Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File:                     YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier:          zSKUwDBqgvpb33dag97Xxx4Ky3/OP/q6Qi7OZhvQxRI=
Subject key identifier:   2C:F7:73:2B:08:27:2A:37:63:E8:4A:43:4B:88:3A:0B:FB:5C:0D:B3
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer:       /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial:       01974AE8D0666146FF08BFF9CFE483B8D274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 15:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:01 +0000
Files and hashes:         1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
                          2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: br+0BUBvq2ET6+s9s80J5UiJEnLdiEmiQDjK9nIwZz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:d0:66:61:46:ff:08:bf:f9:cf:e4:83:b8:d2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
        Validity
            Not Before: Jun  7 15:01:01 2025 GMT
            Not After : Jun  8 15:01:01 2025 GMT
        Subject: CN=2cf7732b08272a3763e84a434b883a0bfb5c0db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:25:11:ed:66:ed:2c:1a:dc:07:e2:fb:cd:
                    a9:24:1f:2d:15:61:e5:8a:a1:66:5a:cd:cc:9c:b8:
                    03:7c:45:57:66:e8:c3:bc:e8:ae:f6:02:1b:08:8a:
                    c5:0c:a8:70:95:ac:59:05:72:85:06:43:9e:09:b8:
                    36:ac:1c:1d:28:7a:79:7b:33:01:80:6a:fc:c6:b8:
                    29:ba:7e:d4:f0:2f:23:14:56:9f:8d:12:ba:fb:90:
                    00:03:cc:bc:51:8a:54:86:dd:14:4c:29:3f:34:0e:
                    5c:0a:a6:ff:97:5e:f9:ca:c2:70:db:a5:39:5e:c3:
                    66:d9:8c:7b:2a:0f:10:b7:46:f6:9e:71:2b:49:d3:
                    62:2e:7d:85:b4:31:17:87:cb:b3:f5:33:2d:9a:b6:
                    6c:8f:0d:be:86:79:4c:75:e0:1d:ae:7e:d0:bc:e2:
                    40:74:bd:2f:8e:9f:89:e3:9a:72:06:e8:ef:59:b0:
                    14:4f:e8:cb:29:10:b5:88:1d:7b:4d:b3:f8:dc:f5:
                    f4:54:42:30:2c:c1:17:6a:ed:f5:7c:14:6b:18:97:
                    d9:a0:24:ac:03:41:b2:40:63:74:82:82:30:5d:a6:
                    2f:21:aa:fb:0c:4c:8d:b9:96:37:ae:58:2c:d0:16:
                    27:75:64:73:ca:08:8b:d1:fd:32:e8:ff:2a:f3:91:
                    4d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:73:2B:08:27:2A:37:63:E8:4A:43:4B:88:3A:0B:FB:5C:0D:B3
            X509v3 Authority Key Identifier:
                keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:50:17:21:60:04:a7:b9:d0:93:0a:ba:3d:f4:93:2d:52:
         13:a9:a7:6c:f1:d7:33:e6:8b:63:41:ed:75:a3:56:f2:59:e4:
         fc:dd:3f:90:71:d3:80:af:4b:08:98:32:fb:8c:e9:3a:bd:f5:
         0c:ce:34:01:97:dc:fb:4f:26:5e:30:6b:17:75:b7:ee:9c:65:
         9c:d4:77:ae:9c:7a:02:be:6a:e8:8e:b8:64:bd:37:dc:81:00:
         2b:76:c8:f8:f7:a6:54:9f:34:75:21:3b:1b:8b:4d:a4:1c:fb:
         26:0c:0b:7a:a9:df:1c:93:05:d3:c9:f7:7e:6b:e6:2c:18:c4:
         7b:a7:c5:fc:29:2d:46:6d:76:13:78:09:d8:1e:2a:48:67:41:
         2b:b9:40:bc:ad:bd:63:c9:af:a1:fd:97:2e:09:4c:1f:bc:92:
         f6:d8:fd:9c:ae:62:48:af:42:84:2b:dc:9b:4b:8b:de:db:a1:
         b3:fc:ed:6d:ca:2c:4c:48:97:d6:c9:f0:28:94:fe:c9:d1:f5:
         f0:d2:f9:e3:3c:5c:23:ef:55:43:d1:40:03:96:89:b7:d1:98:
         b6:81:ee:91:33:b3:7b:69:89:07:a0:34:d0:ba:7b:68:23:90:
         d8:a8:80:9e:71:b3:a9:68:7d:eb:70:31:28:e3:54:2e:20:0a:
         dc:0c:31:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6NBmYUb/CL/5z+SDuNJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMDQxMTIxY2NjNmU2NWQ5MzM5NjFmZDU3MmQ1OWUyNjFm
MjFhMzEwHhcNMjUwNjA3MTUwMTAxWhcNMjUwNjA4MTUwMTAxWjAzMTEwLwYDVQQD
EygyY2Y3NzMyYjA4MjcyYTM3NjNlODRhNDM0Yjg4M2EwYmZiNWMwZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbslEe1m7Swa3Afi+82pJB8tFWHl
iqFmWs3MnLgDfEVXZujDvOiu9gIbCIrFDKhwlaxZBXKFBkOeCbg2rBwdKHp5ezMB
gGr8xrgpun7U8C8jFFafjRK6+5AAA8y8UYpUht0UTCk/NA5cCqb/l175ysJw26U5
XsNm2Yx7Kg8Qt0b2nnErSdNiLn2FtDEXh8uz9TMtmrZsjw2+hnlMdeAdrn7QvOJA
dL0vjp+J45pyBujvWbAUT+jLKRC1iB17TbP43PX0VEIwLMEXau31fBRrGJfZoCSs
A0GyQGN0goIwXaYvIar7DEyNuZY3rlgs0BYndWRzygiL0f0y6P8q85FN0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz3cysIJyo3Y+hKQ0uIOgv7XA2zMB8GA1UdIwQY
MBaAFGEEESHMxuZdkzlh/VctWeJh8hoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEt
ZGJhNmQ3NTk0YzE5LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zODNiZTYtN2MzMS00ZGNhLWIzYzEtZGJhNmQ3NTk0YzE5
LzEvWVFRUkljekc1bDJUT1dIOVZ5MVo0bUh5R2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo51QFyFg
BKe50JMKuj30ky1SE6mnbPHXM+aLY0HtdaNW8lnk/N0/kHHTgK9LCJgy+4zpOr31
DM40AZfc+08mXjBrF3W37pxlnNR3rpx6Ar5q6I64ZL033IEAK3bI+PemVJ80dSE7
G4tNpBz7JgwLeqnfHJMF08n3fmvmLBjEe6fF/CktRm12E3gJ2B4qSGdBK7lAvK29
Y8mvof2XLglMH7yS9tj9nK5iSK9ChCvcm0uL3tuhs/ztbcosTEiX1snwKJT+ydH1
8NL54zxcI+9VQ9FAA5aJt9GYtoHukTOze2mJB6A00Lp7aCOQ2KiAnnGzqWh963Ax
KONULiAK3AwxOg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:27:00 2025 by rpki-client