Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
File:                     yhmr64q55jiQoiPC_WulaEmL27o.mft (raw, json)
Hash identifier:          KgcPKr2eIztEf+K59pOx1YPrV8b9KSUG7gvAbvvz8ns=
Subject key identifier:   33:13:A3:59:FD:27:AC:4A:E7:D6:ED:AD:E0:25:AF:1C:A2:2F:D6:4A
Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA
Certificate issuer:       /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
Certificate serial:       0197477A0FF384F412C60679C375C26EDD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 23:01:11 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:11 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:11 +0000
Files and hashes:         1: 4aW2wKCZJHKdaC2dMSiuzWhCfmM.roa (hash: tmaMv+cdlIL60LuV9hVyriQ5fK7vMtVKvDnmNSyFkzU=)
                          2: yhmr64q55jiQoiPC_WulaEmL27o.crl (hash: 4xIBQM6Y5KiXElIWSUYJnZo4bYyrSscbtW3D+/Xs1PQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:0f:f3:84:f4:12:c6:06:79:c3:75:c2:6e:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba
        Validity
            Not Before: Jun  6 23:01:11 2025 GMT
            Not After : Jun  7 23:01:11 2025 GMT
        Subject: CN=3313a359fd27ac4ae7d6edade025af1ca22fd64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:ce:1d:bb:15:a2:28:c6:98:58:81:af:53:
                    79:01:39:46:6c:af:c6:98:ce:20:73:bb:71:0f:54:
                    55:21:bf:33:8d:66:14:41:2c:e5:9d:00:e7:d8:ad:
                    98:51:c6:f4:2a:ea:75:ef:c4:2a:94:4f:62:1a:91:
                    ef:f7:95:7b:78:d9:87:1c:d6:f5:ec:07:62:5d:1a:
                    d4:bc:f9:33:52:f2:d4:25:71:51:1e:f1:60:7f:32:
                    aa:ee:f3:92:ad:bb:fe:c3:d4:a3:ce:d8:1b:e7:39:
                    c0:b1:71:89:7c:56:85:ec:a5:90:67:27:d6:05:0c:
                    55:79:04:15:b8:3b:13:91:74:25:b8:10:45:8d:63:
                    8d:f9:bb:08:fc:54:38:60:8d:15:ea:54:46:de:9a:
                    a4:fa:7d:ef:ef:77:a0:df:ea:d9:d7:e0:de:b3:f6:
                    bf:09:98:7a:1b:ed:98:26:e2:21:7a:69:11:25:ab:
                    37:53:86:20:51:a5:92:a3:d7:87:ae:0a:38:79:77:
                    09:4b:6a:90:f3:c1:73:94:17:bf:88:35:cb:cf:13:
                    69:a8:3d:e6:08:df:e4:ed:da:6c:df:e7:c5:d4:05:
                    21:ad:1a:27:60:6d:dc:3a:95:36:b7:f2:61:98:42:
                    4c:f4:8f:a5:08:3f:a3:6c:dc:ae:41:62:6a:66:1c:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:A3:59:FD:27:AC:4A:E7:D6:ED:AD:E0:25:AF:1C:A2:2F:D6:4A
            X509v3 Authority Key Identifier:
                keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9f:13:2e:21:1d:1d:04:06:80:d6:9f:cf:77:05:51:a9:3c:
         1a:60:e8:06:92:6f:26:19:f8:c7:31:eb:f9:81:4b:57:f2:f9:
         02:95:36:df:d0:64:df:0b:f0:38:c5:0b:62:6a:e6:b5:be:7c:
         e3:52:e8:59:46:15:0f:80:09:e6:65:eb:f3:33:ec:19:e4:82:
         46:cd:93:9d:9a:35:88:19:db:97:b8:8b:6e:2a:28:04:f3:2d:
         7d:6e:a2:2d:d6:1d:18:3d:65:7b:99:49:56:1a:20:b9:89:e4:
         bc:6f:5c:35:2c:7e:f0:e8:28:03:40:c1:71:52:4c:36:18:19:
         6c:e7:39:3b:3c:c0:e3:4c:58:43:31:d9:80:40:1e:0b:01:97:
         70:e0:1b:75:86:06:4f:51:c6:ad:09:3a:4b:8b:60:16:f4:6c:
         99:16:50:44:ac:30:a2:69:ce:53:06:39:af:cd:c9:1c:3a:3c:
         e7:d7:43:a0:ea:af:b0:d5:97:b6:aa:92:1d:b3:0a:c9:16:5b:
         18:f8:86:2b:95:1a:6e:20:4d:c3:5b:11:df:62:50:b6:33:25:
         88:4c:cf:64:95:af:86:c5:30:17:b2:ed:2b:d4:6c:b6:c1:bb:
         53:f8:57:cf:8e:d8:db:7a:f4:88:1e:6f:5e:08:59:37:ed:49:
         5c:98:79:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeg/zhPQSxgZ5w3XCbt17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4
YmRiYmEwHhcNMjUwNjA2MjMwMTExWhcNMjUwNjA3MjMwMTExWjAzMTEwLwYDVQQD
EygzMzEzYTM1OWZkMjdhYzRhZTdkNmVkYWRlMDI1YWYxY2EyMmZkNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl7OHbsVoijGmFiBr1N5ATlGbK/G
mM4gc7txD1RVIb8zjWYUQSzlnQDn2K2YUcb0Kup178QqlE9iGpHv95V7eNmHHNb1
7AdiXRrUvPkzUvLUJXFRHvFgfzKq7vOSrbv+w9Sjztgb5znAsXGJfFaF7KWQZyfW
BQxVeQQVuDsTkXQluBBFjWON+bsI/FQ4YI0V6lRG3pqk+n3v73eg3+rZ1+Des/a/
CZh6G+2YJuIhemkRJas3U4YgUaWSo9eHrgo4eXcJS2qQ88FzlBe/iDXLzxNpqD3m
CN/k7dps3+fF1AUhrRonYG3cOpU2t/JhmEJM9I+lCD+jbNyuQWJqZhymDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMTo1n9J6xK59btreAlrxyiL9ZKMB8GA1UdIwQY
MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt
MTNiYmNkMGY5Mzc2LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2
LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ8TLiEd
HQQGgNafz3cFUak8GmDoBpJvJhn4xzHr+YFLV/L5ApU239Bk3wvwOMULYmrmtb58
41LoWUYVD4AJ5mXr8zPsGeSCRs2TnZo1iBnbl7iLbiooBPMtfW6iLdYdGD1le5lJ
VhoguYnkvG9cNSx+8OgoA0DBcVJMNhgZbOc5OzzA40xYQzHZgEAeCwGXcOAbdYYG
T1HGrQk6S4tgFvRsmRZQRKwwomnOUwY5r83JHDo859dDoOqvsNWXtqqSHbMKyRZb
GPiGK5UabiBNw1sR32JQtjMliEzPZJWvhsUwF7LtK9RstsG7U/hXz47Y23r0iB5v
XghZN+1JXJh5eg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:34:36 2025 by rpki-client