Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          w5EanTtyo83vjqGwdn96XyaoN8ZN4T9mTdVX3RC0N+E=
Subject key identifier:   71:A8:01:9D:AB:03:53:08:0C:B9:12:EE:1E:F4:7E:0B:31:CC:F7:5C
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01982DB7AC69D85EFA521E0409CF72F37D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1202
Signing time:             Mon 21 Jul 2025 16:01:08 +0000
Manifest this update:     Mon 21 Jul 2025 16:01:08 +0000
Manifest next update:     Tue 22 Jul 2025 16:01:08 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
                          3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
                          4: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          5: gu6tT7UFC6FmYiSvKO6wxYLbsHc.roa (hash: 33W9F+bpX2oF1GIOeMA/5dpyW1er0qfORrvZ4OzY3Zc=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: F+EY80bQLh4KxhjNvJPw32lR5FIau5fVIeeOtUw4nO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2d:b7:ac:69:d8:5e:fa:52:1e:04:09:cf:72:f3:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Jul 21 16:01:08 2025 GMT
            Not After : Jul 22 16:01:08 2025 GMT
        Subject: CN=71a8019dab0353080cb912ee1ef47e0b31ccf75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:1c:98:f4:2e:ac:0c:2a:f2:ec:50:0e:d1:
                    3b:49:7b:79:64:98:42:7a:17:1d:a9:c7:94:a5:bd:
                    2a:03:8a:1b:e5:2b:cc:23:e6:57:9e:42:e1:ec:df:
                    04:06:28:28:e0:f4:45:2f:40:52:01:e0:9b:8e:a5:
                    57:3c:44:24:71:b7:51:87:b3:39:9e:56:57:0d:9d:
                    5e:9a:3b:80:73:03:b3:d3:65:a8:cf:81:39:d7:fa:
                    f1:dd:91:72:a5:72:56:53:82:b4:60:d5:65:00:8b:
                    8f:27:db:7b:eb:78:37:38:93:a7:99:47:ad:2e:89:
                    1f:db:e7:7f:ad:e2:e9:c0:90:dd:2b:3c:44:9a:72:
                    0a:ba:0e:d3:fa:5d:c4:13:f6:2b:9c:18:26:aa:cc:
                    f1:7f:eb:82:f3:f3:95:e3:1c:57:03:fe:bd:a1:05:
                    d9:68:44:cd:ae:9a:cf:4c:da:a8:6f:34:a5:22:53:
                    ce:61:66:b1:1f:ea:6d:e3:07:80:9a:ba:e1:3d:b8:
                    3d:2c:36:83:29:a4:33:da:96:01:e6:f0:5c:66:6a:
                    f3:e3:98:d7:64:0c:e1:ae:02:50:8e:d5:ef:a2:01:
                    f0:78:ae:3e:bb:29:41:83:4e:7c:25:b9:49:80:7e:
                    20:99:ef:54:1e:a0:f4:95:c7:dd:50:2b:59:0a:61:
                    74:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:01:9D:AB:03:53:08:0C:B9:12:EE:1E:F4:7E:0B:31:CC:F7:5C
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:9c:ff:15:ff:6b:da:55:05:34:05:64:6d:4e:03:9c:15:
         c5:84:03:67:0b:a8:17:a3:33:d0:5a:cf:6b:8c:86:98:70:5a:
         e5:18:14:eb:21:06:fb:f7:c9:d0:18:9d:74:4c:72:d2:42:7d:
         f5:19:b2:c0:f6:63:5a:a1:d9:a5:3d:36:20:c8:18:e2:3b:06:
         84:cf:bf:18:09:e2:32:3f:df:b4:b5:31:2a:74:32:c3:92:a2:
         e2:88:bd:fe:f3:86:05:97:7e:29:8e:8f:be:56:15:9c:8f:e9:
         68:d9:70:68:d0:f0:e3:5b:74:b9:7a:82:90:3b:a0:ec:e2:90:
         87:fd:f0:3d:73:4d:83:2f:78:f9:c4:78:58:92:59:91:5b:06:
         27:9d:b8:53:91:36:5c:db:12:c3:a8:a8:72:35:c1:54:1f:2a:
         1a:41:a2:8a:5c:93:eb:1e:22:8d:3f:11:05:96:d6:ee:5a:42:
         e6:b9:02:90:74:92:c0:08:b8:2a:64:06:67:2d:1d:08:03:ff:
         46:1c:4d:78:48:06:2e:93:16:56:74:94:9e:00:3f:af:f8:a5:
         7c:b1:37:43:be:09:23:7a:d3:ba:21:5d:9a:93:08:39:2c:b9:
         ea:6b:d7:60:5a:39:a6:bb:7d:f0:ee:24:b9:49:9e:2e:b5:7b:
         40:f6:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:58:23 2025 by rpki-client