Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File:                     YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier:          876X7MzfFNd8FeG1J83lnUDm0uJar29tZHX+XD6J+mM=
Subject key identifier:   7A:16:4E:99:65:E6:37:50:CC:F4:1A:9F:1C:74:7C:AB:AF:25:C7:0E
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer:       /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial:       0198529F847397239CA2F0C12C0C8ECF103A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number:          11F0
Signing time:             Mon 28 Jul 2025 20:00:42 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:42 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:42 +0000
Files and hashes:         1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
                          2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: 5oeL6Sw2Y4w9Ds7aoa90WLdiUwCszQqcZcZTy8RltPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:84:73:97:23:9c:a2:f0:c1:2c:0c:8e:cf:10:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
        Validity
            Not Before: Jul 28 20:00:42 2025 GMT
            Not After : Jul 29 20:00:42 2025 GMT
        Subject: CN=7a164e9965e63750ccf41a9f1c747cabaf25c70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:ac:c3:4d:4d:7d:bb:6a:2c:de:bd:79:0d:
                    f9:d7:d6:5e:94:fd:a5:2b:8d:a2:35:84:d4:28:c2:
                    2a:b3:99:25:2f:ee:7f:32:b0:a8:72:9b:9f:5a:76:
                    68:2e:3d:ab:0f:2a:57:86:f7:b1:3d:1a:62:ce:17:
                    be:ef:db:36:eb:52:fc:99:76:44:09:b7:72:c1:b8:
                    35:32:b3:42:b4:5d:bf:02:b4:91:a3:bd:df:3b:ef:
                    9e:8a:ce:86:6b:eb:b8:5a:ab:f7:ea:7f:f6:04:24:
                    aa:43:bf:1e:48:a4:8d:f7:47:19:a3:bf:cf:18:63:
                    e1:00:83:70:67:d7:20:cd:06:67:f1:38:66:1d:ff:
                    89:45:53:9d:e2:76:3f:a8:8a:cd:a1:65:2d:79:8e:
                    60:2a:8e:a8:66:60:ba:7a:3c:7f:94:d5:72:0f:8d:
                    16:d8:b7:f8:43:7d:0e:09:b9:d0:65:9b:2f:0e:3a:
                    36:ab:1a:ec:b2:8c:87:ca:33:99:ff:9b:4a:d6:10:
                    61:19:71:0f:74:f2:78:6c:81:e3:c9:6d:3c:59:1b:
                    a8:e9:b3:ab:37:40:61:6a:04:74:ea:bb:73:33:96:
                    49:f1:b6:66:b5:07:94:65:a6:86:cc:01:54:e9:ac:
                    7e:02:ed:11:80:dc:56:a5:c7:cd:90:49:07:9b:aa:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:16:4E:99:65:E6:37:50:CC:F4:1A:9F:1C:74:7C:AB:AF:25:C7:0E
            X509v3 Authority Key Identifier:
                keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:22:64:83:10:c2:f6:a8:87:0d:d9:30:62:65:4d:56:1a:45:
         d0:02:b6:09:52:eb:6e:17:63:1e:0f:f5:4d:6f:68:0d:2e:90:
         ce:57:8e:52:4a:55:45:ee:af:16:ca:ff:e7:97:54:57:e9:71:
         ab:36:50:51:63:17:35:b8:23:65:c0:5d:30:98:51:21:91:2c:
         a9:73:7d:5d:b0:0a:80:98:8a:dc:c9:63:f4:87:8b:01:19:15:
         fc:ff:a4:71:f5:96:c0:f0:72:73:e9:f1:a4:44:ce:4a:c5:41:
         c4:6a:19:78:a9:c8:f7:a9:a7:3e:38:5a:71:63:30:54:3e:04:
         77:d3:df:3c:1f:0c:0b:5e:3b:62:d8:0b:dd:41:d9:d8:82:fa:
         be:3c:9f:fa:15:e7:56:9f:ed:c0:be:08:b8:aa:de:92:80:f1:
         22:6d:99:32:92:39:4f:20:52:56:6e:a5:4c:4a:e8:f3:c4:b7:
         b9:38:e2:24:17:c1:24:e7:8a:ef:e2:59:3c:ed:af:9d:8d:e2:
         5b:e3:d6:05:ab:75:7b:5b:c1:cf:e8:58:86:ec:cc:99:ee:35:
         13:65:26:cf:82:83:cf:9d:5b:63:de:a3:6f:35:17:07:8a:6d:
         0c:0c:9e:ea:b3:dc:c0:5a:8a:b4:80:1a:8f:9c:7c:3d:8d:19:
         2c:9c:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:34 2025 by rpki-client