Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          r+pJ/TgfKh9sk+T5mxCYsI1llKKT021T4HU6lFQ4JtY=
Subject key identifier:   87:E6:14:FB:B3:CD:EF:43:9D:53:12:D2:3D:BB:C0:C8:9B:50:39:4B
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       0198469B53222EB2B1E520AC0D34CB86A381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0788
Signing time:             Sat 26 Jul 2025 12:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:41 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: PRse5bAe9aA+s+biL/FoNy2hprW/qw39ePvY6UuTsB8=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:53:22:2e:b2:b1:e5:20:ac:0d:34:cb:86:a3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Jul 26 12:00:41 2025 GMT
            Not After : Jul 27 12:00:41 2025 GMT
        Subject: CN=87e614fbb3cdef439d5312d23dbbc0c89b50394b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:e5:66:37:1d:07:00:76:7e:ed:09:35:b8:
                    5e:47:1c:bb:2c:61:da:73:25:af:63:1b:26:8f:34:
                    0e:fa:61:b5:43:6b:52:46:f2:8d:87:9d:d6:a8:53:
                    6b:29:e2:25:2b:4d:2b:6d:52:5a:7d:2a:32:2d:ec:
                    c3:d9:84:96:00:4c:e1:26:eb:e2:53:88:f7:a7:53:
                    a0:bb:ba:09:d6:36:aa:b8:9f:79:1b:f9:ba:a7:0c:
                    24:e4:7d:15:47:c1:89:2b:2d:de:f5:f3:9e:a1:a2:
                    fa:f1:57:83:2c:2e:d1:17:0d:bb:c9:84:39:f6:e3:
                    8c:f5:61:08:10:00:3e:e2:da:8c:b2:e6:21:3d:08:
                    e8:52:6f:51:79:fc:66:67:00:ce:8c:d6:cd:e1:b9:
                    c3:bb:9d:cd:23:3f:5d:b4:6c:b0:20:e6:c7:96:ae:
                    b6:0c:09:a5:6b:02:7c:5c:b9:ff:2c:79:35:81:57:
                    20:2e:f4:8f:ac:1c:51:c9:6a:22:01:05:31:38:26:
                    41:cb:be:54:ef:c7:3b:95:fe:95:7b:41:2e:8e:dd:
                    b2:50:63:b7:e4:8a:22:6c:f5:02:04:41:54:0c:a0:
                    fd:b7:69:da:0b:4f:e3:ad:da:dc:b0:b5:9e:98:af:
                    ac:b6:17:7f:15:c1:54:85:71:37:28:ef:14:69:bb:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E6:14:FB:B3:CD:EF:43:9D:53:12:D2:3D:BB:C0:C8:9B:50:39:4B
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cb:ef:94:6e:5a:8a:ae:aa:0b:56:63:34:78:5b:43:6c:ce:
         8c:31:99:6c:98:12:83:e6:76:32:04:13:fb:08:05:7a:e6:14:
         bc:46:f3:a0:73:25:98:e9:6f:7c:21:59:18:d2:f0:b7:7b:ef:
         9b:a0:d6:6e:47:7d:db:b6:dd:6a:6e:52:a9:7e:bd:f7:51:33:
         6e:c9:33:9d:67:db:e6:cc:38:24:c0:7b:f5:29:71:bc:ee:88:
         5d:3f:eb:cd:a0:71:3b:55:90:a2:b2:14:6c:b3:a2:6c:ad:7f:
         c0:aa:25:11:f0:51:95:1f:75:b3:34:5f:25:38:1a:b3:89:f9:
         81:4e:5a:f2:b4:18:26:13:22:06:09:d4:df:ee:bd:7a:3c:6e:
         ad:78:65:b1:ca:96:4e:18:fb:5e:b9:9f:f8:6a:8e:6c:9b:53:
         4e:36:90:52:80:bf:44:79:14:a8:35:18:3b:5d:11:4d:c8:3d:
         a5:7d:52:c4:55:80:11:ae:ab:3c:2b:bd:12:4c:0b:95:7d:bd:
         fa:5e:dc:47:1d:a1:70:06:81:70:6b:6e:f2:df:e4:f0:58:41:
         c2:80:ae:ac:53:cc:5a:e3:17:c9:9a:1b:89:07:41:21:d7:6d:
         dc:d3:22:41:47:2e:7c:d2:b9:75:c7:a1:6a:21:39:5f:b1:cc:
         ee:96:6a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:19 2025 by rpki-client