Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          Y5ONF9iBiLFPYSFOPcJnK/aPBBD4X3gsaGY6Ld/TwVs=
Subject key identifier:   2E:DB:88:1F:9C:8A:9E:F3:A5:D1:45:8C:F1:7C:50:08:51:C0:2E:3A
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       019847E4F583062306FCD01C0A927A40E1C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          1090
Signing time:             Sat 26 Jul 2025 18:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:44 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: anS4JEqnG/f8ePaHeUYvnZEcg85x9dpnwYNVsR5JVOA=)
                          2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
                          3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
                          4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
                          5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:f5:83:06:23:06:fc:d0:1c:0a:92:7a:40:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jul 26 18:00:44 2025 GMT
            Not After : Jul 27 18:00:44 2025 GMT
        Subject: CN=2edb881f9c8a9ef3a5d1458cf17c500851c02e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:da:bb:64:89:92:e0:ce:cf:40:bc:f1:f4:
                    37:a7:d2:0c:0c:6b:37:1d:32:45:e2:84:1d:c7:a3:
                    31:e9:b7:d9:a3:79:e1:ef:94:f0:54:3a:b7:77:ff:
                    85:63:a1:04:40:36:0f:c1:71:e8:d6:24:91:33:ec:
                    61:21:ec:fc:69:a9:4f:3e:59:92:30:1f:11:3a:d2:
                    f3:57:6c:04:59:bf:8e:ee:82:6a:9a:cf:84:3a:fb:
                    e3:38:92:dd:e0:67:68:92:e1:ee:37:11:38:58:3b:
                    dc:95:39:28:64:96:54:a2:f0:43:e6:13:d9:3a:6d:
                    ff:c4:c5:77:66:28:42:0c:91:1f:6d:ff:90:15:09:
                    d8:9f:76:2d:c8:02:57:da:3b:7e:00:c2:1b:e8:5a:
                    d8:41:6b:8c:e7:8d:eb:d5:f2:79:2c:4e:4e:03:58:
                    05:ad:f5:b9:c3:d4:8c:ba:4f:af:7c:23:f3:53:09:
                    de:83:e4:a6:be:a1:aa:0c:f8:e0:63:33:73:e7:9c:
                    1f:d7:8a:53:74:cb:81:3d:54:f4:c3:b5:80:75:ad:
                    cb:e0:0a:f6:cf:96:72:71:09:7f:01:87:16:0c:d8:
                    4b:1b:2d:78:5d:77:59:fb:4d:a5:3a:4a:7e:ee:26:
                    aa:06:e3:6b:52:2e:8c:0c:d6:cd:71:39:78:d5:55:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DB:88:1F:9C:8A:9E:F3:A5:D1:45:8C:F1:7C:50:08:51:C0:2E:3A
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6a:9d:6b:49:d5:0e:ed:6d:16:24:47:23:ad:fa:a9:0b:b1:
         ea:39:f4:43:b9:6f:d3:48:2c:0c:d9:fd:5f:4a:e7:fb:41:69:
         4a:cd:eb:14:07:8e:07:cd:e8:38:23:ef:c7:ad:67:ae:de:a3:
         95:f9:2e:0d:5c:25:2c:a6:7c:84:29:ff:24:38:25:29:50:1c:
         df:09:35:5e:8f:24:26:30:43:1a:54:ce:9f:b7:59:80:dc:c0:
         6a:0b:67:16:3a:9c:ce:b6:ca:dc:d2:d5:d2:ed:35:0e:a1:bd:
         f9:78:87:eb:74:21:ae:be:7a:59:6d:74:f4:f9:14:38:3f:3f:
         77:f2:e6:32:71:43:f2:56:8c:05:e9:79:d0:2f:b8:09:a7:65:
         79:73:bd:77:c2:dc:9f:02:10:9a:13:40:bf:c4:54:e5:08:8c:
         11:02:bb:cd:c6:9a:45:21:f9:69:83:02:19:4d:01:06:1c:af:
         57:33:fd:2c:0b:22:46:11:ed:12:68:de:dd:bb:de:8a:69:34:
         55:37:d5:89:31:00:e2:fb:5b:63:5a:ba:e0:d6:90:db:34:9e:
         15:f9:62:ab:1d:db:92:ad:9c:7f:54:4c:25:bc:96:34:0a:fc:
         a1:cd:32:51:7a:35:6c:08:0a:0f:64:e2:f2:c7:ad:14:62:74:
         ed:47:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:49:09 2025 by rpki-client