Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File:                     y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier:          mSB/6uQUMo5cU4aNHXV9s744Uq7z58omXPiattczFjo=
Subject key identifier:   47:D2:C8:C7:90:17:26:28:3F:90:42:E0:19:2F:C6:64:00:3C:E7:CE
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer:       /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial:       0198462CEFE0DB2F197183D8895BA1AAFE5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 10:00:06 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:06 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:06 +0000
Files and hashes:         1: fkJKmh5zDN0Kqn8rotQGh7tCyI4.roa (hash: quxYWHt6uVoxRIFcZvvj9cJG53rAivUXlL4xxrWHyXs=)
                          2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: cxpmxeOABQnm9lO9SBsMHtAQaN5qvWZJL9A1g7l5PNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2c:ef:e0:db:2f:19:71:83:d8:89:5b:a1:aa:fe:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
        Validity
            Not Before: Jul 26 10:00:06 2025 GMT
            Not After : Jul 27 10:00:06 2025 GMT
        Subject: CN=47d2c8c7901726283f9042e0192fc664003ce7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:ca:fb:c4:3f:27:20:af:9d:12:d8:28:9a:
                    70:58:7f:49:a3:99:3b:ce:77:cf:bd:45:29:98:2d:
                    59:9b:3e:19:6e:e0:a2:44:48:9b:c2:5a:d9:78:36:
                    78:55:8f:ed:b1:85:30:e2:c7:8c:44:b3:4b:ac:6a:
                    94:a0:25:9e:74:ee:b5:0f:95:81:63:e3:9e:47:06:
                    55:a6:ff:40:97:bd:a5:15:d7:e3:ba:a4:97:5b:2e:
                    56:97:6e:a4:db:36:30:b7:e0:d5:70:5a:ec:10:dd:
                    21:71:b0:8d:35:f2:d2:28:d6:67:66:3f:5f:e3:59:
                    7a:36:f9:52:c5:73:28:44:10:37:70:70:dc:e1:83:
                    62:4e:bb:81:b8:59:b6:9f:83:85:d2:d1:7e:06:a8:
                    f6:bb:7b:07:bd:9d:89:1d:c5:73:53:06:4c:c2:a1:
                    88:0d:46:ae:3c:be:d3:62:46:7a:fd:67:c0:91:9e:
                    59:85:08:fb:f6:95:c0:46:15:71:36:2b:fc:58:2a:
                    58:5e:70:97:0b:82:08:ae:32:1f:09:c5:49:d5:8c:
                    b1:f2:9c:80:2b:55:11:0e:09:68:2c:5a:d6:3f:f9:
                    08:6f:aa:e2:a8:6a:7e:9f:19:25:ad:7a:91:32:98:
                    a1:0f:e7:b5:ba:08:8a:87:db:f9:6d:49:28:33:58:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D2:C8:C7:90:17:26:28:3F:90:42:E0:19:2F:C6:64:00:3C:E7:CE
            X509v3 Authority Key Identifier:
                keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:4e:c7:15:47:47:18:4e:d5:b8:54:7e:35:36:bd:91:cb:
         f0:52:65:7b:45:86:fa:c0:4d:59:ba:d3:cf:79:a9:ba:ec:f3:
         4b:ed:90:4a:74:bf:1a:9b:90:bd:ff:b8:f1:b9:cf:40:92:40:
         62:7f:37:a1:30:c3:12:1c:8c:52:e7:e3:9d:84:25:cb:54:fc:
         97:05:d8:3a:0d:57:a6:cf:c6:3e:5f:7f:ae:cc:48:4b:3b:6b:
         3b:3e:d9:39:62:1d:0c:23:b7:f5:c0:f5:6b:04:30:a6:20:e3:
         08:34:89:4c:50:5d:43:d3:1d:ab:6d:df:e0:79:57:d2:5f:27:
         7f:0a:bb:04:fd:67:89:9b:af:6e:77:38:98:77:36:fc:7b:14:
         8f:dc:f1:05:09:50:2b:c8:6c:4e:cf:03:29:a7:07:2a:8a:ac:
         9c:04:e1:b2:f9:cc:2a:85:41:55:47:1e:c9:18:15:9a:a9:31:
         ba:be:ba:2a:97:fa:de:b9:6d:5f:ae:67:2e:1e:b8:4e:32:8c:
         6f:82:ac:6d:e9:9f:f0:4a:eb:0c:fd:f1:0a:5e:a7:28:02:ba:
         fd:1a:b6:fd:bd:7a:e0:7e:d2:7e:6e:66:d9:77:b4:aa:90:a4:
         b8:f8:24:09:ba:a7:2a:96:b5:bf:56:6f:75:f4:5a:60:43:95:
         76:68:77:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:28:35 2025 by rpki-client