Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File:                     y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier:          0gJ6JTGTd4vFf9FHBXkN+3/AYBDf3QXjaIlYf3HP3es=
Subject key identifier:   7C:44:A7:48:80:D4:50:68:25:6B:E8:32:43:5F:F6:DD:4F:AB:92:85
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer:       /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial:       019873E2C7AB95F926AA2F97C814DF381131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number:          1318
Signing time:             Mon 04 Aug 2025 07:01:38 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:38 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:38 +0000
Files and hashes:         1: AC5Czqpvjh0N2Ua52Rhnwc0cRrg.roa (hash: BaLqMkqAO8y3wqAkiCrx9+8UXW+y+iTwdOtnoANbo+k=)
                          2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: VJx2wo6AiqGIVbvXrm/NJ9nE12n9yPO5qBJuRZKYkU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:c7:ab:95:f9:26:aa:2f:97:c8:14:df:38:11:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
        Validity
            Not Before: Aug  4 07:01:38 2025 GMT
            Not After : Aug  5 07:01:38 2025 GMT
        Subject: CN=7c44a74880d45068256be832435ff6dd4fab9285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:d2:57:5f:d2:3d:52:bf:80:64:36:c5:91:
                    e2:29:ff:27:07:bd:5d:dc:8c:38:c4:6e:d4:4d:f4:
                    3d:d4:10:c1:1f:16:c5:16:7f:d9:b9:fe:c0:54:e1:
                    a6:57:9f:7c:0a:d1:89:f7:75:78:74:ae:36:1f:d7:
                    ce:e7:b6:fc:cb:f4:57:c5:9a:24:0c:b5:5b:46:82:
                    76:93:30:bd:ae:a6:b0:75:c6:71:4d:51:b5:78:78:
                    50:c4:5e:1a:6e:49:2e:6d:78:65:88:6a:e7:e7:69:
                    44:fa:f3:55:b0:46:0a:5c:09:d9:d0:34:67:a4:54:
                    40:8c:cb:9a:25:14:fe:12:b3:8f:2c:0c:a5:48:b6:
                    bc:89:8d:4a:87:55:e5:54:c1:b5:a8:f2:24:7e:07:
                    ad:37:2f:06:a0:61:a0:19:1d:79:75:d7:1d:70:64:
                    de:26:2b:44:69:c0:d1:b1:90:93:ac:93:e9:08:3a:
                    d0:73:73:e7:13:be:de:dd:c3:b9:ba:d3:68:2b:94:
                    83:ab:e5:e8:b0:24:61:07:e0:31:43:ad:25:9b:be:
                    c5:be:6f:0f:5c:e6:a8:79:23:8d:2b:07:2f:b9:bd:
                    b4:0f:18:24:77:0a:ff:51:e7:e1:23:10:94:9e:09:
                    1c:72:63:3a:15:0d:6f:03:d4:c4:8a:d7:e2:20:3e:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:A7:48:80:D4:50:68:25:6B:E8:32:43:5F:F6:DD:4F:AB:92:85
            X509v3 Authority Key Identifier:
                keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:8e:27:b9:61:27:89:84:d1:1d:28:57:14:e0:03:da:e5:
         5e:1f:3b:df:89:81:8a:2d:19:ef:5a:ac:b0:39:a4:c8:05:75:
         ba:dc:1f:81:ef:87:1d:30:43:5f:2c:46:0c:81:c3:1e:7d:4b:
         70:b5:36:d7:75:10:a9:05:9f:89:c3:1f:14:6f:f4:c4:b1:07:
         2b:24:57:23:b8:a2:7e:18:ab:fd:50:13:12:ee:c4:5b:9c:89:
         c2:54:c5:ae:66:6e:da:6c:a6:36:ae:2c:69:3b:89:1c:1d:d0:
         b5:f1:46:15:7b:00:e8:de:9e:69:01:12:8a:60:32:5b:bd:f3:
         69:5c:69:3e:a6:42:1e:33:fd:3b:70:69:42:0a:8c:f5:d3:9f:
         91:23:1b:26:26:cf:f6:c9:d8:c1:94:ae:79:9c:b4:85:67:f7:
         61:52:94:bd:6b:90:f6:8e:5a:8f:cc:a2:49:59:54:ed:39:04:
         73:96:59:2b:51:29:76:ad:37:a3:87:63:83:e0:ab:a1:2d:e4:
         ca:5a:68:9c:5e:59:15:78:4d:b4:32:0c:bb:c1:6f:1c:0d:08:
         24:9a:a5:4a:0a:64:88:12:45:10:55:9d:4e:dd:e5:c3:66:14:
         7f:b7:28:a0:15:b5:ba:01:2a:a5:04:12:1b:04:4c:82:8d:83:
         b5:2b:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:50 2025 by rpki-client