Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File:                     y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier:          zvke9VMpvhb5wdnxJ0ngUiOMGwqN87a2hIfXE1gLQr8=
Subject key identifier:   76:C6:0B:94:73:BC:12:AE:DC:D7:BA:C8:CA:D5:F6:77:AD:7F:E7:EB
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer:       /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial:       01991F545348C7E718E1529CA5B2A6E46084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number:          1304
Signing time:             Sat 06 Sep 2025 14:00:43 +0000
Manifest this update:     Sat 06 Sep 2025 14:00:43 +0000
Manifest next update:     Sun 07 Sep 2025 14:00:43 +0000
Files and hashes:         1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
                          2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: aNRZKkLmD/53cgei9f1xi5j3bBM0gP1S/g+4/F1EQAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:54:53:48:c7:e7:18:e1:52:9c:a5:b2:a6:e4:60:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
        Validity
            Not Before: Sep  6 14:00:43 2025 GMT
            Not After : Sep  7 14:00:43 2025 GMT
        Subject: CN=76c60b9473bc12aedcd7bac8cad5f677ad7fe7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:1e:74:5e:c7:47:df:ff:7b:f5:31:55:32:
                    1e:55:0e:eb:4a:c3:b6:2e:a2:d2:a5:3f:48:e9:2b:
                    1e:14:41:91:1a:2f:21:35:21:ce:5d:24:e7:89:4e:
                    1d:6c:bb:f5:98:b2:b1:e4:c8:03:b7:29:c5:a8:a6:
                    17:a7:26:4f:13:22:1a:1b:51:2e:4c:36:84:ba:9a:
                    3e:e3:64:57:65:89:90:a0:54:3a:9f:f3:34:24:b0:
                    b1:e8:31:aa:6b:01:e6:c7:4c:2a:84:49:10:df:bc:
                    a2:55:e2:61:0f:fe:9d:d8:b9:cf:88:60:53:b0:8d:
                    00:ff:7b:0b:cd:93:c0:b7:8a:64:34:9e:92:57:4e:
                    6f:2c:26:d6:db:8c:36:e7:93:6d:5d:d7:5e:23:0e:
                    be:c2:b6:4c:4d:75:68:a1:67:7f:76:c0:0a:cb:71:
                    8b:82:de:cd:76:65:ec:4f:55:9f:41:f7:d5:0b:f7:
                    cb:e2:fd:08:c4:e6:f9:c3:8f:74:fa:40:df:18:2c:
                    df:a6:a9:30:33:0e:32:18:0f:f7:0f:e2:f0:5c:c3:
                    cd:c5:e8:60:1e:e1:3f:0f:60:a7:0b:03:8c:cf:d0:
                    33:c0:04:1b:11:7f:ad:7d:c4:c1:f6:99:5b:4e:30:
                    ae:66:41:05:73:40:e3:c6:c0:a2:5b:df:ee:aa:d5:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C6:0B:94:73:BC:12:AE:DC:D7:BA:C8:CA:D5:F6:77:AD:7F:E7:EB
            X509v3 Authority Key Identifier:
                keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:8d:1b:65:14:8c:af:56:1d:90:57:21:30:43:97:43:a4:
         42:c3:88:b5:c4:61:73:0c:52:f3:dd:85:e9:55:42:e1:4d:60:
         32:41:bd:2c:9e:17:5c:15:46:1d:7b:48:47:0d:f5:57:04:6a:
         a3:3d:35:09:e3:16:8a:d4:1a:b5:17:0c:ff:8a:43:82:60:a2:
         fd:bb:68:5d:97:bd:37:c6:c7:aa:48:e5:4d:10:9c:20:a4:ac:
         d4:92:a5:e4:a7:d4:80:fa:55:26:6a:5d:d2:38:0c:9a:6e:f2:
         88:73:d2:94:ba:a9:2a:80:4a:16:28:d9:06:d1:b2:52:3e:96:
         bd:63:46:88:76:00:d4:11:3b:07:5a:28:8c:35:ba:6d:31:79:
         c6:de:e9:18:7f:85:ec:a2:03:a2:70:1f:47:05:0d:f1:a2:82:
         c0:e5:27:c7:b6:25:bf:0a:80:ac:3d:47:f7:cc:8c:94:ef:a3:
         d4:9b:1d:21:89:71:b9:3c:b4:8f:b2:67:e4:01:3e:bd:ca:e5:
         cc:8a:a9:d1:a9:9e:5f:98:b5:f7:a1:20:69:6f:36:83:62:39:
         3c:11:4e:71:f0:57:97:84:0c:ca:9f:61:f5:20:08:45:69:c3:
         4b:5c:9a:97:85:23:d5:14:da:94:f0:93:8c:9b:04:9e:15:f4:
         a8:c1:7a:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkfVFNIx+cY4VKcpbKm5GCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjUwOTA2MTQwMDQzWhcNMjUwOTA3MTQwMDQzWjAzMTEwLwYDVQQD
Eyg3NmM2MGI5NDczYmMxMmFlZGNkN2JhYzhjYWQ1ZjY3N2FkN2ZlN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwwedF7HR9//e/UxVTIeVQ7rSsO2
LqLSpT9I6SseFEGRGi8hNSHOXSTniU4dbLv1mLKx5MgDtynFqKYXpyZPEyIaG1Eu
TDaEupo+42RXZYmQoFQ6n/M0JLCx6DGqawHmx0wqhEkQ37yiVeJhD/6d2LnPiGBT
sI0A/3sLzZPAt4pkNJ6SV05vLCbW24w255NtXddeIw6+wrZMTXVooWd/dsAKy3GL
gt7NdmXsT1WfQffVC/fL4v0IxOb5w490+kDfGCzfpqkwMw4yGA/3D+LwXMPNxehg
HuE/D2CnCwOMz9AzwAQbEX+tfcTB9plbTjCuZkEFc0DjxsCiW9/uqtVkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbGC5RzvBKu3Ne6yMrV9netf+frMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfSNG2UU
jK9WHZBXITBDl0OkQsOItcRhcwxS892F6VVC4U1gMkG9LJ4XXBVGHXtIRw31VwRq
oz01CeMWitQatRcM/4pDgmCi/btoXZe9N8bHqkjlTRCcIKSs1JKl5KfUgPpVJmpd
0jgMmm7yiHPSlLqpKoBKFijZBtGyUj6WvWNGiHYA1BE7B1oojDW6bTF5xt7pGH+F
7KIDonAfRwUN8aKCwOUnx7YlvwqArD1H98yMlO+j1JsdIYlxuTy0j7Jn5AE+vcrl
zIqp0ameX5i196EgaW82g2I5PBFOcfBXl4QMyp9h9SAIRWnDS1yal4Uj1RTalPCT
jJsEnhX0qMF6gQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:04:57 2025 by rpki-client