Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File:                     yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier:          pC6g4n9YidG9vypJZ1jub8LdNRsEOKJ6+10yJwUwN0w=
Subject key identifier:   8C:15:95:A1:F1:57:A3:18:FD:92:88:5E:DD:49:37:68:A5:E2:05:C3
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer:       /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial:       01988BB3AA60C03D3F4B4EA109E6DDCC32E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number:          0C51
Signing time:             Fri 08 Aug 2025 22:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:04 +0000
Files and hashes:         1: gZMQxr61w0P4Si-B6lBsVj_b8vM.roa (hash: 3Vc/pW8ygtdQIimX5iqQ/MSW6PLhJ2nbGCIzRJsZshI=)
                          2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: JQGhXU4s4w08FUB7AL4KcjxH6TU0cd6aJwMuw9FUrHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:aa:60:c0:3d:3f:4b:4e:a1:09:e6:dd:cc:32:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
        Validity
            Not Before: Aug  8 22:01:04 2025 GMT
            Not After : Aug  9 22:01:04 2025 GMT
        Subject: CN=8c1595a1f157a318fd92885edd493768a5e205c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:30:98:dd:c0:db:12:e8:ff:5e:da:e7:29:
                    ad:52:dc:8f:f8:84:9f:1b:da:f6:9b:52:ae:dd:42:
                    13:7c:8d:51:7f:15:24:1d:e6:34:a5:39:2a:76:ea:
                    fd:5c:40:be:1d:5f:a0:dd:ce:05:db:e4:55:8c:a9:
                    c3:bc:ad:e1:31:67:94:11:ee:65:d9:f7:d4:7f:6e:
                    00:2a:23:5c:35:b2:f0:52:b8:a2:07:72:28:10:ff:
                    ce:a0:87:d1:9e:e5:f6:66:7d:88:dd:42:75:df:95:
                    f6:a6:79:bf:2a:59:99:25:a2:a4:62:39:4b:ea:8b:
                    21:b0:55:54:87:0f:ca:fd:70:95:d3:4c:72:90:e3:
                    a9:32:9f:6a:87:2d:38:47:e0:bf:f2:e5:ec:fe:5c:
                    ae:fe:d2:12:64:d6:46:e5:a8:91:9e:ab:43:be:6f:
                    72:26:5f:04:23:8c:ad:cd:d6:44:3f:e8:f7:28:5c:
                    92:dc:eb:2d:2d:90:16:4c:f9:8b:ae:39:0a:cf:41:
                    5e:f6:4a:db:ed:26:60:c3:1d:02:07:60:94:63:52:
                    1c:41:c8:52:e8:12:86:af:6d:0a:77:0e:2b:1e:55:
                    c0:b3:9c:a1:6b:98:73:9f:2a:11:71:3d:f7:90:65:
                    b4:ef:2f:c5:a8:44:35:31:70:18:27:b0:36:74:10:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:95:A1:F1:57:A3:18:FD:92:88:5E:DD:49:37:68:A5:E2:05:C3
            X509v3 Authority Key Identifier:
                keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:86:e5:90:b3:03:31:37:1c:32:bf:66:b0:ef:58:55:cc:bc:
         b0:27:34:4b:f1:41:81:21:32:17:aa:d6:4f:e8:7c:3f:b0:bd:
         e0:f3:a5:26:0b:f1:b9:67:17:17:fb:28:62:71:01:31:41:e9:
         90:99:30:a7:9a:a6:6e:00:10:13:23:3d:d2:83:c9:7b:93:9b:
         c1:bb:b4:49:3d:60:f4:2b:4e:15:a2:c9:31:a1:e3:ba:75:51:
         96:04:31:16:ff:96:62:36:f0:cd:35:19:25:39:9b:fc:63:71:
         ab:e9:9c:eb:ad:e9:70:bd:e9:1a:3b:f0:14:35:c6:1f:35:4b:
         9b:d8:1f:69:7b:0c:75:49:d9:f2:d1:1b:e5:86:50:ee:8e:91:
         f6:98:64:53:81:95:58:aa:f7:07:20:0f:95:a0:58:a9:88:86:
         3b:bd:31:2a:bf:32:61:05:d9:13:c2:82:bf:e0:04:33:1a:9a:
         fe:4b:85:d6:db:ec:28:76:c8:d8:bb:ac:85:47:b8:18:aa:68:
         37:87:06:b4:9f:95:da:c8:32:3b:63:7b:f7:f1:62:a1:83:2a:
         2d:6f:e2:93:bb:56:b4:1a:6f:87:d9:c9:59:dd:c0:d9:aa:b3:
         48:63:ff:db:f7:eb:4e:10:18:52:95:2d:2c:2c:51:7d:50:8b:
         79:95:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:49 2025 by rpki-client