Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          OR18gPeYJyqBzDSsYFpSyQdlh3xgJfgz4q4AdEpDVHk=
Subject key identifier:   0F:4C:02:00:DE:60:4F:1D:49:3F:01:88:21:2B:DC:6A:A0:C4:70:7E
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       01984708F89FEC1731D6E34444B35C0837D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 14:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 14:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 14:00:26 +0000
Files and hashes:         1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: 4KDN9PQSMyDmMF8e06oKa0KfmTEt7+pYVg+TdKsVvBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:08:f8:9f:ec:17:31:d6:e3:44:44:b3:5c:08:37:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: Jul 26 14:00:26 2025 GMT
            Not After : Jul 27 14:00:26 2025 GMT
        Subject: CN=0f4c0200de604f1d493f0188212bdc6aa0c4707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c0:91:b6:87:6e:8c:e8:26:7f:a3:57:ff:c9:
                    04:04:f5:04:78:d3:4d:41:89:8f:32:bb:6f:73:01:
                    33:55:32:51:8f:ff:58:41:b0:3c:5c:0d:bf:6b:c1:
                    04:88:74:78:c9:b7:26:e6:cf:71:62:58:6e:36:66:
                    16:5e:74:66:1a:43:6b:08:5e:bf:31:9e:97:20:d1:
                    5c:15:3c:fe:4b:6a:4c:1c:e4:14:3b:c8:a3:d8:6d:
                    66:bd:dc:cb:13:bc:3c:02:c3:c0:27:71:37:3d:41:
                    43:0e:28:7c:ce:76:65:bf:aa:f4:02:e7:1d:76:d8:
                    5d:8c:73:65:7b:03:3c:a5:8f:66:2c:39:e4:8b:26:
                    e6:d3:58:09:21:c8:49:a8:fb:51:98:4b:35:da:10:
                    8c:f9:ba:46:e0:c4:a9:d5:72:54:b1:1e:3b:29:a7:
                    7d:61:ec:ea:b2:01:da:02:fc:f4:01:28:a2:30:93:
                    9f:c3:8b:31:64:ca:9d:60:82:24:7b:cc:3d:77:57:
                    07:da:2a:59:51:30:86:f1:41:b0:01:c7:9e:7a:00:
                    1d:22:1f:95:dc:94:14:db:8a:9a:21:17:cf:77:ef:
                    27:ca:57:2c:a4:2e:eb:79:67:6e:a0:03:b4:9a:4b:
                    65:c7:67:7d:c8:1d:1f:3c:94:bb:13:26:38:a4:fa:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4C:02:00:DE:60:4F:1D:49:3F:01:88:21:2B:DC:6A:A0:C4:70:7E
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:03:1e:9b:90:d1:25:86:8b:9c:96:94:a0:0e:e9:33:5e:
         44:06:50:2a:d6:66:df:55:5e:17:26:d5:2d:d3:e1:be:ac:f3:
         1c:78:3d:cf:b1:6b:39:bd:4d:d3:45:5a:fe:4b:13:83:8f:d8:
         9e:4f:0b:17:39:ec:9c:a9:77:a2:39:2e:93:59:5c:7f:98:60:
         c5:87:16:4a:e5:06:cf:e3:c9:91:50:e1:21:d1:4a:02:f1:8a:
         f3:5b:0b:b6:2f:0f:c9:72:9c:71:ed:e1:cb:28:b5:72:fb:fa:
         90:65:88:b6:42:2e:88:f8:5f:56:62:81:04:a1:d3:67:4a:36:
         3b:17:36:6d:dd:e6:70:8a:00:1b:65:93:a0:c6:84:c7:be:3e:
         86:9c:b1:c7:f1:0b:71:e4:fd:61:f7:d0:cf:ba:bf:ab:0e:8e:
         1a:81:25:c9:ec:5f:b1:84:4d:4b:d7:25:d4:fa:15:ea:f9:77:
         0a:c7:34:cf:f8:0f:7f:2c:f4:dc:76:10:e8:9a:51:5f:12:16:
         e6:52:e1:61:9d:4a:57:4b:a5:60:be:1c:b1:b7:72:10:41:20:
         47:06:16:b4:43:d5:a0:f7:0d:1e:47:ad:e5:96:6f:16:55:97:
         47:99:cc:62:1d:b0:62:a3:97:02:5c:9a:a2:98:77:1a:c0:0a:
         2f:69:db:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCPif7Bcx1uNERLNcCDfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl
MTQzYmIwHhcNMjUwNzI2MTQwMDI2WhcNMjUwNzI3MTQwMDI2WjAzMTEwLwYDVQQD
EygwZjRjMDIwMGRlNjA0ZjFkNDkzZjAxODgyMTJiZGM2YWEwYzQ3MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8CRtodujOgmf6NX/8kEBPUEeNNN
QYmPMrtvcwEzVTJRj/9YQbA8XA2/a8EEiHR4ybcm5s9xYlhuNmYWXnRmGkNrCF6/
MZ6XINFcFTz+S2pMHOQUO8ij2G1mvdzLE7w8AsPAJ3E3PUFDDih8znZlv6r0Aucd
dthdjHNlewM8pY9mLDnkiybm01gJIchJqPtRmEs12hCM+bpG4MSp1XJUsR47Kad9
YezqsgHaAvz0ASiiMJOfw4sxZMqdYIIke8w9d1cH2ipZUTCG8UGwAceeegAdIh+V
3JQU24qaIRfPd+8nylcspC7reWduoAO0mktlx2d9yB0fPJS7EyY4pPpCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9MAgDeYE8dST8BiCEr3GqgxHB+MB8GA1UdIwQY
MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdYDHpuQ
0SWGi5yWlKAO6TNeRAZQKtZm31VeFybVLdPhvqzzHHg9z7FrOb1N00Va/ksTg4/Y
nk8LFznsnKl3ojkuk1lcf5hgxYcWSuUGz+PJkVDhIdFKAvGK81sLti8PyXKcce3h
yyi1cvv6kGWItkIuiPhfVmKBBKHTZ0o2Oxc2bd3mcIoAG2WToMaEx74+hpyxx/EL
ceT9YffQz7q/qw6OGoElyexfsYRNS9cl1PoV6vl3Csc0z/gPfyz03HYQ6JpRXxIW
5lLhYZ1KV0ulYL4csbdyEEEgRwYWtEPVoPcNHket5ZZvFlWXR5nMYh2wYqOXAlya
oph3GsAKL2nbUA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:57 2025 by rpki-client