Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          qxSjd3OHiBaDgzZMPdmO0/o+7K2eUo5uDLd+xXC5mUw=
Subject key identifier:   59:32:47:A4:DB:24:25:19:8F:07:38:9D:96:F7:65:03:94:19:53:52
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       01987B9CBEF0276DC2286DFC41FB62591116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          15AB
Signing time:             Tue 05 Aug 2025 19:02:06 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:06 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:06 +0000
Files and hashes:         1: 5fuh3MDvvFTdM9YPWplIlmW8ZkA.roa (hash: Wdi/0+eUolZTOBljIE3hewam0WUu332lXIc8cs32Fgk=)
                          2: 925S4SchOi83vL3V68Y_AUuJSD8.roa (hash: 6EULq2ShinRvQFwY+uALe+ivLl2vWfr/F3fyELn3cug=)
                          3: PGmGsgYp4SpOgDQPzfkm2Kp84ms.roa (hash: QvQzg0nCw1e7QpH5gXcvQpoprtCI6UOH6zwCxDuFkv0=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: YRI87a9yUp2BWczwOW0iGckndJtEwPi7SUQuCC9CEr0=)
                          5: z3s2kSvc4H2ywLCnLljgXCeMKHc.roa (hash: pgMrP+tE9sQxVvQRywnzdq3UOn28MH01XXGUWXVHask=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:be:f0:27:6d:c2:28:6d:fc:41:fb:62:59:11:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: Aug  5 19:02:06 2025 GMT
            Not After : Aug  6 19:02:06 2025 GMT
        Subject: CN=593247a4db2425198f07389d96f7650394195352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:06:28:5f:c2:6b:8a:f5:4b:bd:e4:80:bc:
                    12:3c:61:db:71:fc:af:21:a7:17:06:2d:2a:6d:4c:
                    34:ae:7b:88:3c:c1:93:6f:29:71:9b:1b:8c:5a:72:
                    24:77:64:6b:0d:99:96:06:84:18:e3:13:17:bd:c6:
                    df:a3:de:03:6e:90:29:6f:a6:0b:fb:da:ae:03:57:
                    61:05:98:8d:d1:73:3f:dd:49:dc:35:6e:88:56:7e:
                    0f:16:37:b3:6b:05:b5:1a:ba:92:e6:1e:4e:ba:9b:
                    90:d2:96:49:bd:e3:9c:30:60:8a:03:69:6a:1b:30:
                    91:f9:ba:32:41:f1:e6:70:ec:69:9e:97:8d:a9:a8:
                    87:a6:a9:36:86:a5:93:77:c9:1d:e5:a0:9a:e1:40:
                    4b:17:c3:04:1e:7d:0b:5d:13:75:5a:21:6f:7b:ef:
                    fe:60:c4:d5:3e:57:c8:94:bf:c3:bb:a5:11:78:c2:
                    0c:39:56:2d:3e:cf:cc:21:af:11:a6:dd:7a:4e:5a:
                    46:09:0d:62:2b:7f:31:ca:33:79:32:18:a0:f4:77:
                    46:7b:6f:ac:26:91:a0:a8:9e:1d:2e:d0:9d:5c:4f:
                    a8:b9:07:73:c4:06:75:cc:68:e4:ee:07:44:9c:b9:
                    8c:b5:91:c8:a5:93:52:d8:d6:f8:f3:bf:53:d8:a0:
                    83:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:32:47:A4:DB:24:25:19:8F:07:38:9D:96:F7:65:03:94:19:53:52
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:24:4c:82:5b:a7:e3:f9:94:8b:8d:31:3f:88:c4:be:e1:bd:
         56:c7:d3:46:18:39:db:f4:79:8d:8e:b0:c4:34:b9:2a:99:0a:
         62:6a:e6:b9:28:4d:c5:ff:42:c5:0c:14:10:e3:58:03:a4:1a:
         bc:5a:86:f5:ef:72:70:8c:9a:4b:ac:9f:4e:e1:9f:7c:15:9c:
         20:09:3c:c2:06:cc:79:d0:f3:c8:99:2a:b7:1d:b9:f1:b4:00:
         26:88:7c:6a:ef:c0:c3:eb:c3:20:2e:53:41:77:a4:a1:b3:71:
         c5:7c:a0:6a:a4:d5:e6:2a:8b:92:a3:36:e8:ba:30:a5:b3:eb:
         04:33:e2:bb:12:07:b1:db:66:34:2b:ff:f7:a8:8d:39:cd:e9:
         be:d0:01:a8:3d:26:87:a9:35:59:f7:ea:f3:a9:55:c7:34:42:
         62:3a:f2:2d:f2:cf:b6:02:c6:35:55:29:87:cc:6d:f5:9f:b3:
         90:23:5e:fd:d2:84:01:40:f1:d7:05:e4:b4:e3:f5:a1:24:68:
         49:4a:83:8b:e6:ee:d8:7d:8f:cb:88:80:f6:f9:3b:c5:3b:29:
         37:4b:db:48:c8:8a:b1:44:6a:d1:1d:b3:11:70:70:85:2b:32:
         19:e9:55:57:f6:b3:ed:f3:43:56:79:06:ce:f6:2f:be:44:73:
         d7:83:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:58:34 2025 by rpki-client