Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File:                     l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier:          1xLZzSboMIQNYCfSPHX6m2nHQpGnfQ0YjprNV2mMPzk=
Subject key identifier:   C0:49:D0:13:52:81:66:3D:6B:FA:3D:C9:5C:C5:B7:F0:CC:43:73:11
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer:       /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial:       01988F90A83806AE998219B710818290DC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number:          0828
Signing time:             Sat 09 Aug 2025 16:01:18 +0000
Manifest this update:     Sat 09 Aug 2025 16:01:18 +0000
Manifest next update:     Sun 10 Aug 2025 16:01:18 +0000
Files and hashes:         1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
                          2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: GefVrOXG4S6gQaR2OJqBWvqms1Dk2hr//FrnU1UnFHA=)
                          3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:a8:38:06:ae:99:82:19:b7:10:81:82:90:dc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
        Validity
            Not Before: Aug  9 16:01:18 2025 GMT
            Not After : Aug 10 16:01:18 2025 GMT
        Subject: CN=c049d0135281663d6bfa3dc95cc5b7f0cc437311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dd:dc:44:25:c6:4c:4b:0c:87:68:a3:53:20:
                    99:59:8b:a9:38:d8:c9:98:7d:b1:51:65:1a:80:f6:
                    d1:ee:13:b2:08:ce:01:c5:2c:ab:60:77:c1:14:15:
                    2e:55:37:83:ac:3c:2e:6e:44:7d:0c:50:14:33:7e:
                    43:04:c1:a0:6f:e7:65:5e:dd:12:1b:85:f1:91:cc:
                    a9:fb:4d:d3:da:8c:01:db:fc:d2:c0:6c:1c:96:a3:
                    02:a0:d1:8d:2d:5d:cb:c8:51:b0:4e:0e:b8:bf:d4:
                    04:85:b9:f6:75:f6:ba:d5:f9:51:e8:93:3b:d7:7e:
                    1d:c8:e9:8e:65:ac:e5:84:10:48:5d:66:09:41:21:
                    7f:63:be:e2:45:0c:a0:b1:46:14:e1:89:5b:f7:a3:
                    bb:1c:87:0b:c7:76:cb:a8:23:e2:25:a7:94:3f:94:
                    ba:eb:d6:21:62:2f:e9:77:3a:9e:d3:de:d5:70:6b:
                    02:0e:57:14:91:38:7d:9e:51:05:9c:bd:00:cb:da:
                    83:04:9a:3b:3c:91:32:8c:74:7d:16:c1:d4:5c:1d:
                    ae:1b:b0:bc:b7:9f:98:ae:25:8d:1f:cf:da:26:e6:
                    f0:0b:7b:28:c7:f3:fe:d3:d2:33:ff:6c:5d:e6:65:
                    cd:e8:01:ea:be:90:6b:82:d2:e5:11:c3:7a:48:85:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:D0:13:52:81:66:3D:6B:FA:3D:C9:5C:C5:B7:F0:CC:43:73:11
            X509v3 Authority Key Identifier:
                keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:a9:4c:9e:98:69:d1:7c:ad:c4:a7:2f:b1:23:14:98:92:
         87:37:53:6f:a3:9b:63:b3:f5:e8:d5:ed:16:b2:6d:5a:5a:56:
         45:49:ce:5a:a4:17:94:21:d7:b0:fb:44:7b:bd:9b:1d:51:34:
         e7:41:3e:ff:95:b3:8f:ac:77:80:a9:42:db:6a:68:a5:4f:cd:
         5c:73:46:56:d8:de:a4:b6:3b:28:16:48:fb:b1:df:dc:72:70:
         db:73:59:1d:7c:2a:fd:e6:e7:69:0b:53:d3:76:77:41:f5:17:
         fe:c7:fb:e4:19:c7:72:ce:47:7d:b8:ea:ee:bb:97:a1:b6:60:
         68:59:1b:b0:6e:df:8f:0c:66:22:b7:8e:84:cb:5b:bc:5f:a4:
         d5:05:5e:6a:de:e9:5a:b3:72:61:99:5f:0a:33:90:77:9f:0d:
         fd:38:6b:97:65:ce:9d:fa:4e:d3:8d:0b:db:9b:d5:bf:72:53:
         8d:1f:30:ce:e6:d6:12:4e:5c:2e:1c:a1:9f:80:d8:66:02:d3:
         e1:2d:89:59:b6:78:a2:cf:f5:b8:cb:b2:ca:5f:eb:02:ca:2b:
         25:20:f2:6a:91:cf:5c:75:4c:e3:c6:62:11:8d:5f:e3:34:c7:
         cd:0f:b2:f5:62:ce:43:21:dd:63:af:ce:63:1d:5f:13:c8:f2:
         e0:ab:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:11 2025 by rpki-client