Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File:                     yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier:          sWV6O8os9pfeujrgbnA6u5m5aXE7v+AQLuzvXq8HDi8=
Subject key identifier:   F1:D4:18:5C:8D:D1:9C:B1:81:01:3C:0A:CB:7E:3B:69:BF:29:64:C6
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer:       /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial:       019878634FC06C91F0B096AD1CE391C878CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number:          12B9
Signing time:             Tue 05 Aug 2025 04:00:30 +0000
Manifest this update:     Tue 05 Aug 2025 04:00:30 +0000
Manifest next update:     Wed 06 Aug 2025 04:00:30 +0000
Files and hashes:         1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
                          2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: FXic3vSZFe4dN/l4ybkn2abSCjYpZZAf47Y4LvFaRKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:78:63:4f:c0:6c:91:f0:b0:96:ad:1c:e3:91:c8:78:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
        Validity
            Not Before: Aug  5 04:00:30 2025 GMT
            Not After : Aug  6 04:00:30 2025 GMT
        Subject: CN=f1d4185c8dd19cb181013c0acb7e3b69bf2964c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:15:70:7a:84:c9:25:2f:b4:f7:b0:82:a7:46:
                    7d:7f:26:b5:43:15:07:77:10:3c:ae:37:05:9a:b5:
                    b6:bb:5c:e9:85:45:f6:fa:8e:ab:15:b7:96:4a:b0:
                    f0:9d:10:d0:49:99:ec:fa:84:58:e6:82:21:97:17:
                    3d:bb:53:e4:b0:ba:4d:ae:78:00:2b:f6:fa:52:b7:
                    98:25:6d:52:44:a8:15:18:c3:d9:59:51:ad:97:27:
                    f1:0d:b8:73:b3:51:55:c2:b9:7c:11:59:da:4c:35:
                    3c:bd:78:d7:c6:ce:3b:74:c9:c2:25:1f:d4:0c:4d:
                    92:a4:44:17:00:45:ee:db:73:86:c7:19:9c:af:56:
                    85:1f:81:ac:ca:51:3d:68:8e:1b:db:8a:8d:2b:27:
                    58:33:51:3b:a4:47:8b:21:05:b2:0c:48:3c:df:96:
                    72:4b:f7:33:9c:ed:d8:a2:1a:fb:35:3d:b0:83:21:
                    70:67:63:b2:2e:eb:79:e0:d6:1b:21:59:52:36:8c:
                    a8:30:e7:6d:9e:f1:ea:80:f1:c0:05:8f:2d:b1:ca:
                    3b:4b:80:18:c6:14:83:12:a6:8b:36:28:d0:a8:0f:
                    eb:1b:78:55:3c:22:99:3e:fe:80:d9:7f:a6:61:15:
                    72:61:2f:64:f7:05:cd:02:ec:65:11:b4:c1:28:ce:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:18:5C:8D:D1:9C:B1:81:01:3C:0A:CB:7E:3B:69:BF:29:64:C6
            X509v3 Authority Key Identifier:
                keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:45:7f:24:12:ce:42:9f:e8:10:a7:b0:d2:b9:d3:8e:20:ad:
         a2:d4:cf:9e:c9:fc:b1:a1:11:80:9c:53:79:5a:16:bf:86:4f:
         e0:5d:4a:5d:9c:a1:c9:53:8d:28:63:42:77:c3:0c:17:2d:cd:
         04:3a:a4:93:44:7d:91:f9:55:e5:b5:79:d9:5a:30:a5:c4:8d:
         1f:a9:f8:c3:3b:85:af:ee:e3:f5:29:8e:52:04:1a:03:83:08:
         62:22:37:7a:9b:f6:5c:c2:5b:bb:0a:0c:8a:21:a8:9a:2a:1b:
         1a:8c:0b:41:c0:50:44:a7:81:df:01:a4:3f:48:59:0c:94:2c:
         2c:a2:b6:49:02:59:d9:a9:cd:96:1e:4f:8b:7e:1b:e7:84:56:
         a1:40:d4:cb:fe:17:2e:dd:22:76:e7:24:85:68:b8:e9:3c:25:
         9b:8a:d8:e0:24:40:12:98:81:53:95:c6:b0:ff:b1:dc:c1:7a:
         44:0e:c3:e1:26:80:8d:4e:05:d9:45:06:57:03:d1:ec:b5:fe:
         d3:4f:b9:b0:35:ac:50:82:39:0f:a9:35:96:19:87:d3:3d:0f:
         24:2c:d1:6a:37:ff:aa:6b:8a:89:e8:e0:8e:6a:2a:d8:a3:7e:
         64:76:09:49:d1:11:2c:29:ae:cd:24:a4:07:da:e8:ff:e8:ab:
         02:dc:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:13:04 2025 by rpki-client