Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          g8pfYNcB7Tv+Db4EaFZ73mvuy/0a4UMNEIbn1emglkU=
Subject key identifier:   3D:79:BE:3B:FE:ED:1F:2C:50:26:47:F7:F3:D9:50:70:5D:58:B8:85
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       019955D4DFD55D31C179C8D9DDCB7784755C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          161C
Signing time:             Wed 17 Sep 2025 04:00:38 +0000
Manifest this update:     Wed 17 Sep 2025 04:00:38 +0000
Manifest next update:     Thu 18 Sep 2025 04:00:38 +0000
Files and hashes:         1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
                          2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
                          3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: 6P4azvDVV9ydblfHhTdnRb4Zl6kkFdY8KhEk8yVQM5M=)
                          5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:55:d4:df:d5:5d:31:c1:79:c8:d9:dd:cb:77:84:75:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: Sep 17 04:00:38 2025 GMT
            Not After : Sep 18 04:00:38 2025 GMT
        Subject: CN=3d79be3bfeed1f2c502647f7f3d950705d58b885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:88:44:65:3c:db:89:bd:ca:17:eb:75:0c:
                    da:ea:f2:75:1b:3c:69:9e:be:5c:d1:81:44:44:47:
                    72:9c:a1:66:e5:56:6f:a7:1e:06:33:48:ae:7f:fc:
                    20:7c:87:e1:d0:a7:1a:59:04:d8:28:d6:e1:a9:2f:
                    6b:79:72:2d:9f:ca:f3:28:60:9e:25:12:5c:ac:6f:
                    95:28:5b:29:db:a5:9a:d4:04:db:b6:cb:98:06:37:
                    76:a7:52:0b:58:a0:28:80:ec:e7:02:53:21:5e:8c:
                    1e:c1:81:ce:bd:5f:96:ce:e2:69:51:22:44:97:52:
                    8b:b9:e9:e4:b5:45:b9:ac:ec:db:2e:d6:77:3b:6c:
                    83:eb:3d:86:8e:67:35:db:73:fa:3b:a1:a9:8e:de:
                    5b:88:da:fc:fe:1a:e9:df:29:c8:37:46:6b:cf:60:
                    a8:06:68:fd:d9:d2:37:28:66:48:08:02:ef:87:42:
                    1f:f2:63:65:88:df:86:63:a5:08:7f:59:9c:aa:0a:
                    f1:ae:19:5b:ee:17:d9:2d:e5:36:67:83:3f:c8:cd:
                    77:d4:4c:fc:d6:3f:01:3b:e7:68:25:da:50:ae:ce:
                    3b:cd:50:37:ca:ee:81:60:c1:78:80:4b:f2:29:b2:
                    ec:2d:ea:e4:7d:81:c4:6d:f3:40:c4:15:8a:0d:c9:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:BE:3B:FE:ED:1F:2C:50:26:47:F7:F3:D9:50:70:5D:58:B8:85
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:b7:cb:45:ce:54:61:9b:b9:04:ea:4b:ee:2b:1d:b3:71:
         80:7e:70:76:8a:77:94:2a:69:4c:53:de:9f:51:c1:fa:9d:ea:
         ae:ee:cb:71:0d:80:90:36:27:2b:54:51:5e:7d:6a:5d:c0:68:
         90:6d:2e:e5:2a:d9:72:4e:18:3c:9f:55:a6:dc:1e:37:07:8e:
         6d:3c:18:b8:97:78:1a:dd:0b:b5:72:ec:7a:2c:a7:1c:68:e9:
         4d:be:6f:df:1d:ef:67:b4:da:1b:55:bb:f5:06:bf:d4:77:85:
         0e:fb:1c:4d:3a:c6:9f:cb:d3:bb:6d:75:55:fe:20:6e:36:73:
         4d:74:7c:dc:fb:d9:40:cc:4e:d7:7a:cd:06:0c:df:60:de:81:
         14:74:1a:fe:aa:3a:f5:57:ac:d0:69:00:cd:f1:08:a8:ae:47:
         b7:dc:f3:8b:82:00:c2:dc:2a:80:bf:1d:7c:9e:66:c1:2a:1a:
         8b:bc:e0:9c:6a:d7:9d:41:86:cd:d5:a6:38:6c:0f:0b:18:af:
         01:6b:32:45:8a:d8:7f:9d:49:26:46:5d:7e:b0:f0:d9:8e:a8:
         20:33:a9:9c:e4:a4:89:3e:38:eb:68:01:20:f2:1b:44:19:c9:
         f7:1c:05:cb:ee:af:4a:82:c7:fc:e9:94:ac:85:a4:c8:e9:63:
         24:de:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:48:22 2025 by rpki-client