Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File:                     A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier:          Oxz00mI8KeMjgL57qKpDLHYkozs9DWBCIjGmelM38ws=
Subject key identifier:   5B:E2:95:51:37:54:59:B0:B3:D1:B6:03:3F:10:4D:91:91:3E:A8:0E
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer:       /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial:       01974D44EC867375BBC0FE3026B8DDA7FE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 02:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:52 +0000
Files and hashes:         1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: Cz4HjW5NibnvTFfEJk/4zeu0dufN926gybp9Tiboja4=)
                          2: KCo_EXF_kwXFBoy_-8g1vn9X4IU.roa (hash: 3gljbk7M1fRChLX3eXWg8UNcaSKjRzvlcThXCcbYJEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:ec:86:73:75:bb:c0:fe:30:26:b8:dd:a7:fe:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
        Validity
            Not Before: Jun  8 02:00:52 2025 GMT
            Not After : Jun  9 02:00:52 2025 GMT
        Subject: CN=5be29551375459b0b3d1b6033f104d91913ea80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:6f:55:81:f0:64:3b:f0:8a:e0:08:2b:78:
                    fa:b2:df:87:e7:c8:36:a1:a8:ae:9b:70:56:7e:80:
                    21:5a:43:a2:41:70:01:39:31:1c:3b:6f:ff:85:2b:
                    2a:2e:83:f8:8a:56:e8:13:72:8f:a0:e6:c3:31:b4:
                    3a:82:91:ce:7d:57:67:09:b9:93:62:5e:a7:90:d1:
                    4d:ca:00:80:35:8c:a1:6e:65:4b:37:04:14:98:f0:
                    3a:45:0a:72:f4:66:9f:95:aa:5b:96:32:55:98:b3:
                    a7:aa:1e:d6:28:9c:f8:de:73:af:95:ee:18:60:a6:
                    32:af:bf:f1:dc:15:fb:96:f7:2a:dd:4e:3c:c5:8a:
                    a2:fa:17:e5:0d:ba:97:0e:c1:f4:18:1a:a6:9c:a3:
                    db:99:7a:7e:b2:9f:86:96:39:fc:f8:88:bb:38:30:
                    cd:20:f6:ab:a1:c3:69:ed:6e:57:21:61:45:5a:02:
                    b1:58:d1:2e:9e:25:37:37:c9:45:0e:dd:4d:48:6e:
                    89:10:69:79:02:a3:55:94:1b:88:55:c4:f0:3e:b1:
                    4b:d8:58:e2:6e:83:0f:ff:fb:b2:12:b8:2e:c9:30:
                    eb:f1:27:b2:d9:7b:b3:e5:6d:d6:1e:d4:eb:d7:29:
                    f5:dd:3e:b3:d1:6b:9c:0d:8b:70:cd:d0:87:b7:5c:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E2:95:51:37:54:59:B0:B3:D1:B6:03:3F:10:4D:91:91:3E:A8:0E
            X509v3 Authority Key Identifier:
                keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:88:90:3e:54:69:23:17:da:5e:3b:31:af:83:38:60:61:
         51:af:d2:32:39:d8:e9:5e:6b:d4:35:ab:bb:38:f3:0a:a8:a9:
         c6:a8:18:a6:f6:1d:8a:3a:54:1a:d5:40:60:23:47:b0:9a:c4:
         9f:be:1a:dd:89:f7:87:16:46:21:f4:57:15:ff:66:ba:39:c6:
         09:65:1a:27:0f:a5:af:cf:3a:68:f8:17:81:85:0b:1c:8f:b8:
         1d:f4:75:39:8b:92:4b:d3:94:1e:c2:04:54:60:78:a0:94:95:
         69:47:2c:04:a7:32:27:dd:07:0a:17:4c:24:eb:7e:1b:84:23:
         1e:07:c4:69:6f:c3:ed:f2:be:49:31:8a:bf:6f:0d:30:45:6a:
         05:7a:5d:76:ce:8f:c1:43:eb:9c:ae:a7:15:2e:fb:b4:34:86:
         46:67:e2:63:69:3c:6c:c7:f4:ea:14:48:41:58:36:d4:d2:cb:
         fd:0f:c9:f8:28:4d:91:fe:20:c4:18:1e:65:f4:a7:ea:ea:c5:
         74:dd:39:4e:e7:75:ac:fe:6c:46:ff:69:aa:13:d7:84:8f:26:
         07:f9:17:f7:ce:4d:a6:9d:20:6e:41:51:c4:e9:0e:ca:f8:a6:
         25:2a:34:38:5f:b5:76:2a:b9:9b:14:df:eb:7d:a2:cc:ec:4f:
         20:f7:87:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNROyGc3W7wP4wJrjdp/5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZWNhNzkzMjQ1NzUyYjY3YTg4MWY3OGUzNWFiOGZmNDlk
ZDNlYzEwHhcNMjUwNjA4MDIwMDUyWhcNMjUwNjA5MDIwMDUyWjAzMTEwLwYDVQQD
Eyg1YmUyOTU1MTM3NTQ1OWIwYjNkMWI2MDMzZjEwNGQ5MTkxM2VhODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ABvVYHwZDvwiuAIK3j6st+H58g2
oaium3BWfoAhWkOiQXABOTEcO2//hSsqLoP4ilboE3KPoObDMbQ6gpHOfVdnCbmT
Yl6nkNFNygCANYyhbmVLNwQUmPA6RQpy9GaflapbljJVmLOnqh7WKJz43nOvle4Y
YKYyr7/x3BX7lvcq3U48xYqi+hflDbqXDsH0GBqmnKPbmXp+sp+Gljn8+Ii7ODDN
IParocNp7W5XIWFFWgKxWNEuniU3N8lFDt1NSG6JEGl5AqNVlBuIVcTwPrFL2Fji
boMP//uyErguyTDr8Sey2Xuz5W3WHtTr1yn13T6z0WucDYtwzdCHt1yRXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvilVE3VFmws9G2Az8QTZGRPqgOMB8GA1UdIwQY
MBaAFAPsp5MkV1K2eogfeONauP9J3T7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2Yt
OWZkYzEwNmM4MTUzLzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wM2JlYjQtMjQwYi00Y2JmLWFhM2YtOWZkYzEwNmM4MTUz
LzEvQS15bmt5UlhVclo2aUI5NDQxcTRfMG5kUHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA2IkD5U
aSMX2l47Ma+DOGBhUa/SMjnY6V5r1DWruzjzCqipxqgYpvYdijpUGtVAYCNHsJrE
n74a3Yn3hxZGIfRXFf9mujnGCWUaJw+lr886aPgXgYULHI+4HfR1OYuSS9OUHsIE
VGB4oJSVaUcsBKcyJ90HChdMJOt+G4QjHgfEaW/D7fK+STGKv28NMEVqBXpdds6P
wUPrnK6nFS77tDSGRmfiY2k8bMf06hRIQVg21NLL/Q/J+ChNkf4gxBgeZfSn6urF
dN05Tud1rP5sRv9pqhPXhI8mB/kX985Npp0gbkFRxOkOyvimJSo0OF+1diq5mxTf
632izOxPIPeHug==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:36:49 2025 by rpki-client