Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File:                     yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier:          cTwCqmkcJNCEuti7Sq/LN6GvvuLFKyNiD/pzz7SAPyU=
Subject key identifier:   2F:6E:B4:5D:A3:56:75:9D:43:B8:DC:31:C3:D7:0A:BF:C4:9D:6A:60
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer:       /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial:       01988167763113C893D7BCD2EBC491397E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number:          1291
Signing time:             Wed 06 Aug 2025 22:01:37 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:37 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:37 +0000
Files and hashes:         1: APe792PPzgn2UcG2RsKnM9NZvXY.roa (hash: P5YJH0mHT12JV4knVxcd215g8BRGbGqkMZPdkHPu8r8=)
                          2: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
                          3: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
                          4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: a1WYjJ2K4ZBVjEg0UX/71LALnbBDMYWhfw7SzW9nRf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:76:31:13:c8:93:d7:bc:d2:eb:c4:91:39:7e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
        Validity
            Not Before: Aug  6 22:01:37 2025 GMT
            Not After : Aug  7 22:01:37 2025 GMT
        Subject: CN=2f6eb45da356759d43b8dc31c3d70abfc49d6a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:ad:86:37:3c:80:94:1d:39:b8:60:b6:32:
                    46:d9:bb:3e:8b:c9:88:20:17:05:c8:f9:21:e8:07:
                    63:2a:9e:7e:a7:d7:36:63:f6:6a:ce:19:24:d9:8a:
                    1a:f8:c0:fa:b2:cf:a8:90:e4:06:e7:78:90:64:33:
                    a1:ae:dd:b5:2b:c2:e7:db:3a:e4:c5:50:cd:24:67:
                    39:bc:7b:5c:0b:8f:de:25:2f:d8:77:ad:5e:92:c6:
                    58:7a:83:9f:60:b8:6b:af:40:e1:3f:9c:b7:c1:2b:
                    83:92:fe:a9:1c:5f:8e:1d:73:65:80:63:92:6d:0f:
                    2a:6f:d9:a2:da:b5:35:cb:bc:58:81:6f:8e:d6:29:
                    ee:2f:36:fc:f4:6f:8f:36:a4:00:9c:d1:af:4b:0d:
                    61:1c:45:4b:3c:ec:31:1c:2b:f9:1c:a6:ad:01:62:
                    3c:34:87:9f:3b:0b:de:45:0d:35:fd:42:f5:bc:2d:
                    ed:48:ba:36:72:35:ee:17:27:bc:0a:f5:5d:d5:70:
                    28:6c:29:7c:fb:18:30:e6:d8:07:96:30:d6:0d:60:
                    cc:12:9e:f1:ea:2b:c1:b0:29:a3:6a:24:8d:3c:5e:
                    90:3d:b3:20:d3:a2:97:f7:b4:74:50:4a:fa:1c:2f:
                    1c:2d:5d:fc:0a:53:57:42:cc:3b:21:92:01:a8:b8:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:B4:5D:A3:56:75:9D:43:B8:DC:31:C3:D7:0A:BF:C4:9D:6A:60
            X509v3 Authority Key Identifier:
                keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:b5:70:6d:ea:68:e8:b9:ab:7f:e8:99:7d:76:e8:c2:29:
         56:b5:04:56:41:d9:5b:e8:d5:05:05:df:cd:e1:4a:4e:7d:3f:
         dd:97:81:44:52:3b:6c:e2:e0:b8:ff:6e:b8:63:b6:3c:b3:ff:
         67:ac:22:63:67:2d:29:1a:6a:d6:01:8e:cb:20:43:f7:f9:e1:
         e9:66:0b:9e:3f:1c:3a:1c:fe:4c:03:aa:f4:54:a5:e7:d8:9d:
         a7:7a:7e:65:2a:b1:10:a6:c0:47:52:15:fe:43:2f:ae:f8:25:
         1b:73:5e:f5:aa:a5:08:77:5f:04:de:09:c1:e1:bf:f5:16:03:
         25:63:21:89:64:94:13:3e:ac:3c:05:7c:48:f7:bc:a6:80:96:
         a2:4f:23:a8:48:fe:26:8f:78:8a:99:4b:46:12:cf:18:d9:d4:
         ff:11:12:32:f1:98:03:bc:8a:18:71:51:7b:c5:aa:f9:07:fc:
         28:d3:ee:10:2c:0c:79:ac:88:1d:68:a4:ff:c7:68:df:92:da:
         09:cc:ad:f6:e5:d0:db:75:fd:1a:1c:c9:a0:95:ec:84:d3:4e:
         d7:22:6b:d2:8f:c0:00:f3:6a:b0:1a:4a:53:8d:fa:6d:83:e9:
         cd:8e:60:c2:fc:75:19:72:85:e9:a3:51:cd:0a:d2:6c:68:d3:
         a4:ab:9e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:45 2025 by rpki-client