Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File:                     Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier:          RQ5EVapr9u2ENffbkUxirMSoGrXZwpoRA7XcOqO6ovA=
Subject key identifier:   11:3E:1B:1B:51:9B:52:87:36:07:93:5A:03:50:67:6E:E2:6F:4E:14
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer:       /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial:       01987C0A56D026032313B47EAEE763CC7B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 21:01:48 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:48 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:48 +0000
Files and hashes:         1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
                          2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: bTDzAOHgLfpnV52LNtVsgdsQbddbfk2SB26iucVoHmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:56:d0:26:03:23:13:b4:7e:ae:e7:63:cc:7b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
        Validity
            Not Before: Aug  5 21:01:48 2025 GMT
            Not After : Aug  6 21:01:48 2025 GMT
        Subject: CN=113e1b1b519b52873607935a0350676ee26f4e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:b0:72:8a:7a:86:a6:b6:ae:6c:d9:a8:bd:
                    15:3b:3b:c8:6e:c8:76:bf:0e:39:c6:ef:66:57:58:
                    a2:21:7c:8d:f4:56:ba:ff:b0:51:c5:e3:c4:ba:3b:
                    c2:52:16:53:23:c6:10:67:c5:68:d9:66:b6:7d:7e:
                    aa:8a:a2:bd:6c:e6:55:6e:ce:a0:51:89:93:aa:cb:
                    6d:5c:60:0a:32:b1:77:3c:76:bf:0d:ec:53:9d:30:
                    cd:26:68:16:81:a5:02:1c:28:c3:d3:2d:f6:27:8d:
                    58:6b:0e:8d:36:67:f3:bc:67:76:5a:ff:f3:39:2d:
                    55:e9:1d:42:ab:11:53:43:0a:57:78:82:c3:40:3b:
                    6e:11:4c:7f:03:65:93:7d:0b:94:49:16:68:2e:8d:
                    e4:ca:73:6a:96:5d:51:88:f6:8d:95:e3:dd:6b:da:
                    30:af:cd:64:1a:44:24:db:1d:e8:af:e1:61:b5:4a:
                    f0:f5:ac:77:02:83:69:73:ac:67:61:18:2e:d8:ab:
                    da:13:48:40:81:c2:2e:11:cb:43:e6:5e:81:80:8f:
                    2c:c6:fc:cf:95:9b:70:92:c1:cc:d5:30:a9:da:6d:
                    bd:95:76:9b:b8:90:9d:76:8d:47:21:11:12:fe:5d:
                    42:5e:f7:44:78:b8:fa:c4:4b:5c:0a:74:8e:42:41:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3E:1B:1B:51:9B:52:87:36:07:93:5A:03:50:67:6E:E2:6F:4E:14
            X509v3 Authority Key Identifier:
                keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c0:fd:30:47:e2:47:aa:ee:c5:42:9c:16:5a:74:9a:50:1e:
         83:66:9e:ea:0d:4f:88:48:14:a6:dc:d9:e8:01:cc:55:e4:a5:
         f9:0a:41:cc:df:e1:bb:5d:ba:fd:2e:a4:37:e7:83:25:0c:ab:
         ba:a1:54:83:28:47:0a:11:95:18:0d:fa:f6:55:b6:3c:e5:68:
         07:2a:d7:b9:e8:11:30:03:2e:85:e4:af:56:2a:80:45:55:6f:
         68:a9:b3:62:97:07:cd:5e:c1:78:e2:77:cc:5b:a3:bd:b4:ca:
         6a:f7:58:5b:0c:72:dc:55:9b:d6:8b:8b:a6:2f:d2:68:67:4d:
         cf:52:7f:be:fa:97:30:54:ca:75:2f:da:ee:05:f6:5e:42:ac:
         da:39:c7:e8:ce:6f:cb:1f:f3:de:9e:37:c9:f6:27:af:21:d1:
         90:4f:59:8f:73:73:96:3f:a5:8f:9d:0d:37:fb:68:26:fb:b9:
         4b:e5:72:1d:5b:1d:85:02:28:34:ba:49:48:bb:0b:0d:36:1d:
         47:63:3e:1e:f5:d5:8a:15:c5:de:6e:8f:80:90:83:59:a4:86:
         4d:19:f3:6a:80:99:ed:b7:8b:d3:58:3b:e3:cf:55:b5:81:2c:
         77:58:86:01:ce:cf:48:ab:a4:14:d9:4e:a8:b0:c1:08:8a:b3:
         b0:04:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:12 2025 by rpki-client