Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File:                     yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier:          UdpMcyVIEwLRI86e6SKyIFfJJTRm1aord245ELDMlL8=
Subject key identifier:   56:AB:93:1F:6D:A6:9C:42:E8:5F:AD:B7:D4:4A:9A:B2:8A:6C:EE:7F
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer:       /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial:       019874500F6D61B234A3F677ED622ED8AC15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number:          161D
Signing time:             Mon 04 Aug 2025 09:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:00 +0000
Files and hashes:         1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
                          2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
                          3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
                          4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: d1T0KUAdsHkb9i9eHaw6pXMkSnM08TguqpnUwzZihxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:0f:6d:61:b2:34:a3:f6:77:ed:62:2e:d8:ac:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
        Validity
            Not Before: Aug  4 09:01:00 2025 GMT
            Not After : Aug  5 09:01:00 2025 GMT
        Subject: CN=56ab931f6da69c42e85fadb7d44a9ab28a6cee7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:ba:14:d4:63:e0:1a:22:6a:f0:9d:42:0f:
                    ae:9a:e7:54:c6:ab:2b:10:f4:61:6d:7f:e9:c5:29:
                    fc:31:0b:41:2c:f9:1a:cb:52:3a:22:c0:9e:58:29:
                    62:2b:9b:ed:3f:92:e6:62:26:dc:b8:4f:e5:ea:5a:
                    1b:ac:79:bd:23:ce:8a:3f:bc:74:19:ac:2d:7f:84:
                    4a:21:4e:dc:c7:57:02:f3:87:86:b8:1f:f2:4e:53:
                    13:1d:38:a3:53:1b:ce:0f:be:59:82:76:1c:13:37:
                    51:86:a4:dd:35:29:d3:32:9c:cc:7a:9a:3d:8d:04:
                    a2:ec:84:4f:f5:b3:74:a8:9b:5a:91:e3:1d:2e:6d:
                    ef:f7:28:db:4b:7c:24:86:da:99:d3:6c:f9:4a:0a:
                    17:ba:75:10:9a:ce:71:94:ae:c1:43:78:81:80:5b:
                    0f:65:d6:48:66:f6:09:bb:87:7e:d7:f9:8a:2b:28:
                    f2:c1:90:c7:87:1c:e2:85:80:aa:18:f7:34:58:03:
                    0d:e5:7f:12:94:64:c5:36:50:d9:55:1f:17:83:6f:
                    16:9d:c1:38:f2:1a:2c:36:c1:96:a5:d3:31:0d:6f:
                    9c:b8:03:2f:84:81:eb:d6:8e:aa:55:09:b4:51:08:
                    2d:e8:f6:63:ee:e9:12:15:84:ae:02:d8:e5:2a:8c:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AB:93:1F:6D:A6:9C:42:E8:5F:AD:B7:D4:4A:9A:B2:8A:6C:EE:7F
            X509v3 Authority Key Identifier:
                keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:63:8c:05:04:7b:16:cd:ec:a8:2f:1a:f2:f6:a2:d0:0c:59:
         0e:8f:fb:de:cc:fe:29:c5:dc:a0:5c:0c:07:28:ce:ff:e5:f1:
         89:b3:d5:8e:49:7a:84:ef:61:86:64:de:20:89:0f:58:ef:47:
         f4:58:55:e5:34:41:db:ea:be:2f:9b:40:2a:8a:c8:8c:12:d2:
         66:e1:85:51:60:bf:81:b1:20:21:1d:1d:fb:94:79:30:33:69:
         7c:f2:76:c9:74:0e:b2:c9:b8:89:1d:1e:b0:46:f6:30:70:e4:
         ce:10:e2:74:bf:d4:96:d7:ab:0e:40:87:0f:fb:53:6b:99:a7:
         47:1f:13:ea:a5:73:56:12:a3:59:73:54:cf:dc:8c:1c:34:ca:
         94:8f:71:9c:eb:71:0b:f5:d5:53:50:33:85:5e:03:a2:15:c9:
         87:84:f2:33:67:a1:8d:08:3a:de:c2:e0:86:f9:a1:55:b0:0b:
         3b:08:8a:39:20:94:a8:61:2b:6d:80:01:78:5c:f2:84:3e:fd:
         ee:8a:21:43:db:34:80:7a:7c:e1:a3:60:06:6f:29:ad:82:7c:
         38:06:d6:c8:1a:9e:cb:42:a5:9d:2a:56:54:3b:8d:b7:f2:6a:
         70:ad:fd:66:c1:62:34:1e:f2:42:36:0f:a9:91:d2:ee:e5:69:
         42:ec:f3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:15 2025 by rpki-client