Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
File:                     y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft (raw, json)
Hash identifier:          rLvhmoGOk6MQg/394AkL7g8rZNh311JyQ1oIA5zVgVc=
Subject key identifier:   4D:97:97:12:14:DC:13:AD:44:6D:D1:89:F1:76:82:13:50:E6:18:9A
Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34
Certificate issuer:       /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
Certificate serial:       019874872E54865D8718F4D13BB23B921586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
Manifest number:          0377
Signing time:             Mon 04 Aug 2025 10:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 10:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 10:01:12 +0000
Files and hashes:         1: q46mhqb037SisDm5N4bZ1WyfVUE.roa (hash: xXhXgV0190R3J9YqFfSirVPaavfzMb4jIss+4mc25j8=)
                          2: y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl (hash: qtGoE28+sUkcVkdK+OZr8AazXc5cKhoc00b85cOkIDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:87:2e:54:86:5d:87:18:f4:d1:3b:b2:3b:92:15:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34
        Validity
            Not Before: Aug  4 10:01:12 2025 GMT
            Not After : Aug  5 10:01:12 2025 GMT
        Subject: CN=4d97971214dc13ad446dd189f176821350e6189a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:fe:54:86:ce:f2:ac:1f:ad:b9:bf:91:ef:
                    94:ec:ee:c6:44:25:03:0a:e2:53:92:69:a8:12:2a:
                    1e:61:e0:ae:32:62:cb:d9:51:7f:4d:38:54:1d:9d:
                    f4:15:55:2e:a3:2c:5e:5c:03:7f:45:13:08:66:1d:
                    45:ac:ec:da:79:b9:da:c2:0f:4e:27:58:82:f8:23:
                    ef:9f:1f:d7:83:fa:90:37:6a:3a:8f:50:3b:03:2f:
                    2a:03:6d:44:cb:b0:95:61:f8:39:18:6a:0d:12:15:
                    22:c1:ab:21:21:22:63:be:a2:13:d3:eb:e0:1d:6a:
                    be:f3:9b:04:47:f3:bc:66:3b:f7:73:8e:d9:58:97:
                    7f:ee:c6:49:38:b6:3e:da:82:f0:c3:09:1d:c2:40:
                    a7:61:a8:11:4b:46:28:81:51:3f:3a:2d:bd:42:12:
                    35:4a:35:aa:33:a2:11:4f:5a:53:4c:d3:78:d1:6f:
                    a1:7d:76:42:73:df:cd:e3:05:90:c3:84:a7:c7:c7:
                    0a:53:1a:12:0d:66:9b:f1:2a:4c:ab:37:31:72:c8:
                    64:5b:99:15:72:71:3a:d9:a6:de:9d:7a:68:dc:0d:
                    9e:59:3c:1b:a2:b4:bd:bc:43:8b:07:aa:6c:fc:2b:
                    e2:a1:1d:43:f6:a7:c6:66:9a:08:98:e7:b2:2c:8a:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:97:12:14:DC:13:AD:44:6D:D1:89:F1:76:82:13:50:E6:18:9A
            X509v3 Authority Key Identifier:
                keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:48:b0:83:24:28:72:68:c3:56:71:bf:ef:7a:51:30:70:d9:
         cf:39:96:51:b2:77:d9:d2:d2:c4:8d:8e:e4:e1:8c:67:28:8f:
         71:94:1c:c4:f2:1d:1f:00:70:24:51:48:51:a7:ff:53:d0:65:
         79:67:19:7d:76:92:7c:80:c7:69:52:0e:f4:50:b8:3a:2e:b9:
         2b:73:df:44:dc:03:b6:43:26:6f:be:12:ec:35:62:9c:7b:07:
         52:8f:91:ae:c3:eb:aa:02:af:a2:de:55:dd:b1:f1:e4:71:1e:
         ca:ec:cf:ca:50:ed:94:98:a5:a8:7a:d7:33:bb:41:9c:78:a1:
         7f:86:af:4b:60:d2:66:b7:c9:91:14:ee:f4:d6:69:c3:b7:2c:
         ce:7c:79:67:30:3d:b9:e8:54:91:8e:91:a8:80:35:e6:cb:5f:
         e5:e3:38:c0:87:0d:ac:6c:68:8d:bb:3b:36:86:98:90:a6:39:
         ae:fe:0d:ed:d5:23:76:2b:e3:1b:a4:33:3e:54:89:24:77:a8:
         67:86:a0:68:15:54:7d:f3:63:da:20:dd:f4:9f:0a:17:50:ec:
         ed:a7:b0:27:f0:2b:c5:5d:a2:6d:ef:1e:7d:87:a7:28:a9:74:
         98:c1:fe:46:d4:f8:d8:ab:06:04:00:bf:5e:8d:7f:b9:e4:a0:
         bf:93:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:02 2025 by rpki-client