Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          jVDxjmMTRadHfZ86AJzJnDuKtpubMT56vHrzOgy7oqE=
Subject key identifier:   54:0F:98:74:56:90:7A:65:1B:E2:87:3F:3C:82:6D:04:A7:D1:26:61
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       019872CF8FF8E6E9760A796DE5267120427B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          01D4
Signing time:             Mon 04 Aug 2025 02:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:02 +0000
Files and hashes:         1: RgDK0GlNrO7C7ubV0WX7Z9uLa44.roa (hash: rsSKr9gwgh4LATGzKPPW1fvQ8qeoiCF1icD7tfZVV58=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: sM+0QWtNyd8hAhdsKrbOzE4lIlcgmrcGqUjjrewtPgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:8f:f8:e6:e9:76:0a:79:6d:e5:26:71:20:42:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Aug  4 02:01:02 2025 GMT
            Not After : Aug  5 02:01:02 2025 GMT
        Subject: CN=540f987456907a651be2873f3c826d04a7d12661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:cd:3f:1a:ef:67:a3:22:42:f0:28:f8:54:
                    a2:6b:dc:17:ee:01:bb:c0:bd:63:9c:ec:e9:cf:f1:
                    c8:8d:f2:f5:f0:3f:c5:0d:10:04:8e:c7:b1:f5:bf:
                    e6:6b:e0:49:da:ea:b4:9d:63:61:95:25:2f:df:7d:
                    b1:77:86:07:f9:5b:1c:6e:4a:1c:12:21:8e:30:15:
                    b8:e9:c5:5f:cb:ba:cc:f4:0a:bd:e4:c3:f5:08:ce:
                    6d:e0:70:44:86:14:88:6d:04:35:81:9d:c9:c7:96:
                    79:ad:ed:cb:c8:09:07:98:1e:69:fa:6e:0c:e8:10:
                    33:18:9a:19:84:2f:c9:2c:19:f7:14:b3:87:7c:f8:
                    f9:10:07:49:3b:f3:31:91:8f:83:69:6b:1f:78:7e:
                    1f:1a:13:ab:25:4d:7c:3e:f0:4c:8a:41:3f:78:20:
                    c3:c5:8d:1e:80:52:06:f8:02:c1:7f:75:52:f1:be:
                    f2:7f:f0:b6:20:4a:2b:34:48:50:e7:b9:6f:01:3c:
                    15:4d:27:57:b5:17:f2:08:2f:1c:4e:73:91:b6:3c:
                    0e:2a:cd:96:e8:9b:34:68:5d:9e:ff:a9:7f:8f:32:
                    36:3c:3a:8a:ab:38:c6:cb:3c:85:c6:66:73:f7:95:
                    14:a1:13:fb:97:36:3a:e3:d2:8b:07:b8:37:95:3f:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0F:98:74:56:90:7A:65:1B:E2:87:3F:3C:82:6D:04:A7:D1:26:61
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:50:bc:f3:ee:0d:46:c0:55:19:f0:d4:ba:af:e1:fe:f1:
         77:e6:ae:c6:6d:68:8a:98:de:75:9f:09:0d:47:67:dd:5a:54:
         69:a7:24:58:4a:19:93:51:a9:09:a6:d3:02:f0:a9:a3:4f:fd:
         8a:a7:d7:0c:28:cb:04:da:a2:71:5d:39:50:50:84:d0:c5:49:
         9d:41:fe:bc:8f:0f:2f:3b:f8:ca:21:b2:0b:8a:c5:a8:0d:81:
         77:10:71:22:d8:11:6e:71:c7:18:63:fb:33:fd:a8:51:97:5d:
         e2:71:e2:c8:19:a7:ce:9d:6c:76:55:eb:85:dd:68:c9:18:6f:
         df:cc:91:d9:d5:ef:f3:fe:6a:a4:d0:02:83:46:84:59:44:8b:
         fd:87:f4:9a:ec:ca:b7:66:78:3a:ff:ed:53:52:a0:fc:2f:90:
         71:ba:4c:69:34:80:97:05:25:40:db:95:0d:d4:f7:c2:ed:bd:
         8e:05:f3:4a:5c:ba:0d:47:ce:27:20:c1:01:b4:aa:95:59:25:
         11:31:ad:0d:5f:8e:44:b6:72:cb:cb:15:a7:da:88:30:7d:f4:
         b1:64:b7:11:bf:2c:b8:90:b9:fe:58:d2:91:df:0f:ff:03:86:
         94:6f:d5:d5:41:1e:02:db:f7:e3:c0:7d:d9:f6:77:d5:56:c8:
         8a:ff:31:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:17 2025 by rpki-client