Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          TDjYdgEDR61i1TGA+4Yi/v93/LXEFcF4kSHNVnOl/2w=
Subject key identifier:   23:82:5B:A9:A4:75:FE:73:CD:0D:C8:1F:59:7E:66:6A:4F:63:60:F0
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019934C91A9E06AD38C260ED277B851FAAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          1459
Signing time:             Wed 10 Sep 2025 18:00:18 +0000
Manifest this update:     Wed 10 Sep 2025 18:00:18 +0000
Manifest next update:     Thu 11 Sep 2025 18:00:18 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: DBMtitIslu9YX9jpNfdO4sd7IKvKbz7neJ4URUgFGrQ=)
                          2: KOw7xMKHlQCXW_5gRyvKjG3BAa4.roa (hash: lL3/S+AcvkiAqiXw9PyhHyyK0CE6Zf/JEzIe2/vsusg=)
                          3: NleaA2dNW39O_bLmPG6btbUsU3Y.roa (hash: sf3a501O0GUvM+JaIfyUft8SNLFrIk6yXA4pjHEA8yc=)
                          4: VXuZkRLoEcdAW1J7RtAxdgrcSzo.roa (hash: dJX4lpj20W+7pafsIHml8SOFrK8bjcSrzM7WjN8BZk8=)
                          5: hlJjKHJFeD3j4Nr8Kn0Ft2J4O1E.roa (hash: Fv/393RUKDmiuBI9kyyedtNaYIDs37je0cMv9FMaRSg=)
                          6: zTw4UgDwTum-l_h9WbH_dREg6CQ.roa (hash: b7idLBgnKlFBdz/jKpa7Hm7iiMdE241Sp7LHy9Qhpzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:c9:1a:9e:06:ad:38:c2:60:ed:27:7b:85:1f:aa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Sep 10 18:00:18 2025 GMT
            Not After : Sep 11 18:00:18 2025 GMT
        Subject: CN=23825ba9a475fe73cd0dc81f597e666a4f6360f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:da:71:5d:8f:7e:b2:4a:72:ca:0f:ae:d9:
                    94:e5:0b:d4:da:94:50:38:81:93:ca:61:37:2d:2f:
                    ea:a9:26:a7:b9:b9:f6:f4:80:3b:0f:bf:1f:02:37:
                    ef:d2:35:a0:a3:2a:e4:85:da:6a:e9:aa:0b:f4:6c:
                    a7:76:f0:25:3c:33:13:6f:84:d9:ff:72:c8:28:d6:
                    b5:7d:e5:0e:74:ec:4e:af:da:11:71:5f:73:c4:3f:
                    f9:65:1f:9c:15:cf:8c:4c:49:75:5a:15:05:d8:f8:
                    72:04:57:20:74:f2:af:21:d5:e7:12:3c:38:a0:40:
                    e4:9d:45:8f:9f:25:e3:66:bf:31:de:39:db:1a:8d:
                    83:80:c1:ae:0e:2e:dc:f3:26:fa:83:4d:62:aa:ea:
                    5e:0a:4f:a9:4b:2f:2f:cb:8a:3f:f8:61:55:17:62:
                    8f:d7:4e:5a:54:9a:ee:a8:cb:0a:40:24:11:39:6d:
                    4c:8d:77:5e:e3:a0:05:e7:45:97:0f:87:19:61:cc:
                    29:f2:ca:3d:58:5e:9d:f1:0e:d6:d8:bd:5f:8a:76:
                    b7:ce:e1:36:12:de:e9:bc:6a:43:c2:91:2e:b5:83:
                    49:28:68:f1:c2:58:7d:82:3b:1a:ae:c0:0a:b2:a2:
                    5d:59:6b:f9:f2:03:17:c6:f3:37:b7:7e:be:1b:a4:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:5B:A9:A4:75:FE:73:CD:0D:C8:1F:59:7E:66:6A:4F:63:60:F0
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:a7:9f:28:51:15:a1:63:fb:5c:f2:b6:dc:6e:71:ad:a9:
         22:c1:17:61:fa:5e:0a:c5:2a:86:dc:64:a4:96:77:ee:15:b1:
         58:97:e4:e6:8d:bf:82:b9:39:bc:b8:45:7a:03:a6:ca:25:ed:
         92:51:da:73:02:b2:00:6f:41:9f:66:5a:9c:e2:9b:ea:fb:81:
         53:10:95:95:e8:54:26:43:ec:54:b8:f1:6a:ba:c6:77:31:da:
         3e:00:38:41:99:c0:03:43:da:15:e2:e9:4a:17:44:62:48:42:
         ff:3c:ed:47:52:58:7a:c8:86:e2:42:92:87:af:34:11:82:c3:
         dd:34:25:dd:48:0b:c9:21:8c:4b:6c:9e:91:0e:f4:e7:0c:c8:
         fe:ac:f6:a3:50:d4:2f:ca:e7:de:7a:72:e2:6a:4c:56:de:ab:
         d2:59:d4:2e:1e:7c:92:5e:c6:dc:f8:52:7b:bc:8b:a1:e6:74:
         c1:ea:4d:b5:10:4d:46:63:b7:e2:b3:cd:62:45:8a:f2:ec:b7:
         0d:66:18:5f:d1:6e:52:46:99:da:25:d8:64:a5:e1:88:83:13:
         93:74:a8:7d:67:66:20:0b:22:78:61:02:06:1f:df:8a:83:f3:
         fe:14:83:e3:fc:83:5b:8a:cc:1c:80:97:81:09:7e:85:31:fd:
         88:02:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:02:23 2025 by rpki-client