Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File:                     yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier:          9PzlageZzJxhw1ULMtePhBbPp5TSbGLtZExvPwjVawo=
Subject key identifier:   95:51:49:7B:EF:8D:65:DD:9D:BF:69:3D:A0:8C:C7:85:F4:64:29:8E
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer:       /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial:       019848F714719D0A0C1A2984ABCAEC72FB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number:          0C8D
Signing time:             Sat 26 Jul 2025 23:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:08 +0000
Files and hashes:         1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
                          2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: +NGFP3oOJX8cIo3KsASy0Az2aK3+FB2/fuqSg9RgfIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:14:71:9d:0a:0c:1a:29:84:ab:ca:ec:72:fb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
        Validity
            Not Before: Jul 26 23:00:08 2025 GMT
            Not After : Jul 27 23:00:08 2025 GMT
        Subject: CN=9551497bef8d65dd9dbf693da08cc785f464298e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:36:78:d2:23:db:35:cd:f6:32:19:dd:2f:
                    52:35:59:44:12:a6:48:0f:5f:0c:c1:1a:fd:b7:20:
                    d2:7a:66:87:6d:e0:9e:21:27:f7:38:ce:6a:60:1f:
                    98:d1:9d:dd:bc:66:82:70:59:95:39:ee:5d:4f:2a:
                    42:70:3c:06:57:64:00:75:2a:7e:ac:bd:e6:c8:b0:
                    4d:1b:74:12:4a:90:55:e1:ff:10:0f:a9:87:f1:d9:
                    76:23:f1:6c:16:3c:5c:e8:72:ea:a6:3f:3e:03:41:
                    cb:92:eb:00:3c:16:82:b5:8d:4c:55:ff:d8:14:65:
                    bf:b1:09:59:16:0a:76:f7:65:b5:c0:11:0f:e2:5f:
                    3f:73:70:07:a1:15:f3:7e:05:15:cb:e4:d2:b5:6d:
                    f4:93:6e:cc:57:78:2a:e0:25:df:31:2c:3d:b7:e3:
                    70:33:7c:ab:96:48:9a:c3:1e:cd:d0:2e:64:a9:56:
                    f3:2d:13:ba:14:c2:5b:92:09:0d:7f:1b:d6:26:7f:
                    08:8d:17:d4:e2:2f:93:b1:df:29:d8:f6:6e:08:95:
                    70:b8:84:bb:75:c6:a0:fe:cd:df:76:42:12:5e:71:
                    7f:1f:93:5f:a8:1b:6f:22:ea:c2:b3:da:c4:fb:5d:
                    56:38:58:d7:7e:4e:6b:d5:4f:82:85:27:a0:9e:8c:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:49:7B:EF:8D:65:DD:9D:BF:69:3D:A0:8C:C7:85:F4:64:29:8E
            X509v3 Authority Key Identifier:
                keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:25:3d:68:b4:00:45:66:12:30:6f:f4:4e:2e:de:1d:40:47:
         d9:5a:de:d9:bf:07:38:97:c9:f7:d7:db:8a:a5:04:6b:53:af:
         8d:6f:47:c4:65:f3:d4:9f:18:ad:d4:a2:a6:1c:a4:0e:94:10:
         e6:ef:bc:9d:07:5d:0b:d2:04:1c:23:4a:fe:78:dc:b7:11:9c:
         f2:71:a4:44:99:c7:c4:fd:0e:bd:51:a1:18:6a:00:d2:e7:85:
         2f:1c:dc:db:9a:f4:08:9f:a8:1c:94:23:2a:cb:43:4e:30:e4:
         07:b0:3d:d1:59:e8:bc:5b:87:35:d1:d1:b6:bb:6a:3f:57:70:
         dc:74:77:48:be:60:ea:d8:71:b0:6f:78:7a:b2:00:79:2a:d5:
         04:06:6d:70:08:c3:82:bb:eb:b7:4d:06:87:44:38:7c:9e:de:
         35:e2:25:82:2b:47:1b:a8:87:bf:8a:a2:ad:da:5b:43:80:36:
         1d:18:64:f6:c2:1c:37:46:f0:c2:85:0a:32:c1:5e:31:0a:b0:
         80:d4:86:53:1b:da:d7:0c:a8:d1:0f:48:70:a7:2b:43:c8:13:
         ab:c9:27:da:df:45:18:37:17:c9:62:53:d1:a0:c3:0f:fc:aa:
         35:76:a4:3d:f3:6e:d5:ae:f5:1f:aa:b9:7d:50:79:2f:e4:27:
         f8:06:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:34 2025 by rpki-client