Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
File:                     YVDKG6-fn2_hPYniZkRwST_mXmU.mft (raw, json)
Hash identifier:          j+avhka2gah4/BsMCB3pnaLbaOh6jZ2HbalyYgBgXVU=
Subject key identifier:   51:71:72:F6:4B:6E:EB:79:20:67:A1:77:C6:9F:24:30:35:A0:79:CA
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Certificate issuer:       /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial:       01988B0F9F7E31B3D2A4CB2885219AAC42D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
Manifest number:          1628
Signing time:             Fri 08 Aug 2025 19:01:53 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:53 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:53 +0000
Files and hashes:         1: K1-fBiboHS-GQ6ErDJdUiH-rY_I.roa (hash: AOJaEckufNSu4V7SdBMyiCpYmSZ+CDZ6Okor58DXN7s=)
                          2: YVDKG6-fn2_hPYniZkRwST_mXmU.crl (hash: wkCu7Ft2luAZPhylovYDSXkCMIYFrNinAufhsHYDTwE=)
                          3: nfREQDaYK_u_RRzhJTauvf2Y8ak.roa (hash: NLnHR9EroQCyhWmQwjRMOzrKCez85XwXecl2W6KaGHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:9f:7e:31:b3:d2:a4:cb:28:85:21:9a:ac:42:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
        Validity
            Not Before: Aug  8 19:01:53 2025 GMT
            Not After : Aug  9 19:01:53 2025 GMT
        Subject: CN=517172f64b6eeb792067a177c69f243035a079ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:3b:08:9f:22:a7:4d:82:d8:e9:79:01:c3:
                    60:c2:26:d7:f8:f6:cd:72:3c:03:c3:83:33:18:14:
                    79:7a:d1:e8:78:4c:7b:c3:97:85:0b:37:0f:35:a0:
                    84:4d:d7:14:12:89:32:8c:21:bb:e0:55:0c:b9:09:
                    ea:1b:54:c4:6d:f8:62:9c:c9:b8:23:52:e4:80:71:
                    dd:07:ab:4c:9b:6f:9b:77:d8:87:19:fe:67:1b:2b:
                    f8:09:2b:5c:ff:74:aa:bc:f9:9b:5b:94:b8:47:7d:
                    c3:bc:d0:3d:72:e7:35:23:d0:0d:5b:c9:72:68:19:
                    53:27:3d:ee:81:17:c4:f9:82:64:56:6c:c2:3f:59:
                    39:74:3a:51:66:15:40:eb:df:86:3a:7c:b2:3b:7e:
                    ed:0d:f8:8d:25:cd:27:3a:f1:73:91:6a:2c:0f:cd:
                    83:e8:b3:a8:63:65:44:b3:58:01:ec:d8:ea:02:b5:
                    57:b7:28:49:e5:90:d8:52:a1:c7:21:43:12:81:62:
                    f2:29:2b:bf:c5:14:38:43:fd:6f:29:78:e1:78:6e:
                    7c:05:31:85:fd:8a:9a:f8:f9:d5:9f:9a:eb:4a:29:
                    91:a7:82:79:a3:39:53:0a:a6:5a:8c:a8:c8:00:ca:
                    a0:96:3f:0b:54:20:da:03:4e:27:b2:74:00:2d:0e:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:72:F6:4B:6E:EB:79:20:67:A1:77:C6:9F:24:30:35:A0:79:CA
            X509v3 Authority Key Identifier:
                keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:81:be:f5:c0:18:48:2d:ca:97:3f:b0:f4:2a:bf:a1:0b:d7:
         23:3b:ac:ae:ec:bd:c4:0c:98:95:83:00:17:61:ff:98:ef:4d:
         fc:63:67:fa:b8:f2:ef:72:46:3c:43:80:78:56:f2:f4:f0:c5:
         8c:35:7d:92:5f:0b:d3:ea:6d:88:a5:d8:55:66:6a:4e:a2:62:
         c6:e0:04:1d:ac:7a:5a:ff:1b:31:04:6d:8b:a5:5e:1d:56:3d:
         2f:94:ec:95:89:fd:14:57:55:04:63:95:74:ab:aa:ba:8a:71:
         99:f9:ea:b4:35:e3:c7:9e:a2:a2:66:f2:46:47:42:2f:0e:6e:
         aa:98:fb:0b:e2:bf:4b:94:19:d5:16:0e:43:98:7a:85:d8:28:
         aa:fd:00:31:e0:aa:cd:32:41:8e:81:c3:8d:2a:fa:fd:36:66:
         df:22:e0:63:ca:23:99:34:63:cf:c7:0c:2f:b1:0e:ba:de:00:
         e2:14:77:ca:37:9e:47:9e:b6:4a:bf:41:8b:a0:26:17:2d:b2:
         8a:0d:0a:27:12:27:b8:58:6c:f6:d6:f9:66:f3:9b:45:72:f6:
         55:54:2f:83:a1:1c:ac:4f:12:6f:9b:c3:90:56:db:97:c7:a4:
         07:ed:e0:5e:6f:10:90:f3:15:e3:4e:02:2f:89:df:cb:0a:44:
         34:03:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:30 2025 by rpki-client