Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          xQNICeJiCgD7ozuXM60DS/nqkfCUUTrAakcsY+hKxGE=
Subject key identifier:   26:4F:27:46:3B:50:8F:4B:8C:78:5A:9F:B9:97:64:04:C0:0E:BE:D9
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       0198C7C96A1FF29D6B5AEBA9AA18C499B8AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0D55
Signing time:             Wed 20 Aug 2025 14:02:02 +0000
Manifest this update:     Wed 20 Aug 2025 14:02:02 +0000
Manifest next update:     Thu 21 Aug 2025 14:02:02 +0000
Files and hashes:         1: BbO3Y81u57rZF7WlM500MsuZpRM.roa (hash: ENegZhckEyjrMTUEgK0PeHY3+6b9WA+KNwr6cWbkGV8=)
                          2: VPoc4sp2b0J8IUmBhYFRCQnsPD0.roa (hash: syajYrJmIJZ/O9q2a3nZ7jEdzvbYM5uKAi7nB9k82iw=)
                          3: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: u8mdhjoDkjEvXn9k2kOoriQvSa8w5iWzvw2v/TEqvxc=)
                          4: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
                          5: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 14:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c7:c9:6a:1f:f2:9d:6b:5a:eb:a9:aa:18:c4:99:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Aug 20 14:02:02 2025 GMT
            Not After : Aug 21 14:02:02 2025 GMT
        Subject: CN=264f27463b508f4b8c785a9fb9976404c00ebed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:12:c1:d8:2e:7d:e0:90:44:9d:38:98:8d:18:
                    e1:02:d6:8a:23:90:c3:d4:d6:01:28:ba:54:89:b7:
                    f4:99:91:48:00:35:91:d8:c6:75:57:4d:4e:1a:be:
                    d3:37:39:f9:01:19:86:9d:55:2a:3d:07:ca:d4:c9:
                    56:89:4a:c4:7b:0e:42:04:d2:b1:f5:86:a3:4d:99:
                    e7:d2:02:f0:3f:62:aa:1f:52:67:fb:5b:32:0a:bf:
                    86:7c:a3:0f:c2:ea:cd:3e:f5:2a:55:df:80:bb:30:
                    ee:4b:62:b1:38:9d:2c:ec:a0:80:52:f4:d0:16:16:
                    71:ef:51:77:05:9c:d4:a8:2d:5d:2b:6d:28:b3:4b:
                    33:cc:07:91:82:61:0e:be:97:04:cf:57:22:03:52:
                    dd:f1:c6:fd:e8:b2:34:6c:33:35:52:27:b5:50:42:
                    3f:ac:08:84:6f:d2:8a:40:06:23:13:e3:77:c8:95:
                    41:e4:d3:c6:ba:f8:0e:2f:25:3e:eb:00:dd:9e:1b:
                    e3:3e:a2:b3:90:1b:ca:c7:e9:2e:41:d3:70:e2:3f:
                    66:3f:2f:74:c9:c3:88:be:05:2e:13:c8:e5:20:ae:
                    c1:0f:13:a3:37:fe:12:d1:a4:95:b7:49:74:aa:ad:
                    5a:22:43:16:aa:18:f2:6a:e7:09:06:4a:48:bd:0c:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:27:46:3B:50:8F:4B:8C:78:5A:9F:B9:97:64:04:C0:0E:BE:D9
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:a5:5d:06:ae:6d:22:02:37:da:3b:dd:85:91:ad:f0:3f:
         53:15:8b:07:30:5f:57:61:a2:27:5b:c2:77:9a:fb:b3:6e:b6:
         33:3d:a9:f7:50:81:9b:b6:2d:66:9f:88:2c:93:a9:5b:6d:be:
         ed:db:dd:4e:a9:53:16:48:7e:e1:cd:1f:fe:6a:e7:5a:ae:ac:
         84:8a:65:8a:ae:bf:cc:3e:3c:49:88:c5:16:f1:2c:ed:92:7e:
         b0:3e:35:a9:66:a8:ac:23:fe:af:cc:f4:a4:6b:7c:42:15:b4:
         c7:fd:6a:fe:80:ee:c5:3e:a9:2a:42:af:41:71:3e:14:a7:3b:
         ec:e4:2d:e1:93:8b:eb:3e:c2:a1:97:90:85:bc:e5:a3:03:35:
         7f:3f:f2:52:5a:c7:7f:b0:47:32:b2:37:a7:0b:e6:94:2b:74:
         51:de:72:80:bc:8d:b9:f6:61:55:56:8d:34:80:93:06:ba:67:
         8c:02:27:ba:1a:68:02:1e:3d:59:2b:2a:df:1a:e8:67:cb:3f:
         28:26:c8:b5:28:8b:79:2c:08:4b:c1:fb:30:b4:ad:50:e7:ae:
         b3:59:bb:67:af:7b:06:3d:24:70:80:17:21:6f:3f:4a:41:04:
         db:48:63:fa:42:5c:50:4e:30:0c:b7:35:b5:d9:11:2a:75:21:
         1b:d4:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:03 2025 by rpki-client