Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          P2YVbY3enzwUsswGS6M6PLNfvlOsWPgNwV3Yshre/xQ=
Subject key identifier:   5C:7B:4A:C6:22:DE:06:A4:59:4D:8B:27:53:03:A0:85:65:2B:E9:95
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       0198345E42D0684A4F212720CBC5F7ABFD7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1400
Signing time:             Tue 22 Jul 2025 23:00:49 +0000
Manifest this update:     Tue 22 Jul 2025 23:00:49 +0000
Manifest next update:     Wed 23 Jul 2025 23:00:49 +0000
Files and hashes:         1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=)
                          2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=)
                          3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=)
                          5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: CQ89pqPQUL474ezMfXBj89cXhBatMvBWSEM0t2i1F8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:5e:42:d0:68:4a:4f:21:27:20:cb:c5:f7:ab:fd:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jul 22 23:00:49 2025 GMT
            Not After : Jul 23 23:00:49 2025 GMT
        Subject: CN=5c7b4ac622de06a4594d8b275303a085652be995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:36:2e:e2:97:ac:b9:ec:da:73:63:e7:bd:
                    37:aa:8b:92:f4:de:55:e2:05:29:e8:02:2c:06:21:
                    ee:12:67:4b:a7:3f:ff:d5:a8:d9:b9:67:9e:6c:4d:
                    39:5b:8c:3b:a8:1e:92:9e:97:d0:19:6d:26:96:c8:
                    66:d0:2e:ac:10:dc:d5:c7:0f:e0:3b:d1:2e:81:79:
                    f3:55:c5:71:d0:01:3a:35:ac:be:17:bb:30:c2:be:
                    55:bc:53:eb:8c:7a:b3:37:6c:00:60:dd:25:ca:db:
                    9f:e3:26:72:05:f8:94:44:b3:87:fb:6c:f4:76:37:
                    9d:3c:35:4c:b0:b1:95:b0:03:44:a5:12:98:4b:c2:
                    ca:ab:2b:ef:6f:72:56:72:47:1d:17:67:2d:50:d6:
                    f8:eb:cf:e8:42:87:8e:8a:7b:27:42:d7:98:c9:e9:
                    64:7f:62:a7:32:6a:f3:c5:d2:71:b2:83:d2:aa:ad:
                    06:69:44:b7:2a:14:d4:9b:f2:0b:3b:84:dd:73:e9:
                    e8:9e:1a:02:f6:cb:62:2e:11:bb:09:8a:62:d7:42:
                    cd:54:72:02:a2:10:be:10:8f:91:66:54:48:45:27:
                    60:29:e7:72:39:b7:14:11:dd:2b:ed:be:4e:07:22:
                    b8:93:b0:ec:50:27:b0:b3:f2:01:6b:f0:99:31:9d:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7B:4A:C6:22:DE:06:A4:59:4D:8B:27:53:03:A0:85:65:2B:E9:95
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4a:46:d7:a5:f5:01:5c:bd:b3:01:86:45:38:db:27:be:13:
         00:2f:00:35:21:fe:8e:d6:39:6c:d7:a6:8a:e3:a3:91:13:82:
         6d:fa:ab:d7:fd:42:b0:8a:0b:05:6b:24:09:f0:05:3b:16:57:
         90:50:c0:10:dc:8f:7f:a2:5c:49:76:54:13:a8:55:bd:73:1a:
         df:08:a9:38:d7:f6:51:56:04:3b:9c:90:f3:e9:39:0f:84:8b:
         96:dd:d9:ae:97:d5:b0:b7:b1:a3:30:b2:39:5b:d6:54:e5:f6:
         ad:b8:33:18:59:a0:96:d8:9b:96:35:43:5b:e9:4e:d5:96:cf:
         1f:56:ba:83:cd:da:10:c7:14:c2:ad:4d:78:5d:5c:a3:1f:cf:
         1a:b0:a1:5c:b2:a3:02:09:d9:3b:33:49:d9:aa:28:2f:5a:03:
         c4:ff:ca:8e:25:d7:06:35:51:3f:19:e0:93:d9:06:9a:99:a2:
         33:97:17:c0:22:fe:b8:7a:6a:89:9c:e8:d2:48:a1:d4:c3:e5:
         8f:3b:3b:59:14:8c:54:44:15:a3:d8:f3:99:df:45:90:31:0f:
         3b:fb:44:8e:48:cb:c7:b2:9a:22:6a:ca:36:7f:84:a6:80:af:
         a2:6e:ee:88:d9:be:e7:1e:20:42:3d:39:8b:0c:b7:bc:98:e7:
         13:80:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:03:29 2025 by rpki-client