Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File:                     YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier:          An4mFw/ZjekFHpE90Xg0nNoUxL0j2AoIW8kdFYgqR2Y=
Subject key identifier:   F0:9A:09:03:94:F5:12:F3:3A:AE:E0:CC:4D:DB:41:26:2D:A5:E7:F1
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer:       /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial:       019849D381154C93D9412A0FA03D2C0CBE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number:          1091
Signing time:             Sun 27 Jul 2025 03:00:54 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:54 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:54 +0000
Files and hashes:         1: QQ6vjhCR2yyTREcRxQKVvyzivi8.roa (hash: 7L16FIPuAoIWTe7eg7gWhNFlOXbBacL341K5d1WI9xc=)
                          2: SeVyC3Up3eapGFgVMyNwVWT064M.roa (hash: WlXh9oaUv4z0gJQkT7t6JIoyywN2OloN8qKW62HKTds=)
                          3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: EMZ+adJ5oEDqPmDCidhdc60tU45VUr99waAgsxaXc0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:81:15:4c:93:d9:41:2a:0f:a0:3d:2c:0c:be:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
        Validity
            Not Before: Jul 27 03:00:54 2025 GMT
            Not After : Jul 28 03:00:54 2025 GMT
        Subject: CN=f09a090394f512f33aaee0cc4ddb41262da5e7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:ac:88:1b:49:ec:b1:bd:9c:1e:21:17:02:
                    8f:d5:ee:ed:94:d0:d6:c7:41:9f:3a:72:43:50:13:
                    c1:4d:2c:58:dd:fb:c5:f9:f3:11:41:d2:25:c2:fb:
                    39:af:5b:85:72:08:96:6b:6c:fc:4e:d8:e0:e5:71:
                    61:7c:a2:58:75:2f:cb:17:8a:a0:8a:bf:c5:34:dd:
                    b5:1f:e4:45:34:32:a5:d5:9b:b1:86:ba:52:79:18:
                    3d:45:6e:bf:b7:05:9c:40:c6:4f:92:93:24:de:58:
                    d2:4b:28:f0:d5:21:e9:da:6e:dc:d7:a3:d9:3e:b5:
                    83:30:9c:99:8b:de:e9:a4:d9:76:3f:85:58:ee:ee:
                    7f:63:77:5e:bf:23:fc:3b:d7:91:13:44:f3:5e:2a:
                    67:87:67:1e:10:8f:fe:2f:3e:fd:16:49:e0:e6:13:
                    b7:d6:e7:60:36:bc:45:b7:d4:ae:25:58:cb:46:82:
                    0a:b0:6b:c3:f0:8f:4a:a3:31:99:a9:5f:54:8f:eb:
                    c3:86:e7:97:7f:8d:3a:66:2b:fd:ed:65:67:23:07:
                    b8:47:54:a5:22:cf:f4:69:17:b3:74:e9:c8:f3:0c:
                    8f:14:7d:3b:ad:6d:3f:f5:1d:89:c4:2f:7e:d9:dc:
                    29:4f:a3:1c:ba:49:96:a5:d8:b9:60:28:f8:af:92:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9A:09:03:94:F5:12:F3:3A:AE:E0:CC:4D:DB:41:26:2D:A5:E7:F1
            X509v3 Authority Key Identifier:
                keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:95:86:89:dc:dc:f7:6f:e3:bb:67:79:7b:29:f2:70:f6:
         a9:b3:08:f1:2c:a2:67:3c:59:0e:dc:82:5d:70:49:64:61:38:
         f0:41:32:ac:4c:c4:88:e2:d2:de:32:e1:a5:67:10:e9:ce:b0:
         11:9d:c9:dd:0e:df:bf:e4:de:2b:74:ee:1f:64:70:aa:43:03:
         5f:83:eb:b0:34:20:45:a5:15:5b:ee:6e:8f:07:45:ec:bd:e4:
         2d:6a:e3:f0:93:7a:4f:60:2d:5c:51:ca:ce:c6:ae:8f:c9:a1:
         1a:6b:e0:61:25:04:a6:c5:3b:5a:ea:b5:e3:25:e5:82:ba:90:
         63:4c:2a:27:7d:e3:1c:00:08:f6:2c:86:1b:4f:f7:d2:a0:5a:
         ef:5c:2d:c6:8e:aa:93:ca:30:1c:de:78:0d:36:b7:1e:33:f0:
         f0:0f:52:75:14:75:fc:c2:53:d4:07:f3:e4:04:8b:9f:3e:8e:
         cc:5d:0b:89:a5:6b:75:92:b4:ff:b6:8e:cd:8f:e4:76:92:5b:
         be:06:6c:92:2f:62:35:05:71:62:40:f8:cf:18:87:da:e1:de:
         fb:75:60:81:50:b7:51:7f:96:09:5a:81:b9:5f:17:59:a8:fd:
         c7:11:2b:58:f0:10:b0:16:73:82:ab:44:75:28:5e:87:d8:d5:
         1b:6a:bc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04EVTJPZQSoPoD0sDL4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMmJlNjYxZTU3YzE0NjU5YTYwOGU5ZjZiZTYwNWQ2MjUw
MDQ3ZmMwHhcNMjUwNzI3MDMwMDU0WhcNMjUwNzI4MDMwMDU0WjAzMTEwLwYDVQQD
EyhmMDlhMDkwMzk0ZjUxMmYzM2FhZWUwY2M0ZGRiNDEyNjJkYTVlN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvousiBtJ7LG9nB4hFwKP1e7tlNDW
x0GfOnJDUBPBTSxY3fvF+fMRQdIlwvs5r1uFcgiWa2z8Ttjg5XFhfKJYdS/LF4qg
ir/FNN21H+RFNDKl1ZuxhrpSeRg9RW6/twWcQMZPkpMk3ljSSyjw1SHp2m7c16PZ
PrWDMJyZi97ppNl2P4VY7u5/Y3devyP8O9eRE0TzXipnh2ceEI/+Lz79Fkng5hO3
1udgNrxFt9SuJVjLRoIKsGvD8I9KozGZqV9Uj+vDhueXf406Ziv97WVnIwe4R1Sl
Is/0aRezdOnI8wyPFH07rW0/9R2JxC9+2dwpT6McukmWpdi5YCj4r5Kl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCaCQOU9RLzOq7gzE3bQSYtpefxMB8GA1UdIwQY
MBaAFGAr5mHlfBRlmmCOn2vmBdYlAEf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQt
YmQzYTYzMGVlNWNjLzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQyMTMtNDlmZC00YzVjLTgwMTQtYmQzYTYzMGVlNWNj
LzEvWUN2bVllVjhGR1dhWUk2ZmEtWUYxaVVBUl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxqVhonc
3Pdv47tneXsp8nD2qbMI8SyiZzxZDtyCXXBJZGE48EEyrEzEiOLS3jLhpWcQ6c6w
EZ3J3Q7fv+TeK3TuH2RwqkMDX4PrsDQgRaUVW+5ujwdF7L3kLWrj8JN6T2AtXFHK
zsauj8mhGmvgYSUEpsU7Wuq14yXlgrqQY0wqJ33jHAAI9iyGG0/30qBa71wtxo6q
k8owHN54DTa3HjPw8A9SdRR1/MJT1Afz5ASLnz6OzF0LiaVrdZK0/7aOzY/kdpJb
vgZski9iNQVxYkD4zxiH2uHe+3VggVC3UX+WCVqBuV8XWaj9xxErWPAQsBZzgqtE
dSheh9jVG2q8oA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:18 2025 by rpki-client