoyhUSuyaP7eNwEUkoDzKEuV0heSywBR8K020zLghtzGaIah1kTTTSsMN9C
z1Syi2/Jq7HKgHJkhHOPVEtNY/+O3qXZzqtTeLMhDJnvv88yt3AAfVeKQoygx9yM
W16fkzdM1Hl0tkDapYtdpiZHDbjo4Q3PgsA7sLXSPI/pTGJ7QsRAyNtfLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLbMTAtAsSIQIANZhK56WzOJSnnMB8GA1UdIwQY
MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt
ZmVmZDM3NjY2NzQxLzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx
LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzC6DE//
SxgshBA+A8MAHuVo/fxH/S6kDXWgEvqhxUyk35aplH7o4Zq4H4CUtmkszW6k2B+V
dWnr/TzUTLeqajw6qZKg7+lVKATQjCIKkWNEUH20xXhUyQ3fGT3tJlP1shARjpep
OgZxnC6ysLbYon/JpVlhOf4e5QJwkmidZ/15VJYGIGJExX+3sHDDuIBUJe/reF4z
rXdl3Au5cXmb2Jebulm6CsklAB6ZpJBT5PtLlNRi79m3NwW7JbM5K1zR20UX9Yal
dTsEtb1i8X/jmIExDZDIx8nQ4Rv3bBZEoCq623nQdfnysCPDsS9ziyOkvp8tSag2
ym8fQ3+bWSNIXA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 07:07:46 2025 by rpki-client