Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          VbmQXMJaATpqHgJhUknYQjd6ZVitzdodBD6wJ4+dYcI=
Subject key identifier:   92:CB:1A:11:F0:7B:3B:98:3A:04:3D:FB:26:1D:30:87:1B:D1:E4:8E
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019925FB4E8E08F43D5007EE852CA7AE992E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          1246
Signing time:             Sun 07 Sep 2025 21:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 21:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 21:00:50 +0000
Files and hashes:         1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
                          2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
                          3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
                          4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: FfoD9X2qJdVLNKyK8e/AeRFzeqo4AA/2RXfmHo0hTfI=)
                          5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
                          6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
                          7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
                          8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 21:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:25:fb:4e:8e:08:f4:3d:50:07:ee:85:2c:a7:ae:99:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Sep  7 21:00:50 2025 GMT
            Not After : Sep  8 21:00:50 2025 GMT
        Subject: CN=92cb1a11f07b3b983a043dfb261d30871bd1e48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:42:76:41:4b:81:72:29:83:c0:2c:77:97:
                    45:fe:00:32:42:4e:4e:7d:e5:9c:89:db:cc:07:e2:
                    fb:f8:ac:d9:98:e8:76:80:b0:65:eb:bf:4a:a6:03:
                    04:1c:81:a0:67:15:8d:aa:39:2d:d8:c6:58:91:08:
                    47:9b:3c:e7:ad:5f:78:dc:2d:48:7e:7a:a1:d4:0b:
                    cf:90:37:81:db:cb:7c:14:87:33:c6:c5:ac:4d:8d:
                    37:02:9b:5e:a0:c7:7f:e6:de:46:dc:72:e8:da:f8:
                    e8:fa:bf:8e:7b:b3:95:88:ad:ac:3c:db:1f:96:06:
                    8c:8a:55:e1:0e:fd:97:79:7b:b5:c8:be:d6:fe:5e:
                    d3:75:4f:79:07:7b:e8:6a:51:fb:ef:f6:63:87:fa:
                    88:3e:7f:31:48:02:18:23:a9:a8:92:9b:84:9d:b1:
                    dc:00:57:13:39:63:4d:c0:45:f5:ea:ac:4f:81:1c:
                    de:14:63:7e:64:dc:ae:d7:1a:49:0d:50:c5:e4:30:
                    14:e1:35:0a:23:c4:a4:ed:95:ec:f9:72:45:75:a3:
                    f4:82:3d:f7:54:83:6a:62:36:70:ae:7c:5c:22:f0:
                    fb:07:0b:44:ad:06:68:60:78:59:60:75:34:bb:9e:
                    5e:12:0f:c5:c8:05:33:3a:60:76:cb:0d:46:7e:ee:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CB:1A:11:F0:7B:3B:98:3A:04:3D:FB:26:1D:30:87:1B:D1:E4:8E
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:66:54:b4:09:ec:92:78:16:9d:84:ac:16:e3:5f:c3:47:8c:
         9c:0c:30:58:7e:7c:b6:3c:20:5a:9e:ac:bd:55:06:b4:98:38:
         0b:2f:a1:35:ff:36:38:7a:09:73:13:62:f7:fc:b0:1c:d0:14:
         5b:46:31:c2:57:ea:d9:43:83:b0:4d:91:ac:6f:8b:58:03:3d:
         fb:27:c9:3e:74:e8:cd:a3:a6:82:53:2e:9f:ee:c6:c8:af:fe:
         d8:13:d2:56:25:6e:cb:c1:d0:c4:14:99:e0:ad:4b:6f:b3:39:
         a3:59:05:01:e2:37:1e:4a:a6:38:08:6a:bc:fd:1f:c7:ae:76:
         df:7a:80:4b:65:db:fe:90:5f:f9:c2:fc:51:0c:4a:49:63:ca:
         b1:fe:76:1c:d4:19:90:32:92:d0:2b:4d:50:c4:3a:fb:45:64:
         02:85:a1:a8:69:e2:71:23:72:22:b8:25:59:f6:97:a8:d0:ec:
         88:7f:68:68:a8:2b:21:ff:3f:54:c3:1b:3b:6a:69:f8:20:cd:
         42:3d:eb:a4:ee:7e:c1:a4:5f:25:78:7e:d3:ab:6f:99:3b:f2:
         c9:2b:cb:6b:e9:cb:e8:ae:34:db:55:dc:99:97:68:ab:01:47:
         e0:1a:ee:a7:7e:04:5f:10:4f:f7:c4:92:a1:b6:d1:16:ae:33:
         4b:75:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:15:00 2025 by rpki-client