Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
File:                     ysmhVQ09sawK6xHBbWPkimg7ygM.mft (raw, json)
Hash identifier:          12MicaJGnbRtWoXzOFhhDh+8Idn1vPT/36czLgCqjYg=
Subject key identifier:   EE:EF:05:E9:98:B6:29:2A:91:EC:B4:BD:9E:30:99:DB:74:18:45:FB
Authority key identifier: CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03
Certificate issuer:       /CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
Certificate serial:       01975459BB97AB1E69B628D2ADFA3523BBAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
Manifest number:          02DB
Signing time:             Mon 09 Jun 2025 11:00:56 +0000
Manifest this update:     Mon 09 Jun 2025 11:00:56 +0000
Manifest next update:     Tue 10 Jun 2025 11:00:56 +0000
Files and hashes:         1: Rui0sD0wI3PFIXuSgFCUVWy-M9k.roa (hash: hbv5XThLS6CFQJgStPKrJAlPn/du5JdwcgW0fJRsYnU=)
                          2: ysmhVQ09sawK6xHBbWPkimg7ygM.crl (hash: Ob+lUvlOWW1V11mCUIZiQJDXJFrvgjGRtpIdlH/CuUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:59:bb:97:ab:1e:69:b6:28:d2:ad:fa:35:23:bb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9a1550d3db1ac0aeb11c16d63e48a683bca03
        Validity
            Not Before: Jun  9 11:00:56 2025 GMT
            Not After : Jun 10 11:00:56 2025 GMT
        Subject: CN=eeef05e998b6292a91ecb4bd9e3099db741845fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:d6:6a:1f:d7:0a:02:ab:21:9b:0e:d3:a9:
                    d1:e2:df:f4:c4:78:78:7d:23:2b:5e:c6:a1:c8:01:
                    13:4a:f9:e5:4f:ad:ef:16:06:9a:71:a5:d7:6a:67:
                    fa:d9:1b:96:df:cb:a8:3b:f6:ea:8f:27:18:ff:32:
                    3a:8b:bf:4f:25:07:cc:7e:79:ca:8f:b0:4d:b3:64:
                    b2:37:4c:c8:1b:43:bc:24:5f:c6:1c:28:0a:28:2d:
                    d3:1c:bd:47:94:05:81:27:93:e9:63:8f:8e:ef:f5:
                    5f:c8:2d:83:98:64:49:09:c7:2b:c7:93:23:42:05:
                    f5:fa:28:65:b3:ba:11:75:29:9e:47:b1:4d:98:4d:
                    8d:8b:eb:83:bc:3d:52:66:73:36:8c:96:2c:fe:01:
                    3e:34:84:3f:23:73:5f:e3:c7:b3:e5:a1:fb:df:c7:
                    a2:97:8c:23:e4:bd:6b:65:75:10:48:34:69:4d:db:
                    78:fb:97:23:0f:25:2d:70:96:e6:47:61:27:de:fc:
                    21:68:97:d6:52:94:3a:38:1e:ea:62:fd:31:9c:48:
                    d7:2b:82:38:dd:c2:87:73:25:9b:ce:a2:6c:f1:60:
                    30:8d:ec:75:78:29:1b:32:5a:41:85:68:3a:92:5b:
                    97:ba:2c:32:00:1e:5c:68:fc:ed:46:e7:f4:98:51:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EF:05:E9:98:B6:29:2A:91:EC:B4:BD:9E:30:99:DB:74:18:45:FB
            X509v3 Authority Key Identifier:
