Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          J7gIOqBP+p50I5VF1lXXPjsCjZ/ELrLsSwmj6vZQr7o=
Subject key identifier:   BE:84:A6:AB:7E:C2:F8:E3:8A:97:EB:1D:61:B2:EB:E4:30:84:16:3B
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       019847AD97A06C9431D487C19DE877D8AF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          161D
Signing time:             Sat 26 Jul 2025 17:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:15 +0000
Files and hashes:         1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
                          2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
                          3: EMUs2d_8MShdmJ5F8aoFKzim5Xo.roa (hash: Kay3d2Qce2xGwxER4td9XQqYPSpp+CJ6ilbU3TUukzg=)
                          4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
                          5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: OFUKdhwYPT+cs3O/xzPyunyC5RxWvjfj+qXzte/ZLhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:97:a0:6c:94:31:d4:87:c1:9d:e8:77:d8:af:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jul 26 17:00:15 2025 GMT
            Not After : Jul 27 17:00:15 2025 GMT
        Subject: CN=be84a6ab7ec2f8e38a97eb1d61b2ebe43084163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:f2:6f:39:99:f3:f4:f8:69:42:cd:0f:0d:
                    81:15:d0:8b:0d:91:62:db:5e:12:ab:e4:bb:e2:6f:
                    3f:d9:f2:52:42:a1:ab:25:e1:c0:93:35:b7:6b:cc:
                    83:fd:e3:50:d8:1a:8c:e1:6f:93:f1:cf:82:5f:ba:
                    2e:12:c2:ac:3c:e1:2a:47:da:92:34:16:8f:dd:ff:
                    a9:dd:0f:a4:e3:72:68:3d:1d:6a:e4:8d:ec:97:80:
                    5a:7c:0e:b6:1a:63:f8:a9:2f:17:36:99:67:da:aa:
                    2d:61:88:b3:93:34:db:4f:78:30:eb:1f:8e:68:01:
                    c9:6e:80:e9:8c:a8:48:3d:de:ad:1a:c7:92:42:1c:
                    59:9f:40:e2:01:68:b5:c0:76:ca:25:cf:c0:b4:fa:
                    2e:64:9b:6d:48:2a:f6:00:5b:18:26:e1:f5:9b:7f:
                    eb:52:48:36:06:d6:f6:0c:07:0a:b2:94:b8:b3:67:
                    17:86:9d:b4:ad:b2:0e:e7:36:be:3c:a5:47:c9:c4:
                    2a:2c:ae:9d:a3:80:ba:ac:84:e7:b8:fa:74:4a:81:
                    f6:06:1d:a5:13:61:2d:8c:58:d5:2d:e2:78:28:67:
                    de:0b:4f:30:d2:3c:e2:b1:f6:c1:2d:06:ac:b7:f4:
                    90:0f:1b:10:0e:7f:0d:74:82:2b:22:0b:16:1f:6c:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:84:A6:AB:7E:C2:F8:E3:8A:97:EB:1D:61:B2:EB:E4:30:84:16:3B
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8d:57:f4:ac:05:6c:12:97:3b:db:b2:19:3e:07:6d:8a:ec:
         a4:e2:4f:1e:d0:75:b8:17:bd:a7:2a:37:08:e8:c5:b6:c6:b3:
         4f:e0:6a:c2:e7:92:c5:f9:1c:21:60:67:7d:25:fe:e1:61:b4:
         b3:08:41:ee:52:41:2f:09:38:24:76:5f:f7:51:3e:aa:93:4e:
         ec:bb:e2:9c:84:de:25:aa:99:d3:24:35:17:c2:b0:c7:f7:5c:
         12:26:c3:75:f3:c4:40:79:6d:09:16:6a:1b:16:bf:9c:15:b1:
         7d:0d:68:42:9d:3c:e6:a5:2f:ae:8b:a7:59:89:de:68:23:3c:
         99:97:c3:e2:39:2c:2a:3b:c5:ae:e9:72:f2:9b:30:94:07:e4:
         29:15:81:4e:c9:e8:86:3f:5d:bc:b9:96:79:c0:9d:10:c4:57:
         1e:a8:a6:f6:ed:14:ee:47:bb:6d:77:44:80:e3:2d:14:c0:c7:
         ad:52:2e:29:18:62:7a:40:8a:0f:4d:d8:95:5c:5c:60:01:e2:
         65:6e:a9:f6:3d:5b:4e:65:a0:be:48:d0:92:d4:ef:68:1d:42:
         77:cf:b3:9a:ec:f3:00:6b:9e:fa:b8:04:bb:6a:dd:03:7c:12:
         44:4d:6b:64:e9:6a:70:36:47:f1:ff:88:6c:76:bd:e4:3f:91:
         3a:04:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:28:30 2025 by rpki-client