Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
File:                     yh3yu8zALk5_Rk1p-q89bDcjSV4.mft (raw, json)
Hash identifier:          dZ//IKYCT2bEypVjXi9HF+2KvXMXkEUljdZiOiTM48U=
Subject key identifier:   62:12:D9:F4:5E:39:68:BB:FC:17:B7:93:F9:F7:D1:BA:CB:18:AE:DA
Authority key identifier: CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E
Certificate issuer:       /CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
Certificate serial:       01974779F9C5979E598CCDFD509592B19C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
Manifest number:          09ED
Signing time:             Fri 06 Jun 2025 23:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:05 +0000
Files and hashes:         1: UMCwwKy1mdru5x8odjrML6E-iug.roa (hash: B5zZRjqoCldth2bV2O4tywFTV5cYuj0RG6Np/XBkPdE=)
                          2: yh3yu8zALk5_Rk1p-q89bDcjSV4.crl (hash: JEnIgI+23hTyPATbi3U5EAzH1kBmIM8BbHHJFy6H22c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f9:c5:97:9e:59:8c:cd:fd:50:95:92:b1:9c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1df2bbccc02e4e7f464d69faaf3d6c3723495e
        Validity
            Not Before: Jun  6 23:01:05 2025 GMT
            Not After : Jun  7 23:01:05 2025 GMT
        Subject: CN=6212d9f45e3968bbfc17b793f9f7d1bacb18aeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:1f:d3:53:b3:af:96:b7:fd:22:53:95:a3:
                    11:e2:b4:5e:9c:a1:29:71:65:19:67:a9:8c:43:6e:
                    96:68:9e:af:6d:ba:39:e1:75:79:58:2b:fb:97:e7:
                    14:23:fa:2b:cd:3f:03:17:9e:90:33:b4:8d:db:20:
                    73:3f:92:37:73:bf:fb:88:75:65:19:ea:18:01:c5:
                    98:97:96:a3:ad:5b:25:82:a3:76:7d:da:78:fa:71:
                    e3:c9:50:61:a4:93:f4:b8:13:22:44:25:22:5b:b7:
                    83:64:3d:6f:fe:c2:2c:40:c3:8e:fb:02:1c:ed:e6:
                    51:e6:66:fd:73:b4:d5:aa:6f:43:39:b1:59:8f:84:
                    24:a1:27:6d:79:4d:e6:52:95:65:fe:4a:6a:ee:e0:
                    1a:87:2e:8b:17:35:5e:5b:d6:5f:cc:4d:7f:05:c6:
                    d0:20:f6:fc:18:90:81:00:92:7c:d1:38:27:dd:03:
                    d0:be:a3:77:b0:cc:8f:f5:24:01:00:9a:b0:f1:de:
                    59:27:3d:64:89:ba:09:7e:cf:30:90:cd:e3:7b:84:
                    39:b6:7e:3c:fe:35:ca:43:c0:a5:3f:d0:20:7e:3a:
                    08:ae:49:58:d5:9f:2c:85:66:44:04:a2:14:68:72:
                    7d:ab:c5:a2:c9:0d:62:fb:81:ab:16:bf:a3:62:50:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:D9:F4:5E:39:68:BB:FC:17:B7:93:F9:F7:D1:BA:CB:18:AE:DA
            X509v3 Authority Key Identifier:
