Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          NU9qQKPE1TNhqsciGXMwvL6Qg6Q5qASUjKrBpDyiwZw=
Subject key identifier:   FB:36:99:50:43:09:F1:ED:4F:7A:3D:46:D9:09:50:94:28:80:61:CB
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       01988C21A0689ED3D067742261C3B4CDBD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          0377
Signing time:             Sat 09 Aug 2025 00:01:10 +0000
Manifest this update:     Sat 09 Aug 2025 00:01:10 +0000
Manifest next update:     Sun 10 Aug 2025 00:01:10 +0000
Files and hashes:         1: DRY2u3TUS-wJQ8xa8rjRSpoapeo.roa (hash: wBdx6PRDwqiRs1k8IOdYm4GWe7EZE4vtyKYESIsAUKo=)
                          2: ItPmNdTjNgHqBxANMhUVH1DC5UU.roa (hash: QPQB5rA9kwVStlIhdq0li1+Di1amgsoq6BbyBsFXRrc=)
                          3: xKKq4SF6-ObtvfC7jpcnypKexwg.roa (hash: qw4y1FHQavkl3C0h/hnsN3/lIOTC2hyOIzm3AanVe3c=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: djt1UtFxAwbVXjHTtApJI2aEPuvUXEl9dE/VkUawOnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:21:a0:68:9e:d3:d0:67:74:22:61:c3:b4:cd:bd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Aug  9 00:01:10 2025 GMT
            Not After : Aug 10 00:01:10 2025 GMT
        Subject: CN=fb3699504309f1ed4f7a3d46d9095094288061cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:82:b5:96:da:8e:a7:a5:a5:1a:5a:d2:d9:e0:
                    47:95:a1:25:65:09:16:2a:09:36:4d:8a:f9:93:49:
                    e5:43:c8:8f:72:7e:c0:07:8e:45:9d:54:2a:a0:81:
                    3d:0d:b4:6c:e3:f3:bf:7d:fc:ce:39:5a:d1:6b:fc:
                    46:38:41:60:3e:ea:47:6d:ba:6b:61:ca:c4:1d:c6:
                    54:9c:d6:0b:0e:75:be:36:43:12:b4:2b:5a:0f:a7:
                    ba:2e:b3:8a:f1:02:05:2a:75:35:3a:79:fa:79:e2:
                    cf:b0:2f:3b:f5:d8:f1:91:a0:c4:11:1b:bb:09:24:
                    ff:0e:30:13:88:83:44:74:ac:03:9d:f9:a4:02:d8:
                    85:0c:f6:b2:36:ce:22:89:68:25:29:b8:03:8c:48:
                    8b:60:25:a8:9f:2a:a8:6e:c1:00:72:a4:2e:64:e9:
                    18:2e:7f:63:37:53:22:56:bf:94:8a:64:76:19:a1:
                    74:7a:d9:e9:a3:38:32:3d:ac:72:0c:c9:c2:cd:4d:
                    b6:b0:d9:0f:8b:db:1a:0f:8e:d5:34:45:0b:33:3e:
                    66:8e:a3:47:22:2a:d6:cb:9e:67:1b:c0:38:05:6b:
                    62:02:a4:57:db:0d:ff:22:63:01:2a:cb:a5:1f:25:
                    87:dd:1b:18:3d:32:05:aa:d1:d4:29:01:9f:16:7d:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:99:50:43:09:F1:ED:4F:7A:3D:46:D9:09:50:94:28:80:61:CB
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:92:cb:d2:e7:be:66:e3:9c:65:98:66:19:50:a6:46:8d:9d:
         e2:35:ac:97:1c:9d:50:4e:0b:2d:7d:b5:50:24:1b:a8:90:33:
         1d:a9:50:ff:24:79:98:48:9f:ca:87:bb:fa:96:3b:61:79:d0:
         35:1c:de:39:ee:0f:75:53:a1:36:e4:c2:a1:c0:0f:63:fa:11:
         3d:fb:af:86:00:ff:bd:48:e1:e8:92:55:58:05:4f:aa:ae:b1:
         9c:4b:05:9d:89:ac:d1:52:34:02:ad:55:ec:78:57:2a:c9:c5:
         31:2f:cd:7b:ea:83:26:78:f2:eb:9f:3f:61:eb:82:8f:0b:64:
         7c:cf:9c:81:db:2b:73:5b:87:c1:ca:9d:05:19:65:66:6a:00:
         b4:86:51:54:b4:00:e2:4e:da:e2:1a:db:bd:99:6a:90:dc:bc:
         e7:61:96:f6:b8:32:5f:54:09:a8:be:e5:97:c1:f3:6f:3f:6c:
         dd:ea:84:e5:38:3a:2b:23:98:a3:b0:0f:fb:8f:cb:1f:3d:3d:
         16:0a:22:05:f0:fe:2d:39:84:a9:cd:20:39:b5:6e:67:13:4b:
         9d:3c:a0:12:fe:59:3f:31:7a:3e:1b:1e:63:6d:6b:b4:e1:2f:
         14:e2:ba:6d:5d:0d:8e:e7:f6:3f:78:ab:19:75:12:52:03:47:
         9d:e4:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:51 2025 by rpki-client