Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          ijjmNvh3OQq42vc7lwud5Cl3fmOnjrwdmgMTcC9qhxg=
Subject key identifier:   87:95:59:BA:5A:EA:65:C8:CB:AB:4F:95:B4:4A:F7:46:0C:B8:4B:95
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       01987A894851CCD0AAA1D96F92F545E45148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          161C
Signing time:             Tue 05 Aug 2025 14:01:13 +0000
Manifest this update:     Tue 05 Aug 2025 14:01:13 +0000
Manifest next update:     Wed 06 Aug 2025 14:01:13 +0000
Files and hashes:         1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: vTu5HrGBkSqb42+8q5YKUDCtieVxaYaYg53fSBMvq8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:89:48:51:cc:d0:aa:a1:d9:6f:92:f5:45:e4:51:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: Aug  5 14:01:13 2025 GMT
            Not After : Aug  6 14:01:13 2025 GMT
        Subject: CN=879559ba5aea65c8cbab4f95b44af7460cb84b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:1e:0b:8e:8c:44:30:94:68:e1:10:bc:d2:
                    c8:6f:88:b8:37:1c:68:87:c5:8a:f3:0c:6e:51:d7:
                    04:c8:bf:af:ab:bb:3c:5f:44:71:26:3a:e5:23:a6:
                    e4:29:dc:5d:61:e6:90:34:03:d5:fe:27:a4:66:3d:
                    35:70:94:21:72:0e:da:d4:ed:53:c7:5d:36:c4:c2:
                    81:b5:e2:72:b2:cf:1f:13:d8:6a:23:5e:e8:3a:f5:
                    09:9e:66:7b:94:54:a6:c3:e7:31:1a:e5:d3:22:cb:
                    d4:b4:57:80:35:23:34:3a:ca:c8:19:7d:92:4a:b6:
                    13:65:8f:f5:24:38:cf:fb:c4:fc:0c:3d:ea:1e:52:
                    2f:5a:69:bb:10:f4:1d:05:37:13:94:7a:ba:c3:58:
                    66:e6:f6:49:28:02:78:71:a3:cd:3e:eb:e1:6f:39:
                    68:1f:3b:d8:35:e9:5f:ce:0b:c0:dd:7b:e1:0f:5f:
                    bc:1a:f5:3f:bd:82:78:b5:2e:7b:da:46:12:8f:36:
                    98:00:6a:ec:61:bf:82:f1:d1:64:b3:33:03:4e:69:
                    09:db:5d:0d:d3:43:4d:e4:88:fa:cc:ba:fb:9c:ad:
                    66:50:6d:e6:e9:8a:28:fb:26:55:05:60:0b:20:ac:
                    b7:7d:d3:b0:be:d6:44:f3:7e:82:15:3f:ef:ea:51:
                    80:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:95:59:BA:5A:EA:65:C8:CB:AB:4F:95:B4:4A:F7:46:0C:B8:4B:95
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:98:f3:e6:c1:92:38:42:1f:22:b3:3a:01:a4:4e:44:92:46:
         b9:b8:e6:00:99:9c:f4:bd:1c:fa:86:59:52:f2:eb:ca:1f:2a:
         f7:69:67:5f:bb:43:44:12:d1:50:cf:e1:35:f6:12:18:55:40:
         89:b1:5a:46:8b:bb:5c:e5:d9:b0:3b:68:f9:9a:d8:b9:03:a0:
         39:6c:cc:11:bf:bc:0e:2d:1e:c1:62:73:dc:61:f7:29:21:88:
         09:d6:63:ca:0b:a2:68:ec:77:56:03:6e:d5:40:cc:c6:81:79:
         e2:bf:a7:94:20:7a:0d:01:2b:25:38:7a:b9:54:23:a7:26:14:
         8f:7e:35:c6:50:24:66:3c:c8:5d:be:a6:06:db:4c:5c:bf:08:
         8f:24:90:1c:47:6c:31:9f:cb:ac:f1:c4:dc:77:65:90:aa:23:
         6a:87:1e:8f:f9:48:c2:ad:68:79:c8:ae:d9:d7:04:c9:79:32:
         9f:12:d9:29:83:8b:81:e1:1c:90:1e:f3:6e:64:4d:d9:36:d8:
         a1:ce:ba:e2:b0:36:e5:13:02:a5:a5:0a:ee:e4:95:e7:88:4a:
         79:9f:aa:3d:4a:53:25:ac:c7:b3:10:27:6f:6a:3a:de:71:b6:
         15:85:a1:b9:c7:c0:38:a0:9c:84:ad:3f:ad:bb:22:31:a5:b2:
         64:36:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:04 2025 by rpki-client