Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
File:                     mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft (raw, json)
Hash identifier:          CzN+1kwDewpn66rxGhc0r1ji9tUJrrzOuR1NfYaxcM4=
Subject key identifier:   3D:5E:91:C0:DD:BA:75:C4:0C:F1:57:54:0A:1C:A7:27:F7:09:38:AD
Authority key identifier: 99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D
Certificate issuer:       /CN=998674263fccd07f684e1e199302eeefe783fb3d
Certificate serial:       0199221F3EAA967A29441760E7698C7C7545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
Manifest number:          0BA2
Signing time:             Sun 07 Sep 2025 03:01:36 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:36 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:36 +0000
Files and hashes:         1: LB9yxSJR9ouxobcPst7y075Gi24.roa (hash: 9cHQrj6vkKZZg+caaJv03RON5UELRQ6rlqWUQeFM15Y=)
                          2: mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl (hash: YFKqo5LRrFeGpMCBFlNM3BGsWiTHKwAzxEaibj/7R14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:3e:aa:96:7a:29:44:17:60:e7:69:8c:7c:75:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998674263fccd07f684e1e199302eeefe783fb3d
        Validity
            Not Before: Sep  7 03:01:36 2025 GMT
            Not After : Sep  8 03:01:36 2025 GMT
        Subject: CN=3d5e91c0ddba75c40cf157540a1ca727f70938ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:8c:bd:d8:e3:c7:71:38:ea:b3:90:4d:d1:
                    4a:44:6f:23:e2:28:66:4c:5b:10:34:c8:32:a3:0b:
                    e8:77:28:3f:c2:d2:fa:82:2f:0d:14:f3:66:e0:b0:
                    d4:9c:47:2b:23:6d:1d:cf:21:2e:6c:b9:08:67:6a:
                    ed:6e:04:5f:c9:93:9b:03:8c:eb:09:22:c7:fb:17:
                    20:17:a6:d2:45:85:50:71:67:8f:34:23:49:ae:8a:
                    06:6a:c2:4f:63:03:f4:04:f0:fb:d1:53:28:b7:04:
                    1e:63:c3:20:79:3a:da:6a:43:09:46:cd:ec:61:7b:
                    41:be:57:fa:f6:6a:68:ee:7a:24:62:31:87:e1:44:
                    27:96:1d:7e:85:ab:26:d7:49:16:98:32:a6:55:c9:
                    64:35:68:c5:5b:01:e5:6d:85:e6:9d:91:f5:eb:20:
                    7c:3e:e0:9c:80:9a:cf:50:e4:c4:77:af:47:59:07:
                    22:c9:06:d7:c0:cb:e0:27:d5:e7:db:04:33:0c:60:
                    e8:01:93:6a:35:a9:c1:a8:a9:31:48:7c:57:0a:7e:
                    fb:5a:c9:16:bf:80:e4:50:2c:76:ca:5d:c4:5c:be:
                    71:6b:db:59:22:b7:d4:d1:2f:f7:d1:a6:8b:b6:3c:
                    04:d8:54:8a:4c:60:3c:b5:47:8d:bf:00:05:d9:d1:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5E:91:C0:DD:BA:75:C4:0C:F1:57:54:0A:1C:A7:27:F7:09:38:AD
            X509v3 Authority Key Identifier:
