Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File:                     yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier:          keA2F2CiQKlr8q3rQY5YUj87nNiklpRJi5/orPUwZG4=
Subject key identifier:   85:63:53:A7:4D:78:34:BC:A3:21:9F:96:CB:20:73:22:52:2F:19:0B
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer:       /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial:       01974AE82E1998E32CAFEA282796A596284D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number:          1583
Signing time:             Sat 07 Jun 2025 15:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:19 +0000
Files and hashes:         1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
                          2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
                          3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
                          4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: RJpmc4MS7rbmXp1QPvFXQvX/HsvNp62lU8XlBQZanGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:2e:19:98:e3:2c:af:ea:28:27:96:a5:96:28:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
        Validity
            Not Before: Jun  7 15:00:19 2025 GMT
            Not After : Jun  8 15:00:19 2025 GMT
        Subject: CN=856353a74d7834bca3219f96cb207322522f190b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:ac:be:c6:04:89:55:09:c7:0a:3b:80:ca:
                    a4:05:28:5d:52:a1:9e:4c:d6:85:d7:ac:01:68:2b:
                    a6:68:6e:f0:7a:76:83:d5:53:5a:f5:7a:f8:25:7f:
                    ff:2b:c4:23:45:52:2a:2f:32:28:de:3d:9b:d1:a3:
                    56:ce:04:be:38:7b:ac:a4:f2:de:eb:ec:e9:d5:c2:
                    b3:dd:5e:78:c2:8b:29:91:4d:14:fd:8d:10:77:03:
                    ee:88:b4:33:b1:56:12:d8:46:f7:fa:c7:62:5a:ed:
                    0c:06:d4:99:d5:36:e1:09:21:56:1c:16:40:bd:38:
                    d4:2a:f9:38:1b:11:c6:65:af:b3:5f:0e:54:f5:ca:
                    58:6d:bd:4e:ad:4e:81:7b:fa:5a:9d:c9:02:9f:47:
                    f5:4f:71:bb:3b:fb:1e:5e:8a:69:09:5b:c6:fb:43:
                    f5:70:4f:bb:26:2c:4e:2a:0d:05:83:a6:5f:1f:7a:
                    22:18:e0:06:76:5d:e1:c7:2b:a6:ae:8c:4d:28:22:
                    34:48:c9:13:12:fb:94:04:e6:3b:c6:94:49:46:fd:
                    5e:a1:79:16:ac:15:25:ef:64:3e:99:92:16:b7:b5:
                    36:90:6a:1f:28:31:c5:fb:d3:7a:3f:8f:23:1f:7b:
                    72:35:37:9c:3c:80:4c:27:c5:fc:14:8b:0e:49:da:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:63:53:A7:4D:78:34:BC:A3:21:9F:96:CB:20:73:22:52:2F:19:0B
            X509v3 Authority Key Identifier:
                keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:db:7d:4e:ce:f7:82:ca:28:10:b4:3f:72:b9:e9:eb:94:05:
         00:e9:04:db:da:b5:c0:62:fb:d9:46:29:34:13:ab:dc:b1:49:
         75:70:d5:e5:cb:e9:46:76:66:9f:04:18:ba:62:c4:4c:18:40:
         a5:3e:81:a5:c0:49:ce:4e:23:25:5b:1f:08:b0:05:c1:1c:5e:
         9f:d9:8b:f0:d5:fb:f8:61:5d:64:74:cb:e3:25:d0:68:0b:61:
         21:a0:06:a1:b0:07:00:c6:f1:6e:32:dd:d8:35:cc:8e:73:b0:
         93:b3:49:fa:bd:61:3d:56:f8:7e:73:47:58:5e:79:1f:7c:a0:
         ef:23:3e:63:7a:2f:c6:7b:99:f5:76:a6:28:61:f9:19:c0:a5:
         f3:a1:7b:f0:44:b3:85:ca:2b:53:7f:bb:dd:3a:f6:5d:42:0e:
         36:cf:40:0a:08:6c:47:9f:bd:e7:28:9e:fa:a2:38:03:b3:73:
         88:82:2a:29:b4:ec:e3:38:68:12:a3:fd:32:78:c9:e5:7a:16:
         61:c4:3d:0e:a8:ca:d7:6f:9e:7f:ae:ee:79:84:85:ce:6b:8b:
         af:0a:c1:6c:da:7f:7e:53:6f:05:1f:ae:82:ec:7f:c3:b1:67:
         85:2c:fb:5b:55:f4:d5:41:eb:42:86:21:64:01:87:16:d4:92:
         bb:1a:5c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6C4ZmOMsr+ooJ5allihNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMjA2MDZkZTczMDQ1NmVkZDczMzVjYzg4MmNiZGY0Mzk2
ZjM0NjAwHhcNMjUwNjA3MTUwMDE5WhcNMjUwNjA4MTUwMDE5WjAzMTEwLwYDVQQD
Eyg4NTYzNTNhNzRkNzgzNGJjYTMyMTlmOTZjYjIwNzMyMjUyMmYxOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu92svsYEiVUJxwo7gMqkBShdUqGe
TNaF16wBaCumaG7wenaD1VNa9Xr4JX//K8QjRVIqLzIo3j2b0aNWzgS+OHuspPLe
6+zp1cKz3V54wospkU0U/Y0QdwPuiLQzsVYS2Eb3+sdiWu0MBtSZ1TbhCSFWHBZA
vTjUKvk4GxHGZa+zXw5U9cpYbb1OrU6Be/panckCn0f1T3G7O/seXoppCVvG+0P1
cE+7JixOKg0Fg6ZfH3oiGOAGdl3hxyumroxNKCI0SMkTEvuUBOY7xpRJRv1eoXkW
rBUl72Q+mZIWt7U2kGofKDHF+9N6P48jH3tyNTecPIBMJ8X8FIsOSdptLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVjU6dNeDS8oyGflssgcyJSLxkLMB8GA1UdIwQY
MBaAFMsgYG3nMEVu3XM1zIgsvfQ5bzRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQt
YjNkODZhYTQzYmM1LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iZjdhMjgtYmYxZS00ODM1LWJlZWQtYjNkODZhYTQzYmM1
LzEveXlCZ2JlY3dSVzdkY3pYTWlDeTk5RGx2TkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNt9Ts73
gsooELQ/crnp65QFAOkE29q1wGL72UYpNBOr3LFJdXDV5cvpRnZmnwQYumLETBhA
pT6BpcBJzk4jJVsfCLAFwRxen9mL8NX7+GFdZHTL4yXQaAthIaAGobAHAMbxbjLd
2DXMjnOwk7NJ+r1hPVb4fnNHWF55H3yg7yM+Y3ovxnuZ9XamKGH5GcCl86F78ESz
hcorU3+73Tr2XUIONs9ACghsR5+95yie+qI4A7NziIIqKbTs4zhoEqP9MnjJ5XoW
YcQ9DqjK12+ef67ueYSFzmuLrwrBbNp/flNvBR+ugux/w7FnhSz7W1X01UHrQoYh
ZAGHFtSSuxpcdg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:37:14 2025 by rpki-client