Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          lslAN8IoXsRB2YreBvS9IFNQtUjxZTCuWmSelt/hNlE=
Subject key identifier:   B2:DD:10:AC:2C:2D:BA:6A:12:D8:00:75:A1:30:97:40:7E:3F:AC:41
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       0199315AACE618E663BF0248767EFE3549CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          13BD
Signing time:             Wed 10 Sep 2025 02:00:50 +0000
Manifest this update:     Wed 10 Sep 2025 02:00:50 +0000
Manifest next update:     Thu 11 Sep 2025 02:00:50 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (hash: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=)
                          3: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          4: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: 7f8fC24RwtmieKeeWHRLVNQGm3iDuku1ngUDp/GJYhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:5a:ac:e6:18:e6:63:bf:02:48:76:7e:fe:35:49:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Sep 10 02:00:50 2025 GMT
            Not After : Sep 11 02:00:50 2025 GMT
        Subject: CN=b2dd10ac2c2dba6a12d80075a13097407e3fac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:ef:fe:0e:9d:40:82:9d:8e:db:e8:61:0c:
                    0c:ef:e5:2d:44:56:62:c0:a1:6f:34:ce:76:5d:cd:
                    ff:66:5b:3a:3a:47:10:ac:8f:a7:7f:5b:17:db:d2:
                    7e:eb:9c:7e:3c:3e:fa:14:c5:3e:f2:52:e4:b1:56:
                    31:56:e1:5d:74:bc:d7:17:4e:2a:29:7b:8d:09:78:
                    81:8c:75:ed:b8:1a:30:99:ee:20:e3:d3:50:af:fd:
                    60:e5:c0:42:75:4a:85:fe:f2:75:51:8d:74:4d:9f:
                    38:c9:0b:0d:db:7d:c0:11:e5:d5:5f:85:4d:9c:8b:
                    28:90:2b:66:2d:27:8f:b8:26:7b:18:ac:bb:8c:2f:
                    e7:54:e7:da:f4:92:8b:31:a1:40:90:bb:06:e8:41:
                    1b:e5:d8:f9:c7:57:7d:49:b3:e6:9e:a1:b0:39:a8:
                    0d:09:31:56:da:82:e5:4f:09:ab:67:69:4e:7a:e8:
                    3e:ee:2c:a2:26:38:61:a1:54:b7:65:d2:37:36:d6:
                    1d:11:09:1f:c6:7e:57:b5:49:b7:15:29:08:77:dd:
                    ce:61:9a:45:2e:a9:3a:44:df:1a:5d:d8:43:8f:40:
                    50:28:09:4d:7a:93:1a:9d:5c:61:51:99:a4:c4:59:
                    01:91:d8:14:22:97:5c:3f:ba:78:e3:46:f9:d0:4a:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:10:AC:2C:2D:BA:6A:12:D8:00:75:A1:30:97:40:7E:3F:AC:41
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:09:61:ce:35:b2:0b:41:92:c5:fc:7c:8f:8c:6d:7e:76:bb:
         e0:f9:2e:a6:bc:ef:f3:b4:e7:a0:e4:29:51:e8:dd:0c:1b:ea:
         5c:76:7d:81:2d:0c:6c:9d:3f:0b:da:f5:be:9e:8b:87:2e:01:
         cb:0b:80:80:09:26:f4:d9:ec:c3:65:cc:8e:47:89:e0:dd:66:
         11:28:10:04:f7:70:54:35:c1:ef:3d:36:f6:be:54:f3:dc:d1:
         e5:4e:27:60:17:f4:7b:5b:fd:c1:83:3d:5e:22:12:7c:10:9b:
         de:ea:b8:4c:93:4e:c3:d0:31:47:33:6f:d1:10:1d:04:be:9a:
         a4:08:a5:c0:42:7f:f9:04:31:20:af:68:98:e2:0d:db:be:d8:
         41:3c:65:99:db:f1:72:49:ba:3a:3a:49:78:af:6c:87:2f:0b:
         be:55:07:94:4f:45:96:93:5c:7f:2b:20:27:12:e7:9d:66:d2:
         49:45:ff:f0:64:df:1b:32:72:5d:56:ee:4f:1f:3b:34:af:28:
         ed:42:50:e5:c4:6b:36:73:c7:5d:8e:d3:70:24:97:ac:48:fd:
         65:69:bb:76:8f:cb:13:39:e0:cd:a7:73:74:fc:08:1e:27:44:
         17:96:0a:e4:85:58:31:fd:39:43:76:d8:be:8f:28:b4:2e:8d:
         38:b6:96:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWqzmGOZjvwJIdn7+NUnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmM5YzI2ZGY3Y2NkOGFkMzhkODliZDVkNDkzODBiOTNi
MWUwMDkwHhcNMjUwOTEwMDIwMDUwWhcNMjUwOTExMDIwMDUwWjAzMTEwLwYDVQQD
EyhiMmRkMTBhYzJjMmRiYTZhMTJkODAwNzVhMTMwOTc0MDdlM2ZhYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJLv/g6dQIKdjtvoYQwM7+UtRFZi
wKFvNM52Xc3/Zls6OkcQrI+nf1sX29J+65x+PD76FMU+8lLksVYxVuFddLzXF04q
KXuNCXiBjHXtuBowme4g49NQr/1g5cBCdUqF/vJ1UY10TZ84yQsN233AEeXVX4VN
nIsokCtmLSePuCZ7GKy7jC/nVOfa9JKLMaFAkLsG6EEb5dj5x1d9SbPmnqGwOagN
CTFW2oLlTwmrZ2lOeug+7iyiJjhhoVS3ZdI3NtYdEQkfxn5XtUm3FSkId93OYZpF
Lqk6RN8aXdhDj0BQKAlNepManVxhUZmkxFkBkdgUIpdcP7p440b50EphEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLdEKwsLbpqEtgAdaEwl0B+P6xBMB8GA1UdIwQY
MBaAFLMsnCbffM2K042JvV1JOAuTseAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjIt
Y2IxMWJjNWIyZjFiLzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kNWRhMGMtOWNmMy00ZjhiLWE1NjItY2IxMWJjNWIyZjFi
LzEvc3l5Y0p0OTh6WXJUalltOVhVazRDNU94NEFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQlhzjWy
C0GSxfx8j4xtfna74Pkuprzv87TnoOQpUejdDBvqXHZ9gS0MbJ0/C9r1vp6Lhy4B
ywuAgAkm9Nnsw2XMjkeJ4N1mESgQBPdwVDXB7z029r5U89zR5U4nYBf0e1v9wYM9
XiISfBCb3uq4TJNOw9AxRzNv0RAdBL6apAilwEJ/+QQxIK9omOIN277YQTxlmdvx
ckm6OjpJeK9shy8LvlUHlE9FlpNcfysgJxLnnWbSSUX/8GTfGzJyXVbuTx87NK8o
7UJQ5cRrNnPHXY7TcCSXrEj9ZWm7do/LEzngzadzdPwIHidEF5YK5IVYMf05Q3bY
vo8otC6NOLaWjQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:30:55 2025 by rpki-client