Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File:                     yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier:          4JHpephwUpQlbkvQCBJhYQ4lMEMAZn+X3oTNux54mYY=
Subject key identifier:   5C:F5:1E:96:4D:98:46:23:1C:67:68:E9:16:9B:6C:EA:F3:7D:C0:BC
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer:       /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial:       01988BB332F0C3B9544DB17AD7964B1054A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number:          1167
Signing time:             Fri 08 Aug 2025 22:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:33 +0000
Files and hashes:         1: juTNVsKtR118cxI6QcWd767caRM.roa (hash: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=)
                          2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: pyyNppGkPatacYgOf2QbMDodLidjRd9OI6AQCK/IeIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:32:f0:c3:b9:54:4d:b1:7a:d7:96:4b:10:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
        Validity
            Not Before: Aug  8 22:00:33 2025 GMT
            Not After : Aug  9 22:00:33 2025 GMT
        Subject: CN=5cf51e964d9846231c6768e9169b6ceaf37dc0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:dd:bd:d4:5c:d1:e6:5e:cf:ee:1e:5d:d9:
                    b8:9d:af:46:24:bc:40:f1:06:18:0c:f3:c6:24:b1:
                    6e:ad:e5:22:50:3b:53:38:cc:b7:9a:a1:b5:05:0c:
                    d8:7b:28:f2:46:70:d0:8f:ba:6c:27:0f:96:a4:e7:
                    de:7e:41:8c:88:8d:ab:58:80:f9:e8:26:49:e3:2c:
                    52:ef:47:2f:43:74:37:d2:66:e0:c4:24:f4:ac:8d:
                    e5:79:b2:bd:32:fb:26:3c:75:25:14:4f:a2:96:33:
                    61:31:28:33:5c:40:cd:17:20:3e:5b:aa:f4:57:f4:
                    6e:6e:fa:b3:11:61:99:0e:8b:b6:4a:27:d4:35:19:
                    1b:3d:c9:06:8b:b6:d1:3a:6b:c1:3d:e6:97:35:bf:
                    15:37:93:58:8d:61:77:8c:05:bf:e7:b1:59:6c:3e:
                    64:21:8d:db:41:fb:48:a4:7c:b3:5a:6e:b6:c1:e6:
                    2b:e3:39:4b:a4:31:b1:cb:8e:e3:43:07:03:43:2d:
                    ab:7f:13:b8:26:02:77:38:28:b6:71:00:48:80:38:
                    21:e1:da:4f:1e:5a:60:cc:d9:c8:5d:61:71:48:43:
                    67:1f:e3:5a:98:34:aa:1e:da:45:ca:a4:5f:82:46:
                    98:6c:bb:21:ae:66:75:bc:3e:d3:78:f7:88:ab:3b:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F5:1E:96:4D:98:46:23:1C:67:68:E9:16:9B:6C:EA:F3:7D:C0:BC
            X509v3 Authority Key Identifier:
                keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4a:cb:09:56:fc:72:c6:3e:e8:a9:a5:5b:9a:73:11:45:a6:
         b8:5e:46:d6:50:1e:53:cb:a3:d1:7a:23:6a:42:0d:b8:6b:e1:
         b5:24:e9:f6:b6:c5:01:55:12:ce:1c:5e:20:6d:d2:99:47:3b:
         c8:05:a7:de:3d:a4:cb:f2:3b:ce:23:0a:5b:a6:81:e2:cf:3b:
         d9:c7:34:96:57:ce:f5:83:1b:b8:0d:b9:39:4f:26:eb:d1:c1:
         3e:89:08:ae:0a:f9:1d:bd:37:c9:0e:f4:e2:03:cd:65:fd:fa:
         95:e4:4b:e9:b0:ea:6a:a5:66:f8:93:03:7b:f1:9f:21:e4:2d:
         10:f5:0c:68:cb:df:d9:21:ca:b3:fe:71:d8:bc:e9:4a:f5:26:
         30:67:5a:1c:96:30:58:e4:2b:13:20:05:d2:0a:98:9a:52:75:
         96:06:57:ca:e0:ab:5e:75:25:16:65:0d:bf:ba:60:c1:09:f4:
         93:00:5b:c6:82:b2:63:b9:03:5a:17:b4:97:b3:48:f0:c8:7b:
         a6:b9:fd:96:e6:de:68:6d:00:cf:7d:1a:83:12:21:a9:ee:62:
         90:6e:4b:10:83:75:39:44:82:5e:fc:f2:48:66:7a:ce:ee:de:
         7c:a1:33:5a:3c:df:d6:64:a9:88:74:44:76:b1:44:c5:4b:e1:
         b0:33:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:33 2025 by rpki-client