Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          +AgM9za9q9lw+XULVoRInnkdjJSg4UWZ43H7tABSpho=
Subject key identifier:   0F:B3:F4:CC:0B:41:70:34:24:B2:E0:96:81:D3:D2:6D:FB:61:FE:74
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       01988B0F0CF9C714B4D61CF6A40BA72A90DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 19:01:15 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:15 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:15 +0000
Files and hashes:         1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=)
                          2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: v6mH1rURR9FUGJBm/5wsDS+alzJBdstlxwpkj1RVglY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:0c:f9:c7:14:b4:d6:1c:f6:a4:0b:a7:2a:90:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Aug  8 19:01:15 2025 GMT
            Not After : Aug  9 19:01:15 2025 GMT
        Subject: CN=0fb3f4cc0b41703424b2e09681d3d26dfb61fe74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:a7:01:af:44:b6:5c:bc:0f:36:53:ec:54:
                    b4:a2:2a:32:30:5d:a5:6e:fa:34:7b:a1:ed:ea:b2:
                    76:b8:18:6f:e3:fa:4c:1d:41:49:87:5e:8a:fd:38:
                    e5:52:ee:d0:47:bb:a8:0f:aa:25:2e:01:69:b1:cb:
                    a6:56:41:6e:47:91:d1:2d:d6:02:8e:78:b8:84:39:
                    92:a1:1d:b8:6e:5d:ad:cd:ba:21:b1:19:e0:d3:f7:
                    e4:4c:92:d2:c8:c8:12:70:71:44:28:57:42:02:82:
                    b0:15:e7:ab:9c:71:d0:bc:cd:f9:e4:06:7c:9c:d7:
                    43:40:0d:b6:de:d0:1a:d3:c0:27:27:2f:e8:57:ea:
                    9c:f6:9a:12:1a:fe:2d:2a:12:96:51:06:d9:b2:89:
                    fb:43:ab:cb:3e:37:f7:f2:40:2b:aa:5b:a4:e0:45:
                    fd:01:21:48:d9:5f:b0:45:c4:5e:0e:5c:71:5e:d8:
                    75:a8:2d:dd:23:bc:5d:a8:91:44:96:ca:1f:c6:9e:
                    90:df:65:bb:d3:5e:13:84:1e:e3:f1:41:49:39:ce:
                    3e:67:e4:e1:6e:28:cb:ac:22:9a:33:c8:04:c3:c3:
                    f3:72:c3:70:c7:6b:e2:33:90:a4:eb:ad:70:6b:a9:
                    32:47:a8:22:f0:65:e1:f6:64:f5:9e:44:27:13:ed:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B3:F4:CC:0B:41:70:34:24:B2:E0:96:81:D3:D2:6D:FB:61:FE:74
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:87:d4:3a:cd:c5:07:62:1f:3e:04:2b:04:bf:2c:1e:aa:
         a4:d5:1d:fe:ce:35:87:b2:c5:a4:61:b2:0a:4a:64:52:64:fe:
         41:b1:73:36:ba:69:81:00:7a:62:eb:22:0e:0c:e1:30:83:e2:
         ed:4e:8e:c8:0e:51:e7:2e:0c:8f:55:45:7d:32:7c:bb:90:3d:
         9a:af:2b:ad:0c:5d:ba:a8:ee:cb:04:57:91:fb:03:36:3b:00:
         92:61:c9:18:60:c0:a2:c9:6d:6b:ba:04:b2:d4:3a:b9:b4:52:
         dd:00:4d:d7:83:af:cc:d0:ee:70:3d:6b:40:73:b3:92:f2:ab:
         8b:b6:6d:62:a7:ef:a5:71:80:25:a5:cb:4e:54:9e:9d:f6:54:
         8b:07:a5:4e:9b:59:c7:4b:42:77:c2:82:38:da:b7:14:95:53:
         c1:7b:86:e1:d5:df:dd:06:da:9e:f7:b6:f8:02:aa:2f:e3:85:
         2b:d2:1f:f6:4d:3c:02:b2:f2:59:d5:64:b7:97:d9:5f:ea:56:
         a1:d9:fd:cb:9c:3c:0d:b9:6b:d3:ba:7d:48:9c:e6:3d:de:50:
         6a:50:0d:77:28:87:3a:75:06:01:6b:70:7a:cd:c6:24:5c:28:
         a3:36:1e:4b:95:a3:50:6d:20:8e:df:c2:07:40:5f:47:bd:d9:
         b4:5a:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:34 2025 by rpki-client