Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          mXRx1R8p9+SxtKT2nt2JYmZJhnubRvz90sXRQBWGo9I=
Subject key identifier:   9D:6C:0E:B3:4E:7B:D8:0A:0C:01:FA:36:82:24:9C:DE:4A:E7:9C:42
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       01984889333F0993DE23235D001129BBA57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 21:00:07 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:07 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:07 +0000
Files and hashes:         1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
                          2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: 01A1PERABAneEatpSaV1kZoP1xy6IWHb+mScouw7wTo=)
                          3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
                          4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:33:3f:09:93:de:23:23:5d:00:11:29:bb:a5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Jul 26 21:00:07 2025 GMT
            Not After : Jul 27 21:00:07 2025 GMT
        Subject: CN=9d6c0eb34e7bd80a0c01fa3682249cde4ae79c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:9b:8d:cf:89:7c:8f:0e:ec:99:1e:9b:61:
                    b3:a5:21:6c:bc:4a:36:13:9e:6a:43:8d:00:ed:32:
                    1f:37:b2:a4:6c:0e:01:f6:6c:40:98:16:f8:8f:91:
                    ef:2a:8f:1a:b9:87:db:d6:3f:58:09:43:3e:f1:52:
                    98:38:5d:e4:58:f5:8b:61:9a:67:f3:4f:4c:79:1f:
                    5c:b7:a0:0d:05:b8:9f:80:7c:16:b1:b0:3d:be:d5:
                    4c:64:db:38:c5:79:7b:0b:a4:f5:ae:c4:e2:4e:41:
                    2f:f6:53:97:04:4d:fc:1c:90:0e:9d:9d:88:15:59:
                    c4:a0:61:8c:08:a9:99:1d:17:a0:a6:df:3a:3d:ce:
                    c2:e1:c0:de:16:93:41:97:92:a5:08:0f:ed:6e:74:
                    46:96:da:8c:97:d9:40:10:3a:b5:7f:3e:20:4b:9e:
                    59:fb:fc:6f:8c:5f:43:37:da:ec:82:8a:bc:14:5f:
                    d8:6c:fd:09:e9:d4:39:54:2c:17:47:5e:d8:8b:7c:
                    69:b9:e3:aa:8f:5c:4e:b2:12:c7:d4:8c:75:4c:69:
                    c5:83:94:9b:f1:f4:78:b6:b4:64:e3:cc:e3:11:3d:
                    44:56:99:3d:cc:9b:cb:76:e1:df:4c:df:8f:25:df:
                    06:db:a8:b3:af:d0:f7:4e:8b:a1:4c:7d:aa:8d:b2:
                    54:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:0E:B3:4E:7B:D8:0A:0C:01:FA:36:82:24:9C:DE:4A:E7:9C:42
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:16:8c:79:61:0b:dc:8f:6f:38:18:44:62:97:52:85:10:
         c8:77:fa:05:89:cb:75:0d:fe:5a:04:84:17:77:88:8e:27:55:
         36:a7:e4:22:a7:ea:ed:53:cf:62:ab:e2:30:14:8e:31:b8:72:
         3e:a2:90:70:3b:49:dc:75:b9:ee:60:74:f2:12:31:27:b6:19:
         d9:0c:1f:7d:29:20:d0:5f:5b:11:c2:19:53:8d:7e:0d:5b:7e:
         e9:ed:1e:43:d8:00:be:61:42:31:d4:09:e4:ea:fc:cf:ca:ef:
         b0:f4:72:8d:36:13:db:6d:f1:6c:89:bc:f3:43:b5:03:75:14:
         ea:cb:65:a3:01:96:7f:af:d0:56:67:e6:c8:a6:91:85:31:8f:
         79:18:43:ba:1c:c9:f9:2a:5c:72:c1:52:88:23:de:7e:5e:cd:
         c4:5f:6a:7f:16:05:eb:8e:2e:17:be:e5:2c:01:e1:4f:ae:16:
         4e:c1:2c:d6:da:f6:44:49:6a:fb:64:1e:fa:3f:6f:27:74:e0:
         3c:32:ff:64:a7:87:9b:b6:87:47:5c:10:68:a2:08:80:0f:1c:
         32:fe:d5:60:6e:4e:4a:42:2b:7a:ae:61:78:18:f2:0a:92:e1:
         f4:f1:71:c6:17:c9:03:b4:47:90:c1:45:d1:d6:c4:fa:33:34:
         32:99:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:11:34 2025 by rpki-client