Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File:                     yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier:          6vCrlJrCvUqMSSkOMSCqzKLmjldxUWzGUX8mkdbk1Uk=
Subject key identifier:   A5:59:80:3E:68:40:00:B8:DE:1A:70:51:F0:04:46:C2:07:E3:5F:D4
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer:       /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial:       01987ED37284AF3325E0D8EC1E02271CD99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number:          161C
Signing time:             Wed 06 Aug 2025 10:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:43 +0000
Files and hashes:         1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
                          2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: 8mjFP8Hp3MPS6ViaroJstod2HsM4NiAMZxi6zo03nXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:72:84:af:33:25:e0:d8:ec:1e:02:27:1c:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
        Validity
            Not Before: Aug  6 10:00:43 2025 GMT
            Not After : Aug  7 10:00:43 2025 GMT
        Subject: CN=a559803e684000b8de1a7051f00446c207e35fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:3b:0e:ee:cf:96:5f:a6:ec:12:73:48:9c:
                    87:40:90:af:8f:50:c7:ac:b5:68:27:4c:59:8a:ce:
                    c8:6a:9e:53:24:26:81:9a:53:03:77:f0:17:6d:c9:
                    e4:12:aa:a7:c4:ab:44:f5:c4:02:1a:2a:49:46:7d:
                    2c:bc:55:6f:4a:28:74:3f:8b:1b:92:6a:3e:78:55:
                    f0:53:65:30:bc:cc:e5:0a:43:7b:63:1a:78:96:06:
                    a4:a9:3d:4d:8e:29:8d:e6:6b:3e:0a:5c:e3:6a:c2:
                    78:77:f5:21:c4:51:4c:79:a0:40:69:67:d3:13:fc:
                    5b:53:dd:2c:96:1a:20:3d:a2:24:13:68:55:a9:c0:
                    78:fc:0b:0d:b0:00:a7:9b:d7:c6:2e:65:fb:be:37:
                    a1:e4:8f:a6:e0:a3:50:63:e8:7e:4d:9b:7a:92:e2:
                    d2:09:48:7e:27:35:82:c1:ac:68:94:94:33:f7:fd:
                    7e:6d:71:24:e2:8e:09:3e:aa:8f:56:f9:a7:97:3d:
                    9b:cc:1d:f4:0b:aa:92:f5:03:43:f8:7b:4d:5f:01:
                    a6:1e:22:36:e8:f5:91:16:5d:84:36:7e:ef:be:a1:
                    c6:97:23:61:16:4e:ac:96:8b:54:d3:30:eb:3a:33:
                    8e:e8:e0:c6:5a:d9:86:4d:05:e5:65:a1:d3:5b:a7:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:59:80:3E:68:40:00:B8:DE:1A:70:51:F0:04:46:C2:07:E3:5F:D4
            X509v3 Authority Key Identifier:
                keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:15:79:cf:99:6e:ab:d7:d8:f9:05:9b:d1:45:c4:ce:16:2a:
         21:19:a1:eb:6d:c2:b0:0c:5d:af:e7:16:b8:87:d3:84:98:08:
         bf:81:b2:30:55:b7:fe:0b:b9:94:c3:39:82:aa:99:68:7f:12:
         cc:e6:8c:ae:3f:00:67:13:c3:c4:ef:9b:bb:7e:29:53:b1:77:
         fc:b9:66:64:54:3a:8e:35:81:51:ac:b6:ac:de:e9:67:42:08:
         06:00:42:5e:ca:9b:0d:3b:bf:7e:4d:9d:16:fd:9e:a4:5d:44:
         56:ac:bf:f2:d0:39:aa:3a:18:0f:5b:62:75:0f:a3:da:d7:3a:
         36:20:34:a4:94:d0:8b:8d:38:5a:88:8d:d6:3c:31:b2:95:72:
         64:07:0f:a3:2b:de:8b:f3:99:bc:e9:86:b3:55:f7:d8:4f:7a:
         94:ad:0b:1c:ea:54:e9:32:d1:41:5c:37:18:65:21:04:22:ac:
         7f:0b:3f:56:94:c1:bb:7e:21:e7:db:8b:14:bb:46:23:40:fa:
         b4:d7:cd:b6:c1:c0:e3:f6:a1:3e:77:79:d8:84:3c:17:a6:66:
         72:19:5f:1c:a7:59:61:fb:ee:cc:cc:a0:bf:c2:aa:96:f8:4b:
         a9:bc:1f:d6:b7:a2:5d:4c:f1:3e:9a:e1:8f:d8:04:b9:af:b4:
         c8:86:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:08 2025 by rpki-client