Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File:                     YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier:          UN766I4WdLwy0+IVwnC4ZWh5Q/5+q4ScNhXUgnpPmmw=
Subject key identifier:   36:6E:2B:9B:58:5E:FB:A1:FD:49:48:0E:61:78:2D:50:A2:25:DD:C1
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer:       /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial:       019880F8ED444D97B756687A800039E5190C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number:          161E
Signing time:             Wed 06 Aug 2025 20:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:54 +0000
Files and hashes:         1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: YGfBKQ2hT15QNqNgVppMNn2/U8hHAbW/11zmYC0VZ5c=)
                          2: YP_ojssdziwcanJcHJab_qTOmuY.roa (hash: U3A2fg6Wi6oAAnLmfskViTy7rAEB6sn2k8/iuWaNKoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:ed:44:4d:97:b7:56:68:7a:80:00:39:e5:19:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
        Validity
            Not Before: Aug  6 20:00:54 2025 GMT
            Not After : Aug  7 20:00:54 2025 GMT
        Subject: CN=366e2b9b585efba1fd49480e61782d50a225ddc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:69:cf:cf:c9:39:91:a6:cf:b9:2d:63:92:
                    10:75:33:7b:32:db:26:f7:3b:b5:e3:3e:93:91:2f:
                    f9:b2:ee:2d:3f:a4:f0:e4:8e:d9:3d:a5:a2:66:a4:
                    61:0d:bd:cb:6a:76:45:e9:a3:86:63:86:b7:e9:b6:
                    bc:af:d0:24:2f:f5:eb:33:bb:2f:fb:7a:93:96:0e:
                    5f:12:88:17:2d:8d:b9:32:37:fe:c8:94:b9:e3:ed:
                    60:25:a7:d6:95:0c:80:d6:3a:46:9d:36:13:69:ca:
                    6c:a7:ef:6f:58:a2:c7:0e:0f:51:c0:30:4a:be:0f:
                    66:b4:6f:c6:e7:52:42:89:39:7d:31:29:11:68:ed:
                    c0:ce:ef:4c:7e:6c:11:ac:9a:90:b1:04:7d:d5:87:
                    f5:03:60:03:42:83:cf:66:13:a7:1f:42:f3:26:69:
                    22:ea:9c:34:34:f7:87:2c:40:5b:cf:f3:4d:b2:e6:
                    7b:47:a2:81:f4:2b:93:9b:c8:b1:00:94:1f:57:fd:
                    1f:96:91:31:b0:a4:80:94:87:25:68:d3:79:89:5f:
                    b1:76:85:26:c2:cd:b1:57:36:55:fa:bb:0f:5d:e3:
                    9d:6a:43:6e:47:c2:50:a9:84:62:3f:ce:14:c1:44:
                    18:e0:9a:b6:da:40:9e:7b:5d:f8:49:68:dd:88:3a:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6E:2B:9B:58:5E:FB:A1:FD:49:48:0E:61:78:2D:50:A2:25:DD:C1
            X509v3 Authority Key Identifier:
                keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:55:7d:22:5b:a5:f5:82:79:07:37:cb:85:23:60:90:88:79:
         28:88:fd:b5:dd:ed:f1:3a:46:62:d3:a8:95:6c:27:61:ce:92:
         fa:00:2e:96:5e:e9:4a:4b:83:ca:96:2a:de:5b:b3:22:12:60:
         1a:eb:0e:97:83:bb:2f:38:ec:ed:1e:b5:d3:a6:ef:9f:dc:9a:
         cd:40:5b:47:3c:ed:94:de:04:2c:0c:14:8e:dd:82:7d:19:6f:
         e1:29:73:b2:2f:55:99:4d:31:1b:d7:77:67:be:a1:65:b2:68:
         c2:d5:75:79:c2:57:f2:1f:1b:e1:1c:f8:2e:81:51:78:fd:c4:
         8b:e9:c3:ff:45:2d:57:ae:c8:78:67:38:5d:45:0b:c8:01:6b:
         44:0f:4d:19:21:36:ec:21:56:a4:11:a4:d8:e9:4a:ff:eb:f4:
         3e:62:fe:02:d8:87:22:ba:8f:d8:21:45:4d:52:e2:1f:02:9d:
         4b:04:05:e7:e5:17:2d:31:d7:61:47:cb:43:6b:77:32:d8:e4:
         e1:a2:01:01:a8:76:23:a4:11:a1:51:39:84:e7:27:ad:f8:c6:
         86:54:14:8f:af:0c:4e:8b:f2:a0:b8:b7:ee:1f:84:6c:4b:13:
         fa:b8:b8:34:b0:28:34:2d:6f:b6:5e:21:73:9b:bb:ac:ed:e4:
         62:f4:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:15 2025 by rpki-client