Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          YArpcZXFzdxLehMOwwZVqzrAP3hs075D7VKZFrjX6/Q=
Subject key identifier:   BA:C1:E4:01:7F:D6:3C:29:7A:B0:99:3F:58:DE:04:D4:FB:9A:07:EA
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       019752A25723A5CE4A8E70DAB989E166493C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          09D7
Signing time:             Mon 09 Jun 2025 03:01:00 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:00 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:00 +0000
Files and hashes:         1: MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa (hash: 4Iv06Vc4XP2DcLEHGwIUaAZcm9hUIsAMlBV/dIzvxtA=)
                          2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: 5gIUJKgkPgFTUwhu1r16GIipijd1miqj+0uzf6glNYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:57:23:a5:ce:4a:8e:70:da:b9:89:e1:66:49:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Jun  9 03:01:00 2025 GMT
            Not After : Jun 10 03:01:00 2025 GMT
        Subject: CN=bac1e4017fd63c297ab0993f58de04d4fb9a07ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:42:b9:84:a2:6e:da:5e:76:fa:af:d4:16:
                    85:34:62:d2:82:b5:35:1f:9e:98:60:3d:2c:3c:f8:
                    f6:ef:64:49:56:26:75:34:52:b7:db:05:9a:fe:24:
                    7d:3a:3d:44:e8:bd:5a:9e:43:f9:75:af:42:f6:77:
                    ec:85:df:9e:02:4d:80:75:84:44:b2:93:c9:8a:1d:
                    33:ba:c3:7f:2a:27:a3:a9:e9:a3:1b:7f:24:81:54:
                    c0:17:84:ed:ae:35:60:6f:91:cc:80:15:e6:e0:b6:
                    ed:1a:af:0b:da:96:94:79:36:24:60:f1:04:a9:cd:
                    ac:65:59:28:ff:2b:14:69:3d:51:71:ee:70:ad:58:
                    20:b3:31:0b:5c:49:86:e5:60:f8:f5:69:9d:ab:34:
                    c7:a6:be:17:6a:fe:d5:d2:02:09:50:c9:42:ab:66:
                    b5:0a:4e:31:18:4a:e8:a6:69:17:dd:9a:21:a8:04:
                    bd:c5:44:1a:16:e9:23:04:4e:67:5b:b9:17:7e:23:
                    cd:e7:24:19:a2:e0:70:65:d6:e6:c9:9a:f2:04:f9:
                    12:40:df:d8:53:76:7e:16:af:18:39:26:96:70:ba:
                    e1:1f:9c:51:2f:a9:1c:59:97:cf:5e:00:97:32:9c:
                    e6:14:20:49:f5:35:c3:c7:64:bf:59:7d:7d:0f:66:
                    db:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:E4:01:7F:D6:3C:29:7A:B0:99:3F:58:DE:04:D4:FB:9A:07:EA
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5f:31:ca:b8:bd:81:46:1c:7a:c2:9b:fb:a9:76:13:61:52:
         31:39:4c:bb:9b:e3:c8:07:de:90:e6:7f:98:0e:e6:d6:f4:89:
         43:d8:1e:f9:15:fc:ee:1d:85:4b:5c:8c:f8:b3:a8:9f:67:13:
         85:6b:1a:5a:1f:52:e4:81:65:41:64:54:ad:a1:11:36:06:79:
         a0:ac:19:9c:31:95:5f:3a:10:cf:e4:88:93:ad:d6:1a:d8:20:
         61:dc:b8:44:84:b3:7b:a9:b1:5c:66:23:2b:f4:c6:ff:52:0b:
         21:4f:77:d9:fe:37:2e:4c:e4:86:cd:c6:78:c8:91:75:d3:6f:
         b1:2a:d4:ee:a2:fa:58:d6:c1:54:2a:e7:ce:fd:fe:b3:94:4e:
         ae:04:90:c0:4e:c9:1d:b4:c1:57:1d:92:57:f2:82:e6:72:81:
         6c:1d:cf:72:92:58:58:15:cd:3d:58:65:53:40:35:f8:40:3f:
         49:e5:bf:b4:ae:15:bd:c6:f7:5b:ec:f2:62:1b:3d:74:17:df:
         f7:59:d1:33:be:d9:d7:e9:0b:c1:5e:99:fb:9f:7e:6d:95:1b:
         ef:ce:a2:d4:74:af:c8:51:3c:f0:92:86:09:e1:11:96:f0:eb:
         41:84:89:68:b9:53:06:fc:e8:25:a3:70:77:7a:bf:7a:80:e0:
         f2:18:07:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSolcjpc5KjnDauYnhZkk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUwNjA5MDMwMTAwWhcNMjUwNjEwMDMwMTAwWjAzMTEwLwYDVQQD
EyhiYWMxZTQwMTdmZDYzYzI5N2FiMDk5M2Y1OGRlMDRkNGZiOWEwN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AVCuYSibtpedvqv1BaFNGLSgrU1
H56YYD0sPPj272RJViZ1NFK32wWa/iR9Oj1E6L1ankP5da9C9nfshd+eAk2AdYRE
spPJih0zusN/KiejqemjG38kgVTAF4TtrjVgb5HMgBXm4LbtGq8L2paUeTYkYPEE
qc2sZVko/ysUaT1Rce5wrVggszELXEmG5WD49WmdqzTHpr4Xav7V0gIJUMlCq2a1
Ck4xGEropmkX3ZohqAS9xUQaFukjBE5nW7kXfiPN5yQZouBwZdbmyZryBPkSQN/Y
U3Z+Fq8YOSaWcLrhH5xRL6kcWZfPXgCXMpzmFCBJ9TXDx2S/WX19D2bbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrB5AF/1jwperCZP1jeBNT7mgfqMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV8xyri9
gUYcesKb+6l2E2FSMTlMu5vjyAfekOZ/mA7m1vSJQ9ge+RX87h2FS1yM+LOon2cT
hWsaWh9S5IFlQWRUraERNgZ5oKwZnDGVXzoQz+SIk63WGtggYdy4RISze6mxXGYj
K/TG/1ILIU932f43Lkzkhs3GeMiRddNvsSrU7qL6WNbBVCrnzv3+s5ROrgSQwE7J
HbTBVx2SV/KC5nKBbB3PcpJYWBXNPVhlU0A1+EA/SeW/tK4Vvcb3W+zyYhs9dBff
91nRM77Z1+kLwV6Z+59+bZUb786i1HSvyFE88JKGCeERlvDrQYSJaLlTBvzoJaNw
d3q/eoDg8hgHPA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:10:23 2025 by rpki-client