Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          IszbJetUWyTMtjjHr3/BakODDBNO73uaeUZLkkuMY9Q=
Subject key identifier:   D3:1F:C2:97:CB:89:57:66:1A:AC:CD:26:3A:A5:EA:8A:50:6D:96:1F
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       0198838CD1EE7B5941B714AD92889608AEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          163D
Signing time:             Thu 07 Aug 2025 08:01:40 +0000
Manifest this update:     Thu 07 Aug 2025 08:01:40 +0000
Manifest next update:     Fri 08 Aug 2025 08:01:40 +0000
Files and hashes:         1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
                          2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
                          3: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
                          4: bsyTV4mp0M80JuvyrafOWZG18O4.roa (hash: 3svBpUiQj+7JWPVd5ZYhgDeFWkfcSU1ir4CWfZSCZU0=)
                          5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: 7fQCNsTfU07sOA/ZQpDwBhSRHlYJ2UhZQQXkmjLaV/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:8c:d1:ee:7b:59:41:b7:14:ad:92:88:96:08:ae:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Aug  7 08:01:40 2025 GMT
            Not After : Aug  8 08:01:40 2025 GMT
        Subject: CN=d31fc297cb8957661aaccd263aa5ea8a506d961f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:66:57:a1:35:42:9d:72:1d:f0:2d:fd:b5:
                    37:09:ff:dd:df:05:19:95:48:9b:7e:44:4c:f1:c4:
                    ba:3a:40:f0:ba:f3:88:44:f9:3c:e2:3f:17:71:d1:
                    e2:66:9d:a2:0a:f2:f9:13:47:45:24:9f:13:e6:9b:
                    88:8d:44:96:cc:6d:46:2e:10:78:5a:56:82:99:8d:
                    95:41:00:f8:3b:95:58:b1:dc:30:1b:df:74:9d:45:
                    5b:87:1c:7d:0c:69:0b:f3:aa:f0:d0:ec:31:de:f3:
                    c4:4d:a4:15:47:7b:0c:3f:0f:cc:7f:e0:cf:96:1c:
                    cf:4c:8f:1b:85:7c:95:2a:22:46:a3:c5:a0:e6:74:
                    b9:e8:d6:41:28:4c:19:4c:9e:46:39:b9:17:be:1c:
                    7f:1d:51:e0:33:91:bf:57:8d:d0:71:b0:19:fa:b6:
                    a8:f6:76:c6:02:51:96:fb:56:94:f3:95:e5:0c:dd:
                    66:13:0a:db:c1:1f:f8:87:d9:11:56:a1:f1:c6:16:
                    2f:13:f6:b8:b4:e2:d5:34:1c:e8:3f:62:cf:19:92:
                    9d:c1:22:4e:24:37:e4:9b:20:81:1f:46:d6:ce:bb:
                    57:55:25:ae:72:81:a2:02:4a:04:cb:a8:c9:40:03:
                    df:b2:17:a5:46:87:c9:73:3c:be:85:a5:6c:29:b4:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:C2:97:CB:89:57:66:1A:AC:CD:26:3A:A5:EA:8A:50:6D:96:1F
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:48:26:0b:e3:f5:45:92:4c:ca:c1:3c:10:a7:53:1f:5e:e7:
         6d:0a:e2:29:b0:37:ab:88:85:77:73:90:37:0a:53:b8:d4:46:
         47:fb:2c:16:ec:7d:e8:08:f8:9a:f5:8a:4c:51:95:f4:b8:cf:
         87:9c:cb:f1:33:94:6c:6a:1d:3b:67:a0:f9:75:ef:3b:7c:05:
         f1:f7:02:c8:7c:42:90:4e:b7:8f:49:ac:bc:d8:6a:b9:1d:0b:
         ef:4e:ab:90:78:16:88:fa:b2:aa:36:6c:ee:86:c7:d7:df:d8:
         a2:ef:9f:b0:8d:99:e9:b4:14:7b:59:0b:39:5c:24:24:00:4c:
         4e:ac:cd:45:c8:6a:07:5c:4e:ff:71:4a:86:2c:e6:4f:cb:48:
         ec:91:fc:56:50:12:52:86:71:ae:73:53:a6:c8:a8:c0:70:07:
         c5:8f:dc:5d:ef:bf:86:79:24:ab:a1:9d:34:71:b9:7b:df:bd:
         43:b5:dd:32:ba:2d:c1:d6:e6:7f:42:fc:2a:52:f3:3b:7a:e6:
         49:0d:a0:f7:a6:77:3f:bf:66:a5:b3:24:4b:5c:62:6f:6f:1f:
         5c:27:04:a6:e3:20:cc:f3:86:5c:22:a2:a1:61:94:07:08:29:
         8d:f2:93:e9:6c:94:91:16:b9:00:72:0f:f0:77:23:00:3e:44:
         68:5a:c0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:19:06 2025 by rpki-client