Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          3zad//Wp7EOsi1CLRkQc2qX7umH+lzJiOcHua7dR++c=
Subject key identifier:   2A:BE:4D:93:6D:3E:E5:5F:55:B0:1B:39:DE:42:11:11:37:61:C8:F6
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019934252461366722F846CE0DD75CDDD68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0803
Signing time:             Wed 10 Sep 2025 15:01:13 +0000
Manifest this update:     Wed 10 Sep 2025 15:01:13 +0000
Manifest next update:     Thu 11 Sep 2025 15:01:13 +0000
Files and hashes:         1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: Q2Uum9y3VeEEMUmy2OIslkEtKRHIIdKYF2QQzgV/Z1Y=)
                          2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
                          3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
                          4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=)
                          5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
                          6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
                          7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:25:24:61:36:67:22:f8:46:ce:0d:d7:5c:dd:d6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Sep 10 15:01:13 2025 GMT
            Not After : Sep 11 15:01:13 2025 GMT
        Subject: CN=2abe4d936d3ee55f55b01b39de4211113761c8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f3:4e:ed:47:7b:6a:28:f6:41:1a:bb:cf:ed:
                    d4:e3:85:26:27:cc:1d:08:ba:96:15:69:0a:af:38:
                    2d:48:ac:40:06:5f:3c:51:d7:c3:67:3e:d0:d2:1b:
                    6a:e2:86:2c:dd:1a:e4:cd:f6:5c:cf:f7:45:6e:49:
                    0e:29:cf:a4:fc:c5:a6:1f:61:60:8e:3b:2b:ea:c3:
                    50:98:48:9d:a1:c5:bb:8f:12:14:3e:e5:5c:4f:a9:
                    d0:dd:95:32:a0:ec:07:95:f4:d5:71:56:70:8f:29:
                    68:4f:34:c2:fc:89:8c:52:07:b6:d1:13:cc:54:19:
                    8b:30:f2:ba:f5:ef:ec:34:c5:56:6d:3e:50:c4:5e:
                    18:e6:d1:2c:39:c4:4d:74:73:da:b1:89:3b:c0:f5:
                    fb:67:fd:49:85:04:75:20:aa:4e:bb:a1:37:e3:b3:
                    ff:93:c5:d4:74:0f:04:50:82:0c:8e:17:71:e5:4e:
                    86:64:f7:ba:3b:03:f9:a2:be:b6:2e:66:99:db:a5:
                    9d:97:18:15:f8:55:c2:19:95:7e:8e:1b:84:36:6f:
                    57:8a:41:0b:fe:40:a0:e1:5d:fa:f1:c0:dc:ee:8a:
                    7d:3c:77:5f:73:6b:40:ea:0c:bc:e0:1f:84:7e:10:
                    3f:6f:8c:3e:16:ce:77:30:a9:f9:e4:17:3e:90:36:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BE:4D:93:6D:3E:E5:5F:55:B0:1B:39:DE:42:11:11:37:61:C8:F6
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:73:4e:9c:b0:c9:04:d5:18:a2:2b:43:08:56:0b:19:77:15:
         eb:ae:d3:4a:40:bd:74:d6:67:f2:2d:b9:fc:9d:74:72:26:13:
         6b:35:fa:14:c1:65:1f:7d:b3:36:b9:16:77:d4:0a:d7:7f:75:
         1a:d5:e1:d5:13:0f:1d:ea:49:68:db:66:e5:ae:14:32:23:27:
         36:c5:19:ba:a1:93:5c:10:43:37:9e:6b:ea:68:54:73:99:98:
         fa:52:b7:b6:32:ec:f3:82:9d:16:2a:ec:98:de:5c:82:b3:a9:
         00:24:3f:3d:63:65:a7:0d:d3:6c:24:d1:c8:d0:65:16:f6:b9:
         61:4f:3a:12:7b:fe:81:02:99:3f:e9:75:68:89:1c:d5:82:d5:
         bc:36:3c:c6:1e:11:38:83:b7:42:89:c1:c5:6d:3d:93:f6:55:
         13:cf:bb:15:73:9c:0c:3b:53:89:6c:db:62:c4:12:4f:66:30:
         8e:48:5f:44:0d:7c:9f:d0:77:b3:d1:1b:70:64:30:39:c4:c2:
         e5:b2:85:65:51:6c:90:eb:dd:03:24:d1:6a:f3:8e:06:f0:83:
         29:b2:d8:71:de:16:94:37:f2:54:fd:df:d3:43:ae:a0:02:c4:
         7d:59:4e:21:83:28:5c:44:0d:d1:9c:33:fd:01:70:e7:4a:17:
         a1:d1:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:41:05 2025 by rpki-client