                keyid:CA:C9:A1:55:0D:3D:B1:AC:0A:EB:11:C1:6D:63:E4:8A:68:3B:CA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmhVQ09sawK6xHBbWPkimg7ygM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7424c5-2c99-4952-86e7-073fb83abfc6/1/ysmhVQ09sawK6xHBbWPkimg7ygM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:de:2d:46:11:26:c0:82:39:12:27:0f:4e:0d:d6:53:25:
         01:ee:7f:c9:4c:15:d6:21:07:0b:69:69:5e:3c:6c:ec:77:94:
         ff:27:97:43:30:73:62:93:c6:1e:b9:15:b5:88:a0:a3:aa:20:
         52:c9:1d:ae:f5:16:35:27:72:1b:b1:03:fc:dd:bc:46:3f:3b:
         8e:d7:df:47:50:f0:47:ca:3e:35:b5:e3:79:d6:a4:a6:6b:e1:
         a2:80:47:ea:5b:f7:a2:59:31:a5:74:da:28:09:ec:35:ad:66:
         4f:0a:97:89:d8:76:cd:10:a3:c9:8b:d9:1d:9a:e3:d5:29:dc:
         c3:9a:06:78:9f:f9:21:3a:66:e4:85:0d:41:aa:3b:42:9d:a8:
         eb:7f:6b:71:40:6c:79:16:fa:bc:79:89:6a:6c:e6:95:c2:cb:
         2c:f3:f0:3d:88:f6:30:50:b0:2f:6d:69:c2:65:11:b4:5c:94:
         1a:45:41:6e:a2:12:eb:8a:08:9a:af:a3:c8:0e:a6:df:30:c3:
         fa:05:17:5e:cc:02:7e:bb:8a:f9:8a:2d:38:61:11:b8:8d:1a:
         14:35:29:bc:63:b5:f1:37:cb:ee:9c:f0:28:ff:2c:21:ee:2a:
         ee:32:8b:18:aa:2a:03:54:f9:b0:fe:5f:1b:95:e7:06:be:7e:
         eb:dc:73:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUWbuXqx5ptijSrfo1I7usMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzlhMTU1MGQzZGIxYWMwYWViMTFjMTZkNjNlNDhhNjgz
YmNhMDMwHhcNMjUwNjA5MTEwMDU2WhcNMjUwNjEwMTEwMDU2WjAzMTEwLwYDVQQD
EyhlZWVmMDVlOTk4YjYyOTJhOTFlY2I0YmQ5ZTMwOTlkYjc0MTg0NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPrWah/XCgKrIZsO06nR4t/0xHh4
fSMrXsahyAETSvnlT63vFgaacaXXamf62RuW38uoO/bqjycY/zI6i79PJQfMfnnK
j7BNs2SyN0zIG0O8JF/GHCgKKC3THL1HlAWBJ5PpY4+O7/VfyC2DmGRJCccrx5Mj
QgX1+ihls7oRdSmeR7FNmE2Ni+uDvD1SZnM2jJYs/gE+NIQ/I3Nf48ez5aH738ei
l4wj5L1rZXUQSDRpTdt4+5cjDyUtcJbmR2En3vwhaJfWUpQ6OB7qYv0xnEjXK4I4
3cKHcyWbzqJs8WAwjex1eCkbMlpBhWg6kluXuiwyAB5caPztRuf0mFHB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7vBemYtikqkey0vZ4wmdt0GEX7MB8GA1UdIwQY
MBaAFMrJoVUNPbGsCusRwW1j5IpoO8oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTct
MDczZmI4M2FiZmM2LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NDI0YzUtMmM5OS00OTUyLTg2ZTctMDczZmI4M2FiZmM2
LzEveXNtaFZRMDlzYXdLNnhIQmJXUGtpbWc3eWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlveLUYR
JsCCORInD04N1lMlAe5/yUwV1iEHC2lpXjxs7HeU/yeXQzBzYpPGHrkVtYigo6og
UskdrvUWNSdyG7ED/N28Rj87jtffR1DwR8o+NbXjedakpmvhooBH6lv3olkxpXTa
KAnsNa1mTwqXidh2zRCjyYvZHZrj1Sncw5oGeJ/5ITpm5IUNQao7Qp2o639rcUBs
eRb6vHmJamzmlcLLLPPwPYj2MFCwL21pwmURtFyUGkVBbqIS64oImq+jyA6m3zDD
+gUXXswCfruK+YotOGERuI0aFDUpvGO18TfL7pzwKP8sIe4q7jKLGKoqA1T5sP5f
G5XnBr5+69xzTQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:20:00 2025 by rpki-client