Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
File:                     y_I74RFfAiqiadnOpDm7i0kjB-I.mft (raw, json)
Hash identifier:          gIT2o4Y2DvQN9CFsija5gJMNFmoAHwuQU0uouUWtqHY=
Subject key identifier:   F9:0C:99:FE:65:24:C6:F3:4C:07:FC:8F:29:19:69:A1:49:5D:C5:D8
Authority key identifier: CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2
Certificate issuer:       /CN=cbf23be1115f022aa269d9cea439bb8b492307e2
Certificate serial:       019873E3C8338A67A0E14F6FCA0FC2C6451B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:02:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:44 +0000
Files and hashes:         1: 2wV8eUCUu5RGsjYa7-OlHblwpFo.roa (hash: 7BqtxHk5pTQN6TSTs893yWqV/YVjq+6kshvNaK8vqGo=)
                          2: 8qU7PW-1jRTW26c9BxYT5_0Bc9U.roa (hash: HOmxtNFCl//oq/U3tRw6KwgqtgI+NdJR6gPDxjaAFLQ=)
                          3: b3I98CB-8ce3VcwkD_Ch6vFhQXE.roa (hash: kqwOewNHVrTW/kfVyBv01vxgKvixRF0yFyDls6uT/Uo=)
                          4: y_I74RFfAiqiadnOpDm7i0kjB-I.crl (hash: 7QH4VA9YsvNlt22leqjQpcsIcLXi3tS0jp+JJNEyGSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:c8:33:8a:67:a0:e1:4f:6f:ca:0f:c2:c6:45:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf23be1115f022aa269d9cea439bb8b492307e2
        Validity
            Not Before: Aug  4 07:02:44 2025 GMT
            Not After : Aug  5 07:02:44 2025 GMT
        Subject: CN=f90c99fe6524c6f34c07fc8f291969a1495dc5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:54:0a:d7:e9:ce:25:12:03:38:2c:24:a7:
                    55:6a:2a:b4:29:ab:18:bd:8a:8e:4c:56:8d:a0:82:
                    24:8c:6e:e9:c1:09:66:33:bb:ab:02:aa:23:82:ac:
                    60:25:0b:ef:6f:78:d8:c0:65:6f:b8:66:95:05:54:
                    3a:98:f2:ba:02:6b:c9:e0:d5:c8:38:a4:13:38:d7:
                    67:51:df:2a:9c:88:bf:66:4d:2b:b1:9b:38:b5:5f:
                    9c:b9:92:27:6c:7e:62:dc:f4:e8:47:a9:7e:d1:45:
                    2f:94:c7:f2:86:38:d1:91:0f:40:26:99:cc:74:9c:
                    9e:8d:fa:8f:45:b3:80:ed:d2:dc:86:68:26:3a:02:
                    41:30:52:f2:d9:1e:2d:c1:78:4b:a4:a7:6f:eb:ba:
                    07:69:f2:6b:f9:18:86:c5:6d:6b:99:0a:81:a4:00:
                    4b:0e:03:9d:d8:3b:b2:be:5c:88:74:de:a2:91:5d:
                    41:0c:ca:c1:d6:67:86:6c:e5:73:7f:9d:83:9b:93:
                    b4:0a:0a:56:37:cd:dc:43:bf:24:98:69:43:aa:20:
                    2a:17:78:1a:7c:ad:5b:1a:ca:97:be:cc:96:e5:8b:
                    5a:6e:10:8a:bf:c1:c7:87:e4:b7:3b:5c:93:e8:fc:
                    89:06:1f:6a:1f:49:a4:22:0b:a9:04:97:2d:60:fd:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0C:99:FE:65:24:C6:F3:4C:07:FC:8F:29:19:69:A1:49:5D:C5:D8
            X509v3 Authority Key Identifier:
                keyid:CB:F2:3B:E1:11:5F:02:2A:A2:69:D9:CE:A4:39:BB:8B:49:23:07:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_I74RFfAiqiadnOpDm7i0kjB-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56313f-ec4e-4c1c-b388-be3252ac4980/1/y_I74RFfAiqiadnOpDm7i0kjB-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:4a:80:a5:27:6f:32:7e:79:dd:0b:42:e2:c7:71:6d:65:
         53:00:3e:96:01:6d:4b:cc:0c:b6:35:a0:a8:95:c5:de:4e:ee:
         e1:2c:7f:dd:bf:1f:5e:9b:b0:bc:54:70:fc:43:e3:6a:30:63:
         9f:9a:29:ea:ee:65:46:0c:c7:8c:61:4d:c6:6f:13:52:9d:21:
         c3:1d:8d:d3:0d:6e:fe:4e:c4:30:43:c9:1e:fa:92:92:5e:cd:
         99:11:a4:fb:b1:35:b9:6e:8d:b0:1a:24:cb:43:4e:17:b1:ef:
         14:f7:fa:c2:0e:8c:93:8b:a7:7e:17:e9:81:87:ee:fe:60:ad:
         a2:c9:50:d1:50:15:df:ca:65:60:b9:45:ad:51:61:03:1c:a4:
         86:59:1a:1d:51:59:90:91:66:06:1e:f6:b3:c9:3d:5d:4a:c4:
         cc:44:57:61:85:34:12:da:4f:97:36:8d:6b:0b:52:e8:e9:2f:
         50:02:f9:05:d9:9c:96:8e:fe:1d:76:de:9d:a2:31:ff:82:b7:
         60:43:80:55:aa:01:7d:a4:95:76:7f:ba:9a:43:36:7a:ba:84:
         f1:37:3e:6f:6c:46:24:e4:f4:bf:8a:6b:94:c0:ee:14:14:43:
         4d:c7:62:9a:59:5b:fb:93:6c:17:ab:be:70:57:22:a1:7e:0b:
         3e:a1:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:03 2025 by rpki-client