Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
File:                     yh79jmMWnY_b-YtxOfzd7a8BbLI.mft (raw, json)
Hash identifier:          cVciqwhVok12GhClgY0u1a4jWOU2xgLk+gtgaaCpw8Y=
Subject key identifier:   E7:04:E0:1F:E8:C2:1F:E0:92:D1:43:18:1F:E6:7A:95:C4:1B:A4:01
Authority key identifier: CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2
Certificate issuer:       /CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
Certificate serial:       019848C0AF5D62C8C12E0C052D5A6F450BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 22:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:43 +0000
Files and hashes:         1: BUbgMU6qyG1ptU2dIWwVh8i-Kjc.roa (hash: rqwF60FwzB+zZQwtQI8AX0k6qPeHy+PObyrOxNB5ovY=)
                          2: yh79jmMWnY_b-YtxOfzd7a8BbLI.crl (hash: euR45ofqFI4DaJtdnroJbhJegms46IHG6turroTXVlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:af:5d:62:c8:c1:2e:0c:05:2d:5a:6f:45:0b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1efd8e63169d8fdbf98b7139fcddedaf016cb2
        Validity
            Not Before: Jul 26 22:00:43 2025 GMT
            Not After : Jul 27 22:00:43 2025 GMT
        Subject: CN=e704e01fe8c21fe092d143181fe67a95c41ba401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:4c:3a:d1:9e:d2:cd:83:43:9c:58:6a:68:
                    f5:80:b0:5f:cc:7a:86:57:9c:79:3e:fa:61:d3:ac:
                    39:2e:6c:8f:9b:34:ca:6a:74:11:9b:be:43:f6:09:
                    b5:fb:60:ec:37:63:ee:ab:52:df:df:ec:61:43:30:
                    4d:38:16:1f:d5:ed:f2:bf:cb:90:1e:57:b4:21:70:
                    8d:8d:46:96:a4:bc:8f:ac:9b:5c:1c:98:ac:99:95:
                    5c:8f:45:29:2d:0f:ab:e3:fa:c8:23:e6:05:cb:f7:
                    c0:a2:45:1a:eb:9d:f1:62:51:c7:2b:52:52:aa:64:
                    b3:65:24:21:be:c3:7a:f9:3d:b9:83:6a:d4:76:68:
                    78:55:eb:f4:b5:64:72:ad:84:23:a4:b2:2d:de:95:
                    4f:05:1f:eb:b0:1d:01:4f:63:48:e1:9b:74:56:b0:
                    4c:08:00:37:be:08:3b:c3:c3:7e:72:9d:a1:36:64:
                    43:f2:05:6f:22:3e:e0:66:93:8d:1b:c6:8e:3a:a2:
                    de:5d:1b:16:d3:96:af:64:42:9a:8d:72:42:54:92:
                    ee:2c:f1:ea:67:76:a5:7b:16:09:7d:91:f1:71:1c:
                    ec:06:34:0c:4c:34:a6:83:e2:60:0f:f1:38:38:60:
                    26:ee:9f:6e:c6:05:28:25:9e:23:b0:72:4b:10:65:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:04:E0:1F:E8:C2:1F:E0:92:D1:43:18:1F:E6:7A:95:C4:1B:A4:01
            X509v3 Authority Key Identifier:
                keyid:CA:1E:FD:8E:63:16:9D:8F:DB:F9:8B:71:39:FC:DD:ED:AF:01:6C:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh79jmMWnY_b-YtxOfzd7a8BbLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d961fe-d8aa-48e5-96fd-f07f06cbea2d/1/yh79jmMWnY_b-YtxOfzd7a8BbLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:bc:79:ea:45:25:7e:a7:97:36:36:d4:8d:b9:e5:1e:66:
         56:e2:62:79:ec:ab:07:74:32:fe:ea:5c:03:89:35:55:8a:c5:
         7e:83:81:95:3a:5c:44:ad:d3:ad:cc:93:8f:37:3f:79:90:b5:
         8e:d6:1a:ca:5d:a9:be:90:3d:de:8b:48:96:bd:f7:07:51:93:
         fe:4a:d2:34:79:e1:8d:ec:06:e0:af:da:62:72:23:16:75:53:
         2f:44:0a:c7:8e:66:0d:82:f3:35:9b:21:40:7f:3d:1b:42:68:
         19:30:6d:77:37:27:3c:c9:19:65:3a:f4:1b:5c:36:2c:59:13:
         aa:5c:0b:17:9d:21:c6:68:72:bc:54:b3:d7:58:22:ef:5d:49:
         3e:92:cd:26:ff:51:7d:d3:cf:c0:e7:a7:0d:31:fd:5b:ca:67:
         ca:3f:e7:1d:33:75:d9:76:ab:c7:f0:3e:0f:02:25:e5:23:58:
         66:66:c8:db:56:9b:b5:f4:b6:85:14:68:20:9e:37:f3:f1:17:
         f8:6d:22:08:4f:e6:31:c7:07:c1:6c:c5:cc:5c:6c:20:89:4d:
         e5:dc:3e:13:65:0f:ab:bd:b8:43:39:62:2e:0e:3a:f4:87:a1:
         06:25:9b:fa:82:80:8a:3a:63:84:79:e6:81:2e:c1:63:05:d9:
         32:d6:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:06:03 2025 by rpki-client