Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File:                     1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier:          nwbf6UfcE1Ctb05iYmw4S3tPYyUA2PBp+Dyeh2JxPOg=
Subject key identifier:   11:B1:0F:5E:BE:90:42:F4:2A:75:DF:54:92:EB:A4:08:31:B1:CC:A8
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer:       /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial:       01987B2E1C18797F072CF730BDC305CD762B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 17:01:16 +0000
Manifest this update:     Tue 05 Aug 2025 17:01:16 +0000
Manifest next update:     Wed 06 Aug 2025 17:01:16 +0000
Files and hashes:         1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: H2gNjtZ1yK9uFklbQTbeLUpjGI+H/X1Lm1LnmCPPiI4=)
                          2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2e:1c:18:79:7f:07:2c:f7:30:bd:c3:05:cd:76:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
        Validity
            Not Before: Aug  5 17:01:16 2025 GMT
            Not After : Aug  6 17:01:16 2025 GMT
        Subject: CN=11b10f5ebe9042f42a75df5492eba40831b1cca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:15:38:ec:d3:32:12:3c:4a:10:d6:b0:80:
                    f6:aa:b2:aa:16:bb:5a:95:6d:32:67:2f:fd:eb:32:
                    16:85:1b:63:3d:22:18:e3:82:86:5c:28:e5:03:6f:
                    3b:ac:bb:4c:c9:0a:d8:7c:3c:a7:43:7a:61:be:31:
                    5c:47:25:73:f7:a5:2d:aa:ad:9c:7d:19:58:20:3c:
                    32:09:37:54:4e:03:3b:03:7a:c3:c0:2f:e3:a8:29:
                    1c:18:4c:4b:f9:eb:62:ad:65:46:c1:21:28:c0:c9:
                    3f:c5:ab:f0:68:56:80:57:2f:18:99:68:f3:a7:65:
                    5f:c3:d3:2e:f1:db:1b:8c:b8:ed:ff:62:96:0b:5a:
                    a3:4e:1c:91:2a:06:72:65:a4:f8:e8:6d:2e:5f:fc:
                    3d:49:93:c2:db:9e:91:5c:fb:0c:bc:f1:53:da:85:
                    6b:6d:70:27:ad:76:08:7d:3d:92:e5:a6:c6:60:fc:
                    75:b6:1f:79:05:c5:37:f0:d0:d2:f0:a5:aa:9a:64:
                    4c:d3:1d:c7:59:76:b9:02:22:92:35:2c:f2:82:cc:
                    ea:fe:8a:fc:c3:2f:a9:37:d0:2e:b9:85:e7:89:be:
                    e9:a9:ed:27:12:33:98:7b:47:c6:25:d7:5b:bd:ab:
                    65:05:65:6a:a6:41:ae:6b:bc:10:18:79:e3:66:74:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B1:0F:5E:BE:90:42:F4:2A:75:DF:54:92:EB:A4:08:31:B1:CC:A8
            X509v3 Authority Key Identifier:
                keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:aa:bd:89:80:6d:b6:c7:dd:b3:ca:3f:21:cf:b2:d9:c0:
         38:27:46:cf:51:3f:74:83:5a:a9:34:f7:e6:f2:e7:ef:ab:2b:
         e1:97:59:14:b7:91:8a:40:9a:b9:90:7a:8f:fb:81:65:28:b3:
         bf:7c:db:5d:e6:28:e6:24:05:fc:13:e8:48:c9:cb:4d:2c:c0:
         f9:04:bd:ce:a1:e6:1a:3f:29:1f:d5:b9:1d:09:e6:dc:25:8c:
         d0:23:91:d2:c7:09:cb:87:a2:8c:c0:65:a9:b6:bb:ea:b5:72:
         fe:d4:23:11:04:08:a7:88:b8:eb:18:f9:ce:7d:bf:b2:6b:a9:
         b7:74:3c:44:3a:ba:65:68:d3:65:13:d2:89:85:d1:2b:df:1d:
         69:d2:87:9b:8b:98:84:42:45:59:7b:d1:35:e0:a6:0f:ea:01:
         5a:86:89:c5:e4:16:04:11:47:9e:d8:28:a1:df:34:cc:5d:b7:
         b3:d7:04:fa:04:43:f3:a1:a2:7b:ad:51:7e:f8:aa:75:87:f3:
         41:5a:8e:e5:87:c6:bb:28:0e:07:dd:a2:71:60:50:db:d8:4d:
         5c:6f:2a:e1:f2:bd:15:55:7d:02:5c:16:e2:43:5b:ec:c2:5d:
         6d:0d:c9:40:21:03:23:f8:40:8b:0a:fc:a5:12:43:2c:ad:c4:
         95:bd:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:45 2025 by rpki-client