Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File:                     DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier:          SIeJbsY7dSA9/Bdl7nQVeZDv/ADmk9w2HNdIHdFz5sc=
Subject key identifier:   79:97:4E:D0:40:D3:8F:20:F3:80:29:4A:C6:D6:C1:6B:CF:EB:AB:F0
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer:       /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial:       01994C2EBC602C333414CB650131A14440C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number:          015F
Signing time:             Mon 15 Sep 2025 07:02:35 +0000
Manifest this update:     Mon 15 Sep 2025 07:02:35 +0000
Manifest next update:     Tue 16 Sep 2025 07:02:35 +0000
Files and hashes:         1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: +K9fkKaT9vNPbtPBnAuE7mAwufLqQijtsgU/rB1xkPw=)
                          2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 07:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4c:2e:bc:60:2c:33:34:14:cb:65:01:31:a1:44:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
        Validity
            Not Before: Sep 15 07:02:35 2025 GMT
            Not After : Sep 16 07:02:35 2025 GMT
        Subject: CN=79974ed040d38f20f380294ac6d6c16bcfebabf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:6c:24:2d:27:30:83:0d:b4:15:7b:6c:c4:
                    f1:05:1e:69:1e:d7:df:1b:59:e8:ed:a9:50:6c:0a:
                    43:5a:d6:7f:bb:80:ad:db:bf:10:e6:c0:3e:e2:3c:
                    76:52:8d:f4:57:6d:4d:06:c7:ee:b2:73:51:fe:54:
                    a6:09:46:07:61:73:72:03:84:ea:5f:8e:9b:bc:1e:
                    d7:c6:5d:d7:8b:d8:bd:58:a2:82:2d:98:d2:9d:2a:
                    f6:44:dd:ee:48:94:36:ba:eb:7c:31:66:95:ec:e0:
                    06:f6:5c:e2:4e:b7:e3:8b:55:b5:ec:0a:c6:67:bd:
                    1a:41:d4:d2:be:6b:fb:0d:29:28:fd:72:dd:17:e3:
                    3e:d2:ce:e0:6a:20:c6:df:22:2a:22:ec:e8:6d:14:
                    82:72:ba:57:df:bc:42:0c:15:5e:d3:61:44:e9:4a:
                    79:6d:cb:c4:a8:d8:dc:52:90:3c:c5:c9:14:ae:cf:
                    3f:0f:a7:4c:90:34:2e:e4:ad:c7:09:cf:16:5a:e0:
                    94:45:34:38:d6:b1:d4:d6:5c:d7:9b:1f:c2:1f:21:
                    df:05:fc:21:63:d8:f5:82:0b:91:d6:02:bd:76:03:
                    a0:75:2b:bd:bb:a3:5d:f1:cc:dd:fa:bd:fb:39:b2:
                    c0:c5:57:89:e2:2e:1d:47:40:1a:af:88:e2:7d:fc:
                    ff:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:4E:D0:40:D3:8F:20:F3:80:29:4A:C6:D6:C1:6B:CF:EB:AB:F0
            X509v3 Authority Key Identifier:
                keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:73:2b:98:a4:04:84:d1:ef:2a:b6:80:66:de:1b:a6:19:32:
         78:0c:69:a0:b9:34:23:f9:09:de:3d:ad:15:bc:e8:b2:dd:de:
         ac:17:23:43:72:22:8f:0b:a8:e8:4a:6e:59:69:47:2c:6a:61:
         fc:d8:55:35:46:3a:d3:87:dd:0a:b2:db:2e:27:d7:56:bc:f6:
         d2:1c:05:34:8c:56:c4:54:da:d0:97:c8:fa:c3:b3:66:58:fd:
         45:84:fe:81:6a:8f:07:a6:c9:06:e7:bd:a6:a2:29:e9:fe:f1:
         f3:8b:03:2c:65:8f:2c:ca:fe:77:2e:4f:40:cd:6a:fc:c3:60:
         07:48:8b:fb:c3:65:01:30:0d:55:92:5e:f8:82:d2:a5:62:ef:
         18:dc:27:16:71:b6:cb:82:04:2a:03:83:54:7c:3d:9f:f9:d0:
         c4:75:e2:68:b9:9b:83:1b:d1:94:e9:0a:9a:50:28:d3:d2:73:
         30:21:72:83:83:66:91:76:96:e9:ec:73:63:dc:78:ac:d3:1e:
         2e:43:63:f9:71:f0:51:a1:56:07:3d:98:73:34:85:0a:60:c1:
         11:1e:c2:5d:7c:96:52:04:99:2f:2b:88:df:5f:59:01:d1:47:
         dc:ce:4c:b3:b8:dd:ae:45:de:eb:e4:c7:e1:37:7a:ad:68:e4:
         09:49:9c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlMLrxgLDM0FMtlATGhREDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy
NGIxOWIwHhcNMjUwOTE1MDcwMjM1WhcNMjUwOTE2MDcwMjM1WjAzMTEwLwYDVQQD
Eyg3OTk3NGVkMDQwZDM4ZjIwZjM4MDI5NGFjNmQ2YzE2YmNmZWJhYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowJsJC0nMIMNtBV7bMTxBR5pHtff
G1no7alQbApDWtZ/u4Ct278Q5sA+4jx2Uo30V21NBsfusnNR/lSmCUYHYXNyA4Tq
X46bvB7Xxl3Xi9i9WKKCLZjSnSr2RN3uSJQ2uut8MWaV7OAG9lziTrfji1W17ArG
Z70aQdTSvmv7DSko/XLdF+M+0s7gaiDG3yIqIuzobRSCcrpX37xCDBVe02FE6Up5
bcvEqNjcUpA8xckUrs8/D6dMkDQu5K3HCc8WWuCURTQ41rHU1lzXmx/CHyHfBfwh
Y9j1gguR1gK9dgOgdSu9u6Nd8czd+r37ObLAxVeJ4i4dR0Aar4jiffz/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmXTtBA048g84ApSsbWwWvP66vwMB8GA1UdIwQY
MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt
YTQ5N2I4Y2JmMTc3LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3
LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXMrmKQE
hNHvKraAZt4bphkyeAxpoLk0I/kJ3j2tFbzost3erBcjQ3Iijwuo6EpuWWlHLGph
/NhVNUY604fdCrLbLifXVrz20hwFNIxWxFTa0JfI+sOzZlj9RYT+gWqPB6bJBue9
pqIp6f7x84sDLGWPLMr+dy5PQM1q/MNgB0iL+8NlATANVZJe+ILSpWLvGNwnFnG2
y4IEKgODVHw9n/nQxHXiaLmbgxvRlOkKmlAo09JzMCFyg4NmkXaW6exzY9x4rNMe
LkNj+XHwUaFWBz2YczSFCmDBER7CXXyWUgSZLyuI319ZAdFH3M5Ms7jdrkXe6+TH
4Td6rWjkCUmckg==
-----END CERTIFICATE-----
Generated at Mon Sep 15 13:59:07 2025 by rpki-client