Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File:                     yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier:          RZ3etn/ly6DdpLQ2VvDF3HBu3mII8MFXMqieoCRw7A4=
Subject key identifier:   A7:C8:C1:B2:3A:27:0E:0D:BB:30:D2:A9:CE:8C:25:76:5B:B9:2E:BF
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer:       /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial:       0198C6EE1BF490FCDC14173063727086576F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number:          0145
Signing time:             Wed 20 Aug 2025 10:02:30 +0000
Manifest this update:     Wed 20 Aug 2025 10:02:30 +0000
Manifest next update:     Thu 21 Aug 2025 10:02:30 +0000
Files and hashes:         1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
                          2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
                          3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
                          4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 7vzoIgIb6xSiiSUF2z+mfhZ5JlpVqa72C9RDLVav97M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c6:ee:1b:f4:90:fc:dc:14:17:30:63:72:70:86:57:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
        Validity
            Not Before: Aug 20 10:02:30 2025 GMT
            Not After : Aug 21 10:02:30 2025 GMT
        Subject: CN=a7c8c1b23a270e0dbb30d2a9ce8c25765bb92ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:aa:a7:42:61:37:41:63:9f:58:ce:20:14:
                    32:ac:aa:e6:f3:52:d2:cb:91:bb:d7:84:46:56:37:
                    b7:3a:a1:88:cd:ea:a1:af:75:d5:b5:c7:4c:de:2d:
                    11:1b:94:15:12:08:78:54:06:fb:79:de:2d:63:55:
                    0e:2d:f1:0d:8e:fd:1f:05:2f:dc:3a:6c:97:9e:1f:
                    72:d2:aa:b1:3a:0d:49:0a:d5:8b:53:d5:59:e3:9d:
                    69:7e:ae:bb:58:5e:51:fa:95:a6:ca:c6:1c:d4:e5:
                    2a:61:ce:27:70:5c:c3:b1:e3:ed:ac:74:0c:39:65:
                    ef:cf:c4:6f:ae:fa:c5:c6:f0:59:66:b8:fe:c9:b1:
                    33:94:69:6b:78:5c:51:bc:32:a6:30:20:30:d8:a7:
                    a8:9e:bc:53:20:fa:02:aa:a6:87:b2:43:de:f2:c9:
                    5f:a8:7f:66:e9:46:00:9e:22:b2:4a:c0:3d:11:19:
                    7e:43:6a:c2:fd:ab:b5:ec:cc:d8:59:ad:d1:c3:ba:
                    ce:1b:3e:3c:70:05:0c:b9:33:14:88:b1:07:83:1d:
                    2c:ef:0a:bf:2a:dc:1d:2a:f0:5b:24:47:dd:bd:27:
                    e7:9f:fb:2b:66:97:27:ba:f5:7e:1a:89:7d:68:fe:
                    5c:73:82:89:32:a0:ad:7c:bc:aa:06:dd:f1:73:80:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C8:C1:B2:3A:27:0E:0D:BB:30:D2:A9:CE:8C:25:76:5B:B9:2E:BF
            X509v3 Authority Key Identifier:
                keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:07:2b:0a:45:e7:88:08:28:11:3d:7c:06:1d:8d:be:83:
         fe:5e:6f:43:a0:e2:31:00:f4:9d:17:d6:20:86:08:1f:0e:4f:
         b3:25:c5:96:d6:5e:31:bd:55:81:6c:aa:12:59:61:dc:3f:09:
         6d:cd:63:91:db:4d:e3:ff:2d:2b:44:d4:1f:b0:6d:38:1d:a7:
         77:27:41:0c:86:fa:62:fb:6b:3f:ec:aa:b2:4d:45:ae:d5:b6:
         69:09:c4:7b:cf:91:1a:16:36:44:39:f2:53:0c:e8:74:4c:d2:
         12:3c:03:10:eb:4f:17:8b:e3:5b:cc:52:dd:67:2c:82:8d:54:
         33:28:a8:4c:61:23:05:b4:18:d1:80:30:80:cd:9a:97:8b:07:
         e5:5b:96:91:2c:fa:60:f2:8f:94:25:e7:d6:7a:b9:5d:79:84:
         39:44:18:4b:19:50:d8:2f:7d:ec:7d:64:5e:c4:7f:4a:43:c0:
         19:6c:07:18:d9:5e:a1:94:37:9d:8b:77:a8:38:ba:b9:51:8e:
         fa:eb:f1:75:27:cf:aa:26:f6:f9:5e:2e:86:b4:0a:a9:e9:a5:
         22:c4:6d:dd:8f:18:dc:fd:51:fa:02:5f:9a:9c:fe:03:2f:22:
         61:5d:35:4c:63:fc:ca:51:aa:9b:b3:59:b7:4a:7c:5c:d7:73:
         c5:d1:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:40:35 2025 by rpki-client