Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          YIT1XlKUIoM/YePjvX6opyb4kh9jyjCCQWnPdf+GFG8=
Subject key identifier:   84:32:D6:CF:CC:07:59:12:14:26:15:CC:0F:72:12:AD:1F:D1:DF:D4
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       019765F1A038942507C486B154EB4D7B39D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          0FD3
Signing time:             Thu 12 Jun 2025 21:00:23 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:23 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:23 +0000
Files and hashes:         1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
                          2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
                          3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: aA5ss3igdA3sPr+chi+qV6+XMwC9iOE2aqnE+XNQSaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:a0:38:94:25:07:c4:86:b1:54:eb:4d:7b:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: Jun 12 21:00:23 2025 GMT
            Not After : Jun 13 21:00:23 2025 GMT
        Subject: CN=8432d6cfcc075912142615cc0f7212ad1fd1dfd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:3c:26:1c:ef:d6:47:55:67:6f:8f:71:08:
                    fa:da:0a:69:69:9c:e5:92:67:23:07:b1:ef:6e:32:
                    a1:57:16:b6:ac:4c:ab:87:0c:d5:83:53:ff:3b:a3:
                    a6:ad:90:30:74:7a:14:c5:a2:c1:df:38:46:5c:25:
                    2f:1e:43:83:94:01:d3:5c:aa:0b:56:9c:14:54:0a:
                    3c:39:b7:46:df:b2:33:ad:e7:b3:a7:48:96:6a:a4:
                    67:24:03:55:3e:86:aa:a0:cd:7d:18:f0:3a:29:e8:
                    44:a4:9d:68:fb:32:14:63:82:31:37:06:c9:45:fb:
                    7b:64:57:e3:6c:66:99:09:18:2e:33:f8:b7:fe:23:
                    89:d6:e5:f7:69:61:c2:96:37:50:1e:e6:68:d8:a5:
                    22:4a:fc:a4:39:6e:83:0b:9e:96:39:3b:d1:f9:ab:
                    7e:46:13:ab:fc:2f:63:f7:d8:66:fb:99:8c:3a:71:
                    1c:58:a8:91:f5:89:11:bb:e7:e9:58:82:70:e1:bf:
                    d8:8c:d3:20:08:18:18:46:4c:f3:27:3a:f1:89:ce:
                    3b:ba:ca:63:de:97:d1:42:8a:7c:24:b8:1b:3e:18:
                    5a:b0:ac:d8:11:90:b6:78:2b:60:fd:c5:e7:da:9f:
                    7c:96:0b:cd:0a:af:a0:ac:d8:b3:f4:05:34:ad:b4:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:32:D6:CF:CC:07:59:12:14:26:15:CC:0F:72:12:AD:1F:D1:DF:D4
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a1:da:71:97:62:f2:58:7c:2f:d6:f8:88:2e:ce:42:95:30:
         4c:d9:b7:cb:f5:60:51:09:0d:c5:40:ed:e0:cf:3c:fd:9c:fd:
         56:bb:9a:8e:e4:8e:e2:84:00:b6:8b:a8:73:86:20:59:f3:88:
         ad:43:fa:a2:d3:15:b8:5f:32:b6:b1:45:7d:3f:ad:8d:cc:3e:
         71:03:5b:4d:c6:af:13:7f:18:ab:55:6e:73:35:5c:06:af:7d:
         bb:58:da:55:f9:20:24:7f:af:74:d6:70:2d:5e:a3:fd:71:f0:
         b9:c0:d0:c9:4e:a7:07:8e:6e:d6:86:f6:ce:fd:c8:6c:90:57:
         60:e7:58:29:5b:ea:ef:80:47:5e:82:c2:ba:2c:5b:16:3f:15:
         15:08:a2:17:78:64:0c:c4:d2:f4:fb:d1:74:50:3e:de:6f:5f:
         76:01:57:52:36:83:fb:57:53:76:71:91:05:41:c4:d8:55:22:
         0c:e3:a4:31:55:1f:f0:d6:2e:e2:1a:f3:50:ac:22:45:9e:73:
         c3:ed:95:ce:f7:b3:03:ec:49:73:7a:48:ef:c5:ce:a4:8e:e3:
         3c:45:9a:bc:0d:9d:c2:17:af:b5:1a:e4:3d:f0:97:af:2c:9a:
         50:8d:34:28:19:d3:4d:b2:06:8c:41:dd:65:b8:05:f1:eb:b3:
         65:e3:9b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdl8aA4lCUHxIaxVOtNeznSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzI5Y2VkOGVmYjQxZjNiNGEyMDc4ZDk0YmJiMGEzYWFi
NGZiMDIwHhcNMjUwNjEyMjEwMDIzWhcNMjUwNjEzMjEwMDIzWjAzMTEwLwYDVQQD
Eyg4NDMyZDZjZmNjMDc1OTEyMTQyNjE1Y2MwZjcyMTJhZDFmZDFkZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eU8Jhzv1kdVZ2+PcQj62gppaZzl
kmcjB7HvbjKhVxa2rEyrhwzVg1P/O6OmrZAwdHoUxaLB3zhGXCUvHkODlAHTXKoL
VpwUVAo8ObdG37Izreezp0iWaqRnJANVPoaqoM19GPA6KehEpJ1o+zIUY4IxNwbJ
Rft7ZFfjbGaZCRguM/i3/iOJ1uX3aWHCljdQHuZo2KUiSvykOW6DC56WOTvR+at+
RhOr/C9j99hm+5mMOnEcWKiR9YkRu+fpWIJw4b/YjNMgCBgYRkzzJzrxic47uspj
3pfRQop8JLgbPhhasKzYEZC2eCtg/cXn2p98lgvNCq+grNiz9AU0rbThOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQy1s/MB1kSFCYVzA9yEq0f0d/UMB8GA1UdIwQY
MBaAFMoynO2O+0HztKIHjZS7sKOqtPsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEt
OWRiYzM1NjcyMzI5LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MGU3ODAtZWNhNy00NThlLWI2YWEtOWRiYzM1NjcyMzI5
LzEveWpLYzdZNzdRZk8wb2dlTmxMdXdvNnEwLXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKHacZdi
8lh8L9b4iC7OQpUwTNm3y/VgUQkNxUDt4M88/Zz9VruajuSO4oQAtouoc4YgWfOI
rUP6otMVuF8ytrFFfT+tjcw+cQNbTcavE38Yq1VuczVcBq99u1jaVfkgJH+vdNZw
LV6j/XHwucDQyU6nB45u1ob2zv3IbJBXYOdYKVvq74BHXoLCuixbFj8VFQiiF3hk
DMTS9PvRdFA+3m9fdgFXUjaD+1dTdnGRBUHE2FUiDOOkMVUf8NYu4hrzUKwiRZ5z
w+2VzvezA+xJc3pI78XOpI7jPEWavA2dwhevtRrkPfCXryyaUI00KBnTTbIGjEHd
ZbgF8euzZeObrw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 03:23:36 2025 by rpki-client