Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File:                     Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier:          +bluKbTvIX63pyvP3VIZNbjPSXqKkyNMV82P5chnoVw=
Subject key identifier:   85:93:40:C0:CF:CD:17:12:58:EB:9D:3B:6A:DF:BB:6C:58:36:B9:CF
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer:       /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial:       01987C4085DA6C5811FEB6FC91164C3825D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 22:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 22:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 22:01:00 +0000
Files and hashes:         1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: fE8AeMF1s5dNbzQ/NYB9YXbMxdXrT7SgPUuD6lf/uWg=)
                          2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
                          3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
                          4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
                          5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 22:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:85:da:6c:58:11:fe:b6:fc:91:16:4c:38:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
        Validity
            Not Before: Aug  5 22:01:00 2025 GMT
            Not After : Aug  6 22:01:00 2025 GMT
        Subject: CN=859340c0cfcd171258eb9d3b6adfbb6c5836b9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:72:2e:fc:ae:e7:58:5c:05:95:29:c6:18:
                    e3:8e:4f:8f:06:c4:f8:9c:e0:84:6b:20:c2:5c:47:
                    49:ce:47:94:36:e2:cf:ac:96:39:3b:d1:89:b4:a8:
                    59:fe:73:3e:88:02:17:63:3b:c9:b0:69:d8:9e:e6:
                    a6:9e:c0:7f:22:ec:78:04:b2:a1:99:45:b1:57:96:
                    d2:8e:c4:29:c3:51:c0:c0:a2:38:d7:4a:21:de:f0:
                    9c:c0:1a:01:51:66:01:a5:e2:e4:bf:ea:4d:cf:83:
                    94:33:5a:1e:2b:6d:02:20:17:0b:34:3c:f8:47:f7:
                    16:22:e4:b5:18:e4:14:21:8f:30:1b:af:33:a2:d4:
                    c7:42:e1:7d:e3:7c:0c:fb:8a:30:34:7b:f6:64:01:
                    91:39:92:2a:31:d9:7f:aa:e6:26:4b:5e:9a:de:e4:
                    32:7c:73:d7:c2:6e:3e:10:89:c9:b7:2b:09:79:66:
                    00:fb:20:e4:db:e2:38:f0:95:87:dd:17:47:a8:43:
                    7e:a1:53:0a:e8:9a:30:7f:60:29:3b:d3:3c:e7:72:
                    b9:7c:61:84:6c:c6:df:06:8d:88:76:75:fa:1f:dd:
                    b1:2a:67:d5:aa:f6:da:8a:ec:9e:e4:60:9b:6d:28:
                    ea:68:a5:6e:ae:f5:47:40:db:5d:04:53:ab:7d:e7:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:40:C0:CF:CD:17:12:58:EB:9D:3B:6A:DF:BB:6C:58:36:B9:CF
            X509v3 Authority Key Identifier:
                keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:bc:1a:ad:94:c2:d0:8c:4d:7b:bf:22:b9:be:83:02:bf:
         b2:a5:b5:72:77:7e:3f:82:17:67:7d:c0:65:be:b6:7f:d2:f4:
         74:56:a9:40:2e:a5:09:0e:ae:66:70:43:d3:80:a8:ef:88:43:
         e0:6b:f2:48:75:b1:16:5b:a3:73:33:64:a5:a1:6e:b5:fa:db:
         34:6a:78:0f:eb:3e:67:85:ab:a2:ea:e1:4a:30:68:3c:2d:2e:
         8d:bc:d7:3b:6a:ad:5d:a7:3c:43:0c:62:5b:60:74:7d:b1:f7:
         86:48:1c:b7:d8:45:90:48:58:6c:f3:04:91:97:58:0b:07:be:
         bd:0e:4c:a4:23:15:ca:35:0e:83:6c:74:0f:fd:ae:54:b4:9f:
         10:38:74:34:01:d1:1c:67:ae:86:82:f9:38:f1:e4:db:dc:19:
         c7:b3:b1:cf:13:ab:48:ee:d6:cf:5b:bf:b6:22:f1:b1:64:89:
         0d:fb:76:06:85:b2:f4:f1:72:7a:3e:14:9b:0d:46:07:b1:1b:
         29:b1:a1:c3:3b:ac:c9:12:a8:4d:c0:88:96:14:a8:91:e2:8a:
         40:cb:77:57:34:6f:7b:1d:67:d2:3c:99:8d:ca:d6:46:b0:ec:
         3a:f2:f5:83:a7:f2:a7:23:c6:9e:aa:56:af:b0:7d:ed:dc:de:
         de:ee:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:15 2025 by rpki-client