Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          ZxutSi6TPAimru4rfo+yaJWpTwKakPOayzUx3DMmsy0=
Subject key identifier:   B0:EE:26:C8:F8:99:57:8F:0A:71:36:7D:03:35:7E:0B:9D:CE:2C:3B
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       01991CC1ACE3AA3324FA932FFBAC3DFEDBAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1670
Signing time:             Sat 06 Sep 2025 02:01:18 +0000
Manifest this update:     Sat 06 Sep 2025 02:01:18 +0000
Manifest next update:     Sun 07 Sep 2025 02:01:18 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: WZkdM7GxyDc1XTpy/IoJgec0NQdCxw5sFu0iV2wQzCA=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:c1:ac:e3:aa:33:24:fa:93:2f:fb:ac:3d:fe:db:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Sep  6 02:01:18 2025 GMT
            Not After : Sep  7 02:01:18 2025 GMT
        Subject: CN=b0ee26c8f899578f0a71367d03357e0b9dce2c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:4a:59:e6:30:68:0f:4e:4d:07:d4:13:28:
                    29:b6:d7:19:12:eb:26:9f:d0:32:6f:3c:82:3f:81:
                    73:5c:9d:03:aa:63:51:1e:bb:13:6b:e5:35:c8:5f:
                    2c:f4:75:87:b1:bc:8f:47:f9:e2:49:40:95:37:e0:
                    b5:58:7a:2d:ee:49:50:7d:8a:08:d4:f3:e5:5f:7e:
                    5a:d8:9b:5a:90:31:3b:e0:10:57:82:c4:95:05:96:
                    f8:32:65:ee:f7:ba:ac:28:41:20:2a:fe:7b:df:9c:
                    a1:80:fb:a8:58:1d:3f:6c:20:2c:b2:cb:80:c2:bc:
                    69:9f:2d:32:4c:91:c9:4c:45:e6:e8:48:29:8e:45:
                    eb:c5:6d:9d:4d:82:6f:a5:31:ef:e7:96:6a:66:12:
                    24:00:6b:61:da:6d:b6:ab:9d:9c:c3:1f:52:1c:b4:
                    bd:67:36:d6:c4:d6:fa:9b:64:c4:de:1b:ee:aa:ee:
                    33:d3:6b:76:c3:dc:75:96:bc:ed:64:49:65:f6:29:
                    2c:54:8c:27:9d:a5:fb:96:ac:71:b9:d0:45:19:65:
                    86:00:29:23:74:a6:81:f8:3a:1c:0e:b4:c5:59:c6:
                    0c:92:84:89:92:21:b7:27:e9:ae:73:4a:fa:cc:90:
                    b1:20:0c:b9:35:69:55:be:78:d4:dc:01:9b:7e:1d:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EE:26:C8:F8:99:57:8F:0A:71:36:7D:03:35:7E:0B:9D:CE:2C:3B
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:df:3c:42:02:7a:ed:26:f7:e7:11:ae:61:e5:92:14:49:25:
         17:e5:79:99:e7:ac:3f:67:6d:a1:a0:a2:55:5c:f6:0f:00:bd:
         98:70:68:79:b4:a2:c1:57:f6:10:5e:1c:8c:6c:25:46:f6:1b:
         09:31:a6:ca:a5:e8:fe:72:a6:d9:ca:bd:f4:34:27:2b:b6:7b:
         b2:50:c3:ae:23:33:96:c6:f4:aa:51:0e:39:6d:8f:d5:f8:12:
         16:d3:5c:95:fa:eb:76:39:2f:fa:c5:e8:6a:6f:4b:e8:e7:8a:
         f1:c6:ca:cb:a8:e8:07:10:55:65:3f:41:0b:96:44:75:4c:5f:
         c8:30:64:1f:43:70:00:31:72:9b:e9:5d:78:84:39:0f:f3:05:
         76:e1:2e:da:28:91:1e:0c:40:93:34:63:27:6a:e7:88:76:0e:
         e2:1b:f9:0d:bb:7c:ab:3f:5d:2f:3f:78:4d:d3:a7:ed:73:e7:
         ee:a4:d1:01:ca:24:2c:06:f6:95:f4:58:39:90:71:af:28:ea:
         e1:20:c9:cc:48:9a:6f:e3:d0:44:06:6a:2d:13:b4:fd:a0:1e:
         d0:60:05:ea:48:81:ca:e3:f2:5e:6b:30:2f:28:fa:62:c3:32:
         5e:09:98:39:bf:c7:62:8f:77:fa:46:56:06:b7:f8:62:9d:d1:
         3e:05:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 03:51:09 2025 by rpki-client