Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File:                     yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier:          RN7OIVjJaudi01nW7CuF4aH0bdfiOtfyHDrZyOG+iSU=
Subject key identifier:   A4:A2:ED:8F:3E:53:6F:B4:3A:38:C6:68:7C:AC:B3:58:12:15:5F:26
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer:       /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial:       019853E952BD20FDC0B744A01BE165192C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number:          043C
Signing time:             Tue 29 Jul 2025 02:00:56 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:56 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:56 +0000
Files and hashes:         1: de76rG8nL4tZzOssRD1ykxkBwJQ.roa (hash: PZ6Gs/7Ric8QzvgdkQxDNgPGEbYADwXFDmxjygY8QME=)
                          2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: EkUpZ78A62IapkUH35sJvlj0V6O5a7aV1oJVxaWAkuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e9:52:bd:20:fd:c0:b7:44:a0:1b:e1:65:19:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
        Validity
            Not Before: Jul 29 02:00:56 2025 GMT
            Not After : Jul 30 02:00:56 2025 GMT
        Subject: CN=a4a2ed8f3e536fb43a38c6687cacb35812155f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:67:75:92:ca:cd:db:aa:fa:2f:ad:3e:f0:
                    cc:14:ec:eb:57:25:99:0a:f4:04:f4:f4:07:10:df:
                    25:c9:e5:8d:06:bf:be:89:a5:4f:e1:25:4e:c4:86:
                    d4:ee:1c:12:e5:1f:23:2a:03:45:36:86:52:9a:9f:
                    59:e0:b1:8c:53:6e:9d:93:ab:74:f8:e5:2e:bd:e7:
                    a9:2b:22:75:30:9b:57:aa:74:0f:f7:a3:51:77:93:
                    ed:08:b3:f9:9e:8f:7a:36:13:38:47:57:53:91:42:
                    a2:dd:17:6a:c0:b5:58:a2:3a:e4:37:39:a6:fd:cc:
                    80:34:92:04:e5:78:5e:39:cc:1d:1a:8e:26:90:34:
                    19:a5:a0:ad:a7:32:40:8e:ef:64:31:e5:58:79:b6:
                    3b:50:c3:98:ed:4b:86:c4:18:cc:d2:0a:93:40:da:
                    43:be:8b:a0:83:8a:77:b4:12:3f:e5:ce:26:ab:bc:
                    21:99:3d:65:a8:9e:0f:e5:98:a2:49:4c:54:75:b0:
                    b3:e8:21:78:ad:09:10:d6:c7:65:e4:55:53:b5:d7:
                    34:a7:f7:a3:7f:0a:d4:1e:de:7f:52:f3:25:44:27:
                    c0:8d:0e:90:58:a8:33:e7:e1:f2:6d:4b:c5:3e:41:
                    59:7a:3e:4c:93:4a:ff:a2:03:8f:45:2d:ac:34:89:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A2:ED:8F:3E:53:6F:B4:3A:38:C6:68:7C:AC:B3:58:12:15:5F:26
            X509v3 Authority Key Identifier:
                keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:16:35:d5:97:42:d9:f3:fe:38:7f:46:79:96:6d:cc:72:53:
         94:b3:07:57:c3:7a:02:ab:31:18:4c:1c:a7:f3:d3:87:de:10:
         23:d9:e8:7b:be:94:d7:f1:bf:9e:b5:76:c8:3b:f4:4e:1d:94:
         db:e6:6b:8e:81:4b:67:27:7d:fb:7f:6b:ca:cd:73:ce:18:ff:
         c0:81:b2:bb:0f:54:3b:0c:a9:36:27:b8:fd:ce:64:16:20:3f:
         32:28:98:85:9d:4d:ab:23:69:36:2a:77:b3:9b:06:a4:75:df:
         58:99:49:f2:55:a1:0f:42:ab:ed:29:22:df:83:eb:65:4c:f9:
         61:99:a0:39:61:3b:52:ae:37:34:22:85:c9:63:b8:a9:9a:69:
         c8:3e:96:ca:27:53:b8:9c:87:95:2e:fe:a0:09:4d:d7:31:c3:
         05:97:10:ca:34:3f:2d:1a:6c:52:de:fe:d6:88:3f:ef:c0:52:
         82:f4:3a:b9:c8:10:c7:b3:a0:e2:68:06:b5:22:c8:75:82:81:
         56:f2:32:e4:be:fc:2f:f4:53:ea:58:2c:6f:2d:6f:11:0e:a2:
         ae:a8:5e:49:85:10:78:97:eb:0c:a1:82:18:be:60:e2:3a:db:
         ba:e2:67:e7:5c:bd:a1:f7:b5:37:c7:c7:c2:15:56:b4:34:17:
         2a:e1:b2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:59 2025 by rpki-client