                keyid:99:86:74:26:3F:CC:D0:7F:68:4E:1E:19:93:02:EE:EF:E7:83:FB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/feece0-3226-41d6-9461-edefbc24c822/1/mYZ0Jj_M0H9oTh4ZkwLu7-eD-z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:42:28:1a:69:11:29:9a:1e:82:0c:f8:01:5e:49:b8:98:de:
         a7:af:e4:9b:f2:70:f9:cf:bf:13:d9:31:85:86:67:19:8a:b7:
         05:d9:4d:00:9d:24:89:bb:66:0a:07:c4:a4:3e:2d:86:b1:18:
         b7:4a:ab:37:75:91:97:98:c2:8c:fc:7d:63:4a:b9:12:d4:51:
         a6:b5:81:3f:fc:f7:2d:fb:53:3a:03:66:36:54:2e:fd:c8:9b:
         e2:f8:3c:98:73:1b:83:e9:8f:58:14:6b:f3:97:b1:74:5d:a8:
         2a:59:4f:f0:b2:d4:76:ee:f6:ac:b1:d2:78:d0:4d:14:f6:97:
         ed:52:86:07:ca:f8:54:4e:8a:1a:90:93:eb:5f:c3:d7:ff:0f:
         01:8e:e7:e8:ff:f4:5b:f2:a3:7e:aa:fd:99:66:59:9a:ad:76:
         f7:81:cc:ca:5b:35:0b:a8:1f:9b:73:f3:e2:42:95:9d:70:b7:
         b8:4f:bf:7e:c2:3a:ae:33:01:bf:12:69:ea:d0:76:64:35:37:
         44:4e:f4:77:bf:6c:aa:9e:9e:0a:ea:0a:1b:9d:5f:51:d7:68:
         22:c9:d6:e6:68:ec:02:24:36:48:9c:67:a5:08:e3:84:78:7d:
         62:f8:ea:6e:70:ec:a1:72:ec:37:ed:b2:f5:a3:d9:be:a6:5f:
         54:86:aa:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHz6qlnopRBdg52mMfHVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODY3NDI2M2ZjY2QwN2Y2ODRlMWUxOTkzMDJlZWVmZTc4
M2ZiM2QwHhcNMjUwOTA3MDMwMTM2WhcNMjUwOTA4MDMwMTM2WjAzMTEwLwYDVQQD
EygzZDVlOTFjMGRkYmE3NWM0MGNmMTU3NTQwYTFjYTcyN2Y3MDkzOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpeMvdjjx3E46rOQTdFKRG8j4ihm
TFsQNMgyowvodyg/wtL6gi8NFPNm4LDUnEcrI20dzyEubLkIZ2rtbgRfyZObA4zr
CSLH+xcgF6bSRYVQcWePNCNJrooGasJPYwP0BPD70VMotwQeY8MgeTraakMJRs3s
YXtBvlf69mpo7nokYjGH4UQnlh1+hasm10kWmDKmVclkNWjFWwHlbYXmnZH16yB8
PuCcgJrPUOTEd69HWQciyQbXwMvgJ9Xn2wQzDGDoAZNqNanBqKkxSHxXCn77WskW
v4DkUCx2yl3EXL5xa9tZIrfU0S/30aaLtjwE2FSKTGA8tUeNvwAF2dEq/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1ekcDdunXEDPFXVAocpyf3CTitMB8GA1UdIwQY
MBaAFJmGdCY/zNB/aE4eGZMC7u/ng/s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEt
ZWRlZmJjMjRjODIyLzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9mZWVjZTAtMzIyNi00MWQ2LTk0NjEtZWRlZmJjMjRjODIy
LzEvbVlaMEpqX00wSDlvVGg0Wmt3THU3LWVELXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkIoGmkR
KZoeggz4AV5JuJjep6/km/Jw+c+/E9kxhYZnGYq3BdlNAJ0kibtmCgfEpD4thrEY
t0qrN3WRl5jCjPx9Y0q5EtRRprWBP/z3LftTOgNmNlQu/cib4vg8mHMbg+mPWBRr
85exdF2oKllP8LLUdu72rLHSeNBNFPaX7VKGB8r4VE6KGpCT61/D1/8PAY7n6P/0
W/Kjfqr9mWZZmq1294HMyls1C6gfm3Pz4kKVnXC3uE+/fsI6rjMBvxJp6tB2ZDU3
RE70d79sqp6eCuoKG51fUddoIsnW5mjsAiQ2SJxnpQjjhHh9YvjqbnDsoXLsN+2y
9aPZvqZfVIaqTg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:17 2025 by rpki-client