Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File:                     yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier:          H3hSRjht+FmLFwCPQjA0bCnGY4mI0hbnwsLdQmlvmc8=
Subject key identifier:   9F:46:4B:20:F8:06:7C:C1:E2:FF:DB:2B:56:FE:06:06:D9:D3:1A:6B
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer:       /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial:       01988B7C5D4574E8010BCCBD160EBBB63CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number:          1598
Signing time:             Fri 08 Aug 2025 21:00:40 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:40 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:40 +0000
Files and hashes:         1: kclBuRKTMfByXqrmrwIbc_lZEnM.roa (hash: MQr5fqlXn7Xd/Z8IgiENjDF+OVj4PMx+/5QB1sHm+8E=)
                          2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: BUY+5dHptcpR34PdH2Rgo6FKDiyYa64ySyZ1WEfbqmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:5d:45:74:e8:01:0b:cc:bd:16:0e:bb:b6:3c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
        Validity
            Not Before: Aug  8 21:00:40 2025 GMT
            Not After : Aug  9 21:00:40 2025 GMT
        Subject: CN=9f464b20f8067cc1e2ffdb2b56fe0606d9d31a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:63:87:3b:4d:d9:d6:06:b5:10:73:22:40:
                    27:74:35:3e:33:c7:06:62:e5:41:f8:80:e9:c1:6e:
                    83:41:b0:64:62:15:12:00:01:81:0e:8d:45:40:9b:
                    e1:c8:39:80:f4:dd:19:2f:93:46:e6:c1:a1:1e:dd:
                    d3:0b:9f:6e:bb:e4:ae:b8:5f:05:f8:d1:23:7f:59:
                    29:3a:ba:48:b0:51:0b:d5:bb:11:f8:b6:2a:ac:94:
                    8e:70:c3:71:e0:91:fa:6b:10:22:cf:86:4c:84:4e:
                    aa:86:91:5d:4e:ec:e5:9e:7b:c8:15:80:21:9c:20:
                    b6:a4:58:8a:9c:8b:a7:68:62:77:ce:03:d2:a7:65:
                    d3:99:2a:78:48:83:dd:77:e4:ed:84:16:58:3a:4d:
                    ec:08:af:49:33:08:17:f1:d6:bd:06:95:80:a7:ff:
                    1a:50:df:7b:bb:a4:63:5d:c7:f5:d1:0e:b4:d1:c5:
                    13:3b:99:c6:04:42:02:fe:fa:ac:2c:8d:3c:09:da:
                    43:a9:45:63:bb:9e:39:04:f2:da:91:60:b1:8f:5e:
                    11:58:68:2a:c1:5f:8f:cd:89:f7:e8:63:5c:03:d1:
                    a4:b8:d3:ed:ad:a5:d8:22:0a:d0:0d:ac:f2:34:cc:
                    55:c7:db:d1:e7:ef:c1:87:54:94:5c:2a:9e:af:41:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:4B:20:F8:06:7C:C1:E2:FF:DB:2B:56:FE:06:06:D9:D3:1A:6B
            X509v3 Authority Key Identifier:
                keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:da:5a:7c:ed:e8:a6:6a:d0:cb:25:63:65:fc:5c:79:7d:
         d8:28:3c:e1:90:63:5a:36:96:9d:5f:6e:5f:51:d1:a7:02:b8:
         90:1e:7e:d8:fa:31:3b:ef:dd:76:eb:d1:31:16:c1:82:f0:58:
         91:07:8e:ae:7b:88:87:fe:a0:77:a6:fa:c4:88:4c:40:0e:d4:
         43:12:5b:50:0f:43:47:2d:ef:b5:bd:05:38:53:6e:91:3e:66:
         2e:76:cb:b2:09:a4:2b:85:b3:ff:5a:c2:93:e7:17:5c:46:7c:
         4b:35:15:5a:8f:ad:5b:2a:31:93:5a:f7:8d:7a:bc:7c:3a:f3:
         90:23:1f:75:dd:43:c3:a5:e3:cd:96:1e:36:ea:20:f3:0a:03:
         0a:1d:fd:e4:9b:85:60:88:9c:51:44:33:1e:1d:92:f1:7b:41:
         a7:ed:b1:be:1c:68:6c:14:e2:40:42:d3:2e:b9:ca:75:f6:da:
         bf:49:ec:ec:a3:1c:da:3d:77:e6:1b:a3:fc:1a:02:90:16:80:
         51:ce:4c:6c:07:26:6f:b9:5e:04:5f:b4:7c:fa:0f:c4:3a:6e:
         3b:c2:58:40:10:fc:bd:99:ed:c7:bf:37:1c:40:c7:2f:11:b1:
         a1:5c:8f:f1:4f:64:f6:77:aa:fa:2d:db:15:88:46:1b:3c:33:
         06:28:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:50 2025 by rpki-client