Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File:                     YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier:          9ByhmZcsV32aL4ZNBh8cKKmsaOhOYjfZ9P+v1xX7X1c=
Subject key identifier:   C8:26:60:08:F7:CE:C8:B4:AA:FD:8F:F7:A4:3D:27:9A:D5:15:DF:91
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer:       /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial:       01984778291AFE8B4A3C506BC9D1198C3707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 16:01:53 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:53 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:53 +0000
Files and hashes:         1: Wdd1tMY2qRg0hLEXFJzhYiqLyU8.roa (hash: 7fQYHjrnqnFQHkWsTRVENbZi9f45/b+aKRBgyUNF2tI=)
                          2: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: l2VmVBlG6DdilufDCYDGEP71lBpwjeLZ1qh9uQe3ISo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:29:1a:fe:8b:4a:3c:50:6b:c9:d1:19:8c:37:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
        Validity
            Not Before: Jul 26 16:01:53 2025 GMT
            Not After : Jul 27 16:01:53 2025 GMT
        Subject: CN=c8266008f7cec8b4aafd8ff7a43d279ad515df91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:ed:8a:a3:4f:23:3a:b7:09:84:61:05:e2:
                    e7:85:96:e7:3e:84:e2:b3:78:9e:47:63:e0:0d:97:
                    c2:75:36:37:16:44:bb:7c:66:8a:55:f5:24:82:37:
                    f4:7c:c1:43:d2:29:c4:a0:89:04:7d:be:ea:0b:06:
                    09:99:c1:6e:e4:fc:9f:d3:6a:42:84:12:b5:c2:e4:
                    57:fd:bd:56:a2:1f:96:9f:a7:f5:ad:7e:de:61:15:
                    0d:c3:bf:53:79:46:fe:2e:ae:84:e3:93:07:64:1d:
                    35:97:74:ac:28:2e:5d:1a:38:ba:bb:2a:db:3f:a5:
                    02:21:42:62:89:61:68:33:32:95:f0:8c:49:74:5f:
                    c5:df:1d:ce:ed:48:3b:ee:0f:13:1f:1f:9d:f3:15:
                    dc:12:10:e9:3c:b8:30:8e:69:b6:cf:9f:53:0c:a0:
                    86:7f:9b:24:60:14:e9:d1:c9:2c:2c:65:33:9e:0b:
                    70:52:9a:65:30:ae:df:bd:a1:63:0e:4c:83:86:83:
                    0a:77:57:a0:66:42:8e:06:b7:0c:9f:2b:e4:e0:5f:
                    93:3f:06:0f:95:a8:2c:f3:ec:82:21:af:f9:68:e3:
                    c7:55:02:d8:a9:6e:e9:e8:8e:17:27:e3:f0:d7:43:
                    53:62:cb:f8:c2:f7:78:10:fe:31:d9:9a:ca:58:21:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:26:60:08:F7:CE:C8:B4:AA:FD:8F:F7:A4:3D:27:9A:D5:15:DF:91
            X509v3 Authority Key Identifier:
                keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:a8:a1:77:08:3a:15:9f:26:1a:ef:f0:33:71:ef:32:50:
         ed:dd:ad:ef:fa:f6:92:b0:d0:f5:87:c9:9a:1d:73:8b:dd:9c:
         03:77:ab:e5:87:82:86:27:84:ea:46:a2:0f:dc:7b:73:f8:57:
         ac:2a:6f:77:8e:c3:99:a0:3e:42:af:9a:84:3a:b9:82:d5:76:
         e3:71:e3:1e:6e:86:48:4a:dd:dc:a5:6e:24:04:e2:85:2b:bf:
         42:6d:5a:cc:e8:9d:63:81:34:9f:11:51:34:44:4f:98:71:75:
         38:9d:a2:65:0c:9a:e5:91:fe:21:86:34:4e:de:57:35:82:8a:
         ab:50:3c:8f:c1:15:6e:48:41:43:93:e3:c1:f4:08:c6:2d:2d:
         b9:a1:ad:81:4e:20:8d:24:cd:b7:4e:ea:57:95:7a:09:0b:fb:
         25:43:1c:7d:66:f5:cd:62:bd:3d:79:59:2e:51:87:1f:6c:84:
         d8:6f:63:08:82:21:4a:b6:aa:9b:8f:08:ae:60:a6:8e:7c:ba:
         05:60:46:cb:96:65:17:c0:a5:6e:69:3e:59:54:2e:6d:50:a1:
         f2:dd:58:aa:81:19:54:19:be:38:71:15:00:17:25:14:81:9d:
         7e:d1:0b:07:60:1e:a8:99:65:5b:62:cc:04:3e:ac:b3:37:8a:
         32:08:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:56:17 2025 by rpki-client