Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
File:                     yYra-x8x-YiapHNXkrbj20aTG7k.mft (raw, json)
Hash identifier:          cMjKZUWaqni4+g6nwqKrQgF39AUkEI5x52KFcWAloKM=
Subject key identifier:   83:0A:61:DB:5A:7F:BD:AD:9A:46:E6:EF:C4:8A:A0:2F:B9:A8:2F:93
Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9
Certificate issuer:       /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
Certificate serial:       019879AE0CE47A30C5C33E7F1DA6621B11AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
Manifest number:          011D
Signing time:             Tue 05 Aug 2025 10:01:46 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:46 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:46 +0000
Files and hashes:         1: 39eMlym5-vUY7eWOJGWxfmeXbRY.roa (hash: WY0sOOmZNXOfMNrzfd1Jh0Sr1ckGzWAuxPnTphEkb9w=)
                          2: s2J0JZZ-ObzDtacn5mrd8XtqC34.roa (hash: Y+AIs8qpenHiIXCup80QSbaypa7oPZCeyGun7W4ZSYw=)
                          3: ySMfV76exq091KBkzteS4wbjDRI.roa (hash: yqmRUwariHrpevG/CUduCKeII5YG/LbAiP31WII353g=)
                          4: yYra-x8x-YiapHNXkrbj20aTG7k.crl (hash: 2xXlUdxoyhXW0/6PUp+4BSihIihwjUFBnNeiSzd6nvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:0c:e4:7a:30:c5:c3:3e:7f:1d:a6:62:1b:11:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9
        Validity
            Not Before: Aug  5 10:01:46 2025 GMT
            Not After : Aug  6 10:01:46 2025 GMT
        Subject: CN=830a61db5a7fbdad9a46e6efc48aa02fb9a82f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ba:8f:40:2b:38:62:b2:82:d9:4e:f7:ab:b9:
                    34:a0:1e:bb:9f:3a:6b:bf:81:5e:e4:2b:1a:72:9d:
                    75:bf:32:d4:50:69:c3:b5:ac:8c:73:25:5c:b3:51:
                    87:0a:de:80:7d:df:4c:0e:1e:0d:e4:3a:1b:ea:5b:
                    ee:b2:de:f4:4a:4d:a6:82:09:8e:1b:24:6e:b9:ad:
                    29:9f:fb:86:bf:b7:88:ea:57:5d:62:46:3a:10:1b:
                    e7:01:9c:c5:91:29:d6:3b:58:84:3d:c9:ad:8a:64:
                    fa:bc:99:a7:6f:11:5e:b7:7c:44:b0:50:5a:d3:fd:
                    d9:24:31:5d:8f:5f:d8:7f:28:77:28:91:b9:ef:9a:
                    54:a0:2e:78:9a:af:3d:9f:ff:97:1c:2a:2d:48:f0:
                    4d:00:ca:06:0b:eb:1b:65:5b:0f:c2:6c:aa:f1:64:
                    56:3b:10:41:44:2f:dc:ca:3f:30:55:31:97:d4:35:
                    be:dd:2f:ac:95:87:be:e8:67:36:a2:fa:8b:da:44:
                    0c:5e:7e:68:93:2d:0f:b6:02:0b:33:13:d4:22:4e:
                    b6:7b:f3:92:a1:64:7d:00:ae:f4:69:5d:f8:7f:da:
                    5a:16:2c:a4:47:5b:0c:78:36:16:ee:43:36:0e:ec:
                    bc:e6:3a:8a:3e:76:5f:ba:56:e3:f9:bb:42:a3:bd:
                    09:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:61:DB:5A:7F:BD:AD:9A:46:E6:EF:C4:8A:A0:2F:B9:A8:2F:93
            X509v3 Authority Key Identifier:
                keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:7e:4a:86:08:9d:8b:ea:0e:e0:55:8b:e4:c6:e4:34:86:
         2b:2c:a2:1a:e0:5c:64:28:37:f1:0d:71:9f:8e:3d:f0:22:37:
         56:1b:a2:41:de:ca:b4:ea:db:60:8b:14:1c:60:c2:a9:11:ed:
         7b:e0:88:7f:eb:ba:b7:7a:a5:1d:03:ff:1a:a4:f2:94:f1:ad:
         a5:9c:e2:f7:d3:1f:11:b5:bd:39:3a:6b:4b:61:f6:dc:b4:4c:
         1e:6f:e8:6d:2c:87:af:b4:20:5a:f3:3f:60:33:5b:d0:02:dd:
         77:18:2c:46:53:c4:3b:82:8e:7c:b9:18:de:bb:9b:e2:4f:09:
         59:e6:e8:75:5e:31:13:a3:55:e1:2a:93:71:81:63:8d:6d:98:
         81:ad:46:b5:70:e8:8d:04:93:4b:d4:d8:c9:87:5d:f1:d5:08:
         9d:77:00:2e:17:84:39:41:23:03:b0:e3:9c:ca:c5:37:b4:1c:
         51:6d:e1:32:92:b6:a1:4c:b9:60:b0:65:18:a8:79:5a:64:d7:
         61:e0:26:2b:8f:52:2e:01:cb:89:3f:7e:6c:ea:1b:27:2b:4b:
         ea:68:8e:c6:2c:0b:8c:6e:75:76:42:8e:99:a1:ab:9a:69:6c:
         cf:2e:3e:6c:19:6e:f8:b9:6b:92:ea:42:18:c5:83:59:d2:11:
         bb:f5:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:30 2025 by rpki-client