Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
File:                     ynRI_Amz9zINqAV7-o7qm6-c7jk.mft (raw, json)
Hash identifier:          mrHfDUAbpYOZw8I6aSce+d6ZbGAyjmlAfHfiTR5j4nA=
Subject key identifier:   46:63:90:05:BC:A6:E0:41:F9:C7:E2:99:F0:2E:1D:D1:C7:1E:99:EB
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Certificate issuer:       /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial:       01987D8A9C30A0662B337D463C297283F98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
Manifest number:          1618
Signing time:             Wed 06 Aug 2025 04:01:32 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:32 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:32 +0000
Files and hashes:         1: Zz3HiEMl3Xhoe_NeOZYASowUK4I.roa (hash: 0qkYuAOmtXdpU390WKpuoXcdObuMpe6kCjVAADqT7/s=)
                          2: ynRI_Amz9zINqAV7-o7qm6-c7jk.crl (hash: 5hJoCEc+b5kQYFDKYJiKtV7WUdg67fvViESOj/CCrUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:9c:30:a0:66:2b:33:7d:46:3c:29:72:83:f9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
        Validity
            Not Before: Aug  6 04:01:32 2025 GMT
            Not After : Aug  7 04:01:32 2025 GMT
        Subject: CN=46639005bca6e041f9c7e299f02e1dd1c71e99eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:55:74:aa:16:8f:c6:6c:6f:40:df:9d:81:
                    d6:f0:ae:73:6c:e4:88:42:67:c1:1e:06:82:2d:d2:
                    52:f5:04:7d:65:6e:88:89:18:39:bc:07:8a:f8:d7:
                    f3:d0:d4:62:c2:0e:db:2e:84:2d:35:43:5a:2a:f6:
                    7a:d4:28:32:b3:9f:ae:66:f0:2d:a1:3f:64:1f:6b:
                    f2:9d:47:74:e1:d3:12:9a:bd:e6:90:bb:08:36:49:
                    dd:89:40:af:b7:99:2a:f7:bb:e4:dd:7d:11:ec:aa:
                    e7:9f:e0:43:f9:49:41:be:2e:e8:05:b6:b9:3f:d5:
                    6a:9e:d6:44:28:3a:6d:09:e1:04:51:c2:24:52:54:
                    06:c2:74:c3:6b:52:a2:98:1a:78:14:a7:9b:fe:8b:
                    4d:24:34:2f:36:73:59:e3:28:c5:9a:81:19:3f:6b:
                    48:03:a6:07:8e:9b:1f:d0:9f:0b:f4:e9:17:d1:d9:
                    6e:0f:cb:ff:34:3a:8e:40:92:f0:10:d1:10:1a:c0:
                    ba:13:48:e8:e5:ea:f5:9b:89:1a:8d:a9:29:af:00:
                    0f:f6:ba:c8:53:ff:7d:92:cb:f7:60:7c:c8:0a:17:
                    14:ae:cf:cc:91:e6:72:ed:9a:6d:a8:07:cf:d5:75:
                    5b:05:b4:96:30:e8:fb:84:18:b5:11:8f:d5:79:1a:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:63:90:05:BC:A6:E0:41:F9:C7:E2:99:F0:2E:1D:D1:C7:1E:99:EB
            X509v3 Authority Key Identifier:
                keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:14:6d:75:16:c8:5d:23:e5:9a:07:76:81:23:c6:29:ae:13:
         c3:cc:16:74:d3:b7:92:7e:8f:76:23:1a:56:02:c9:64:b2:97:
         90:a9:bf:e1:ea:79:cc:54:80:02:cc:57:f3:fd:09:6c:70:98:
         a9:26:f4:08:66:f7:69:d1:f3:df:d9:f4:c9:d7:bb:26:09:40:
         b5:2e:f3:0a:d8:65:20:34:bf:20:c1:ba:2f:50:a3:0f:67:49:
         fd:45:fc:f6:98:b8:84:05:c4:1a:b0:80:6e:a5:89:7c:a8:2b:
         0b:2e:7a:d3:4e:65:ed:b0:41:94:c1:5a:d6:e8:c1:72:54:eb:
         9c:05:2f:d1:9e:60:49:d1:d7:d7:58:32:2c:a8:8d:ae:2d:07:
         87:83:57:16:78:f0:9d:d6:c5:47:0e:ae:28:0c:a0:32:63:1c:
         13:f2:f7:e9:17:9d:1f:42:78:26:fe:51:75:48:85:3e:e3:d8:
         b9:48:8a:06:7c:59:15:11:73:da:49:b7:e2:87:5e:70:f5:ca:
         39:3d:32:a5:f7:14:02:7c:b0:00:d5:e5:6f:5d:77:bc:36:2f:
         5e:a3:ad:1f:cf:80:cd:c8:a8:2c:07:53:b5:b1:5b:0e:a6:9c:
         4f:28:9b:3e:f0:81:a3:1c:cc:85:4a:8d:ae:14:0f:e9:3b:a1:
         f0:c2:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:55 2025 by rpki-client