Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          DsU36Bs9foDyF/ws8bOt0rguj/bzIkBlJszaYw+n0Bo=
Subject key identifier:   57:B8:71:F4:F9:98:AA:49:83:15:28:CA:B1:0F:E0:BA:6B:4E:DD:44
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       0198530DCB3437B04347019FD9DF3BAA31EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          088C
Signing time:             Mon 28 Jul 2025 22:01:09 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:09 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:09 +0000
Files and hashes:         1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
                          2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
                          3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: wdtPh+mydDo6hJAz/+zC8aPHm/i+9UxvtpQJVF8tS0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:cb:34:37:b0:43:47:01:9f:d9:df:3b:aa:31:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Jul 28 22:01:09 2025 GMT
            Not After : Jul 29 22:01:09 2025 GMT
        Subject: CN=57b871f4f998aa49831528cab10fe0ba6b4edd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:1d:ce:c6:9e:e3:7e:fd:60:a8:7d:dc:2e:
                    67:cf:27:7f:3c:e3:6f:f5:fa:ab:7b:a0:f7:98:62:
                    66:eb:38:06:f0:73:1e:1a:6e:de:82:da:f8:d8:d0:
                    38:a0:4b:26:47:d2:70:60:71:8f:6d:04:41:47:df:
                    05:4b:0e:33:a4:c1:d9:2e:40:b7:5a:0c:de:a1:d1:
                    68:e8:1f:df:74:67:da:5d:71:1e:34:b0:6d:fa:f8:
                    b0:a2:25:87:77:4d:bb:c6:77:d2:ef:9b:de:ee:78:
                    2a:0d:a0:24:22:d7:01:bd:6c:39:3f:07:ba:8a:84:
                    d4:fb:4f:db:d6:28:b6:bd:9a:96:f6:22:c1:07:51:
                    df:f1:b3:cc:0d:47:ce:d8:09:cd:b1:ae:63:d7:5b:
                    99:de:b6:13:dc:5d:f7:b8:7f:c8:63:fc:d8:a6:85:
                    10:a8:1a:0b:50:71:eb:36:f9:b0:69:a2:28:41:3e:
                    fb:b6:23:3d:e5:8d:0c:83:47:7d:d8:43:5b:91:91:
                    cd:cc:d1:52:bd:9c:01:46:04:e9:04:1a:95:60:cd:
                    0f:89:97:b7:fd:3f:54:57:be:17:ce:b5:ab:04:69:
                    29:ec:c1:91:64:0a:5d:c9:d8:f7:a6:f6:70:b9:ff:
                    59:67:73:3a:77:77:16:80:a6:45:74:b7:ee:e0:bf:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B8:71:F4:F9:98:AA:49:83:15:28:CA:B1:0F:E0:BA:6B:4E:DD:44
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:44:91:00:d3:7f:e3:35:fd:d4:25:36:4c:72:86:6d:74:
         61:bb:cd:ab:fb:d2:fd:3a:de:55:0e:64:de:da:22:e5:53:ef:
         aa:5b:90:51:19:ef:f5:2c:7d:7e:85:46:61:68:c7:03:39:7c:
         2b:4b:1e:78:89:9d:f6:f5:ba:fb:07:78:cf:75:57:a5:d0:2c:
         ab:0c:20:7e:bb:ff:1e:03:04:b0:63:f3:af:36:54:da:f6:3c:
         b4:bc:6b:04:4f:7a:cc:1e:79:d9:4d:32:dc:c2:0a:92:b2:ac:
         cc:fb:ef:88:35:5d:b5:5f:a1:8c:54:73:ed:47:15:0a:b7:d4:
         0a:b8:6a:31:a4:1c:9d:9c:90:f9:a1:78:a4:fa:b6:40:af:68:
         c0:c3:a3:e9:15:fa:68:af:17:1b:79:d9:c2:3b:10:26:6e:1a:
         9b:ad:53:f3:ed:37:d2:4a:de:87:4f:38:0a:92:40:0f:f7:8e:
         c2:23:e2:ce:4c:e8:4e:83:e0:6c:b2:71:a7:4a:4f:a1:78:10:
         a0:7d:07:b4:87:21:bd:53:08:79:7b:1d:6f:82:c6:15:bb:ea:
         5f:91:f3:0b:96:1c:15:52:86:4f:4f:9c:30:3d:eb:8f:cf:53:
         2b:80:b8:22:97:2d:96:17:c2:21:88:b9:9e:8b:7d:80:cd:2b:
         64:bd:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:48 2025 by rpki-client