Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          G20WsElJ9X5kysPgTu9stFA0mYUll4LNAJLOXwvvIHA=
Subject key identifier:   69:B6:E3:0C:5B:F5:56:BA:9A:4E:60:E9:C8:50:D7:06:ED:E7:13:63
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       01984776A6C8C9FE11425E4F65460B113DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          0F69
Signing time:             Sat 26 Jul 2025 16:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:14 +0000
Files and hashes:         1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
                          2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
                          3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: LnOFE6xER3ZIEtbbB9coIx+sS2cQ+HRVvo7780yBVb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:a6:c8:c9:fe:11:42:5e:4f:65:46:0b:11:3d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Jul 26 16:00:14 2025 GMT
            Not After : Jul 27 16:00:14 2025 GMT
        Subject: CN=69b6e30c5bf556ba9a4e60e9c850d706ede71363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:e0:1c:e3:32:58:97:83:f4:dd:56:6c:35:
                    1d:08:27:25:9c:a1:8a:99:3a:d6:44:a5:ed:0c:4a:
                    c4:6a:c8:4b:9f:a2:cf:37:1e:6e:d4:e4:bf:b8:c7:
                    9c:46:9b:a9:47:9f:4d:f1:ae:34:fb:56:52:38:e9:
                    2d:e3:ad:6c:52:69:a8:23:e5:6f:d9:1d:a2:75:ea:
                    8e:30:e3:29:e8:36:97:8e:1f:d9:cd:c7:58:62:93:
                    4c:bf:ea:d7:b3:ab:18:e8:22:8c:86:f8:40:61:c5:
                    10:80:48:0c:2a:d3:6e:26:60:12:fa:59:44:74:d3:
                    57:09:84:f3:eb:53:0b:aa:06:5c:54:1b:c2:ce:a0:
                    ce:8f:8b:82:7b:53:df:c9:b2:43:56:ac:f0:02:af:
                    3d:ea:fb:05:89:61:cb:a0:2c:eb:f3:53:5b:0e:40:
                    56:bb:5c:82:0b:65:67:4a:43:eb:d0:42:a4:5f:ba:
                    2a:8e:23:0a:a6:3b:a5:bf:7f:82:61:38:8e:74:72:
                    ee:6e:c9:1b:9a:28:4d:44:71:c0:ba:ce:30:ca:47:
                    db:77:4d:30:71:8f:3d:8f:94:f9:23:ab:bd:7e:77:
                    77:0d:19:a2:8a:2c:ac:fb:e9:42:87:86:61:b8:8c:
                    e0:40:29:8e:67:17:5b:a7:b5:6a:3a:2c:c1:02:1b:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:E3:0C:5B:F5:56:BA:9A:4E:60:E9:C8:50:D7:06:ED:E7:13:63
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:70:1d:ea:88:cd:71:1a:c1:19:ca:35:77:0a:b3:d5:67:54:
         d5:78:55:4f:d3:49:cd:03:40:a0:f0:80:a9:ed:82:74:87:e6:
         28:ae:08:99:2b:8c:0d:db:9e:ae:5a:b5:e9:45:c8:43:1b:ae:
         52:06:da:8b:62:27:dd:e5:46:45:83:db:71:70:4f:6f:03:6d:
         4f:2d:4d:46:37:20:d8:ac:57:ee:a2:71:f1:25:48:21:1d:10:
         12:b3:8e:d3:78:e7:d6:09:6a:97:2c:09:83:df:04:12:3a:c0:
         29:89:53:49:29:91:02:cb:37:d9:34:f9:f5:96:d7:82:16:df:
         9b:15:d0:80:40:81:e3:d4:a3:91:b0:07:8e:12:eb:d6:6b:1c:
         24:8c:9f:30:a1:96:f1:70:fb:1b:dd:03:bd:9a:90:84:13:02:
         56:0f:bb:27:fc:b8:86:80:1a:f4:d6:a1:08:69:ab:f1:c5:69:
         54:34:00:57:00:ad:cc:43:d2:a3:dd:f0:83:e1:8e:b6:48:c9:
         10:39:25:9e:16:a4:4e:d6:13:43:de:6b:ca:7a:d8:b3:0e:28:
         33:41:34:40:b1:fd:e8:21:2e:dd:58:59:c8:2e:91:0d:de:b3:
         65:9b:49:9c:34:65:50:ee:15:9d:3c:c3:40:c6:b5:99:da:ff:
         f0:4f:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:20 2025 by rpki-client