Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          YoOGPZmE67iEA6cJS5c1LYN3cHokbjyoVXpEUM+530U=
Subject key identifier:   E8:83:11:12:53:B5:A5:CE:AE:C1:96:01:39:F6:D0:8D:48:F9:7F:19
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       0198277EA974A030E9A0B6ABD72CC8C8973F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          0529
Signing time:             Sun 20 Jul 2025 11:01:09 +0000
Manifest this update:     Sun 20 Jul 2025 11:01:09 +0000
Manifest next update:     Mon 21 Jul 2025 11:01:09 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: E/kX+o9dAsQuiocmfk+E7yxkCF2N/hVsK7r5Je7IYCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:a9:74:a0:30:e9:a0:b6:ab:d7:2c:c8:c8:97:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Jul 20 11:01:09 2025 GMT
            Not After : Jul 21 11:01:09 2025 GMT
        Subject: CN=e883111253b5a5ceaec1960139f6d08d48f97f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:66:cc:0e:36:73:00:df:52:28:04:11:27:
                    5e:8d:55:a8:c9:be:3b:0d:b0:2f:4b:f1:99:c8:a7:
                    08:db:b3:fd:bb:7f:63:67:07:c1:a9:3f:2b:a5:d7:
                    40:e7:75:48:6e:92:1c:07:ff:c7:c2:51:72:06:4c:
                    b2:34:c0:28:66:9b:8d:ce:04:d7:1f:06:9b:92:34:
                    7a:92:ce:78:75:03:61:a6:4a:59:83:21:a6:2c:42:
                    f7:ec:ca:da:e9:6d:fd:a0:e4:c9:0f:10:87:fe:62:
                    ae:fd:df:e7:cd:0c:cd:01:fc:64:d8:e4:2b:0a:dd:
                    13:77:e5:8e:69:fe:e7:40:c5:06:3a:eb:3a:50:25:
                    d7:98:87:94:6c:cf:c9:fe:d5:ea:08:3e:fc:ce:e8:
                    6b:2e:03:19:a2:78:22:b5:24:f3:66:3e:54:1d:f5:
                    6e:6d:b5:6f:9d:de:85:5e:40:d4:27:6e:67:03:35:
                    27:b1:64:fd:c5:58:ca:85:b3:bb:29:f3:48:15:2d:
                    19:99:f3:09:63:96:a8:bb:41:46:6c:72:2f:40:30:
                    2a:06:a0:37:cd:06:55:75:3a:6e:70:5d:a6:d1:27:
                    ff:ab:f2:82:3d:44:62:19:00:2a:b6:4e:bb:2e:fe:
                    f8:35:34:56:3b:c7:c3:11:a6:8d:db:63:04:d8:d8:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:11:12:53:B5:A5:CE:AE:C1:96:01:39:F6:D0:8D:48:F9:7F:19
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:e4:95:16:2a:a6:9d:de:a6:41:ab:93:0c:2c:86:c1:78:
         6b:f9:1d:15:f7:35:06:24:27:0d:3b:fe:f2:e3:18:1f:12:f5:
         a6:44:2d:45:48:03:33:da:94:23:f7:1a:09:30:7c:13:71:4f:
         ac:1f:b6:c1:54:dc:12:cd:18:82:d9:fd:e3:01:ce:04:c2:53:
         ca:bd:b5:a8:d5:71:69:67:4c:51:e9:82:0c:57:a4:9e:3a:1b:
         80:e5:32:39:a0:28:3b:49:10:8a:94:aa:66:73:3b:bb:41:30:
         8e:09:b8:7c:51:20:ce:32:ba:45:73:01:c6:57:da:23:8d:95:
         ba:51:62:7d:29:7b:f3:1c:10:4f:22:83:ed:5e:69:cd:6d:20:
         a6:ec:f8:61:f4:2b:fb:8d:21:86:0f:b5:17:77:af:49:89:bb:
         80:b1:4e:86:b8:2e:73:ad:7a:4b:98:39:74:07:04:5e:1c:f8:
         4b:d2:42:eb:e3:a9:be:e5:1c:1a:27:c5:6d:3d:d4:bb:69:d2:
         07:62:48:99:34:a0:ae:e6:a8:5b:3a:3f:38:9b:1b:b6:71:69:
         63:91:0a:2e:0b:15:01:f1:2e:cb:d0:3c:56:07:e7:ff:87:a8:
         1d:60:b1:35:00:a5:d4:ca:18:4b:2b:7c:c3:5c:fa:14:00:36:
         84:88:d3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:29 2025 by rpki-client