                keyid:CA:1D:F2:BB:CC:C0:2E:4E:7F:46:4D:69:FA:AF:3D:6C:37:23:49:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3yu8zALk5_Rk1p-q89bDcjSV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7b7bd6-b538-4960-8559-dd49ecc26095/1/yh3yu8zALk5_Rk1p-q89bDcjSV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:38:1e:df:9a:bf:fb:18:8a:d5:35:0c:f3:cd:09:3b:a6:
         69:27:9f:a2:ea:2c:d7:20:5a:2d:bd:0b:ac:b9:54:1c:c5:6e:
         32:b2:72:16:26:b6:c7:8b:b9:e8:d0:2a:3a:f2:24:33:b3:5e:
         87:c3:9c:d2:35:0a:c3:dc:b8:7e:c9:bb:a2:72:23:6e:40:dd:
         79:98:37:51:e6:90:6d:fe:c3:76:71:f0:e1:6a:94:27:05:f4:
         2a:02:8e:e2:36:0c:7a:3a:27:0c:3d:23:02:d5:78:5b:d8:f5:
         79:93:b8:94:e4:db:2c:a1:7b:85:f7:2d:c5:eb:77:85:16:c4:
         9a:bd:1e:a7:5a:73:84:e7:d8:0e:d7:2d:49:0c:ec:09:3f:18:
         ac:58:23:a7:09:11:15:62:51:3e:41:61:e9:f3:d6:d8:52:c3:
         07:94:42:c5:d8:7b:15:e4:e0:20:a1:7c:1d:0c:40:4c:0b:a9:
         80:80:b3:e6:28:37:21:40:47:03:d1:e3:88:7b:44:ff:b9:4a:
         03:84:05:01:58:6d:60:66:98:42:71:b8:d7:5e:29:60:20:14:
         9d:80:c9:98:4d:14:02:61:03:c0:f2:79:14:38:52:b7:43:49:
         9e:7f:24:9c:8f:ab:d3:27:d6:e7:ac:96:26:88:31:d6:0b:7c:
         ae:ca:7b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHefnFl55ZjM39UJWSsZweMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMWRmMmJiY2NjMDJlNGU3ZjQ2NGQ2OWZhYWYzZDZjMzcy
MzQ5NWUwHhcNMjUwNjA2MjMwMTA1WhcNMjUwNjA3MjMwMTA1WjAzMTEwLwYDVQQD
Eyg2MjEyZDlmNDVlMzk2OGJiZmMxN2I3OTNmOWY3ZDFiYWNiMThhZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnAf01Ozr5a3/SJTlaMR4rRenKEp
cWUZZ6mMQ26WaJ6vbbo54XV5WCv7l+cUI/orzT8DF56QM7SN2yBzP5I3c7/7iHVl
GeoYAcWYl5ajrVslgqN2fdp4+nHjyVBhpJP0uBMiRCUiW7eDZD1v/sIsQMOO+wIc
7eZR5mb9c7TVqm9DObFZj4QkoSdteU3mUpVl/kpq7uAahy6LFzVeW9ZfzE1/BcbQ
IPb8GJCBAJJ80Tgn3QPQvqN3sMyP9SQBAJqw8d5ZJz1kiboJfs8wkM3je4Q5tn48
/jXKQ8ClP9AgfjoIrklY1Z8shWZEBKIUaHJ9q8WiyQ1i+4GrFr+jYlC74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIS2fReOWi7/Be3k/n30brLGK7aMB8GA1UdIwQY
MBaAFMod8rvMwC5Of0ZNafqvPWw3I0leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTkt
ZGQ0OWVjYzI2MDk1LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83YjdiZDYtYjUzOC00OTYwLTg1NTktZGQ0OWVjYzI2MDk1
LzEveWgzeXU4ekFMazVfUmsxcC1xODliRGNqU1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlc4Ht+a
v/sYitU1DPPNCTumaSefouos1yBaLb0LrLlUHMVuMrJyFia2x4u56NAqOvIkM7Ne
h8Oc0jUKw9y4fsm7onIjbkDdeZg3UeaQbf7DdnHw4WqUJwX0KgKO4jYMejonDD0j
AtV4W9j1eZO4lOTbLKF7hfctxet3hRbEmr0ep1pzhOfYDtctSQzsCT8YrFgjpwkR
FWJRPkFh6fPW2FLDB5RCxdh7FeTgIKF8HQxATAupgICz5ig3IUBHA9HjiHtE/7lK
A4QFAVhtYGaYQnG4114pYCAUnYDJmE0UAmEDwPJ5FDhSt0NJnn8knI+r0yfW56yW
Jogx1gt8rsp7kA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:45:57 2025 by rpki-client