Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File:                     YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier:          duaT2PrBFdtuAMT9d6rfw7HPIGD9RnImeEAP+n4QJ8E=
Subject key identifier:   69:1A:FE:2E:79:7E:6A:74:B5:D9:F5:B0:95:9A:DF:63:FC:24:95:8A
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer:       /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial:       0198824285ED7ACA546FA0E3AB0929732F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 02:00:54 +0000
Manifest this update:     Thu 07 Aug 2025 02:00:54 +0000
Manifest next update:     Fri 08 Aug 2025 02:00:54 +0000
Files and hashes:         1: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: gXahRwKzcu0eXJL2EScEEEwf5Iqt2ZK7EvN80S7mt8A=)
                          2: lpQpCVUUyuieF-my1hQ69F4PEZk.roa (hash: WA4/OyJVwgJx0ERp2sKecmZzmYmPwtki2xCkuF+SczM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:85:ed:7a:ca:54:6f:a0:e3:ab:09:29:73:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
        Validity
            Not Before: Aug  7 02:00:54 2025 GMT
            Not After : Aug  8 02:00:54 2025 GMT
        Subject: CN=691afe2e797e6a74b5d9f5b0959adf63fc24958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:4f:57:38:4a:7d:92:18:9d:27:4e:1c:0b:
                    b2:9f:58:f8:47:fc:65:2b:b8:0a:c0:2f:e3:bc:6d:
                    e1:4b:e7:d9:40:d3:fb:96:f1:d7:37:a4:59:90:3d:
                    82:35:86:f1:95:d3:b1:20:12:68:2c:ec:5d:bd:6b:
                    52:ed:9c:a3:ef:ac:21:21:81:67:36:e4:8f:62:f3:
                    6b:f8:36:9f:db:8c:5a:21:5f:06:43:3e:b2:98:a5:
                    ab:4c:5a:f1:06:3e:de:8d:50:af:92:9b:2b:e0:36:
                    a3:9b:3f:62:80:b5:c4:97:0a:1d:d8:33:c4:9e:23:
                    95:55:2c:31:ab:07:ce:48:44:86:c9:d9:4f:93:61:
                    74:75:39:ca:df:dd:8c:fe:31:16:91:f2:9f:ee:da:
                    d7:e3:b0:e1:11:57:69:d0:6f:7e:88:89:c7:60:9b:
                    7f:82:1b:9a:65:f8:4c:cb:15:e3:97:52:ed:50:d1:
                    fe:09:3b:35:e7:fd:3d:33:e0:4a:f1:da:3e:3e:23:
                    bc:f9:a1:b8:29:88:f4:f6:a3:c2:50:26:4e:d2:a5:
                    d2:0d:e3:2d:2b:65:fe:ab:26:0b:df:f2:c2:f0:bc:
                    5e:f9:6b:95:c3:c9:88:28:77:5c:61:a3:80:85:c4:
                    71:10:35:9e:0b:33:6d:7c:10:b5:00:47:37:47:ed:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:FE:2E:79:7E:6A:74:B5:D9:F5:B0:95:9A:DF:63:FC:24:95:8A
            X509v3 Authority Key Identifier:
                keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:8d:78:c7:05:41:f4:7e:7d:ed:c2:43:a1:0b:d8:65:7a:
         04:84:dd:62:17:0a:4d:af:d2:c8:83:1c:4e:19:95:c0:7c:3e:
         58:a7:60:65:69:ad:13:15:52:d0:f6:e0:57:aa:2d:3d:92:82:
         f2:1e:dc:25:d7:93:13:e9:8a:05:5a:95:f9:68:52:76:d8:9b:
         38:2b:43:f7:e8:4d:81:4e:a0:11:7c:cc:b6:d2:e9:15:f2:b1:
         50:72:3d:5d:fb:82:f9:ba:95:81:96:e5:05:27:6b:81:f5:04:
         ef:56:b0:09:37:b8:9e:01:79:9c:64:24:06:fe:16:af:14:da:
         ba:c1:e4:9e:30:d4:0f:b7:59:bd:b9:31:fa:03:a5:1d:85:cf:
         5e:f6:fc:ad:6a:85:b0:62:93:b0:b5:11:ad:c8:3d:b1:a0:a9:
         2a:b6:89:19:77:72:a6:ea:e2:82:c0:6e:aa:1a:99:f4:b9:ff:
         57:54:aa:3e:87:55:92:01:94:6e:53:06:6f:75:3e:60:f8:25:
         f0:41:6b:59:31:b4:48:77:3f:59:2f:c5:d1:c8:9e:6a:24:43:
         98:6b:3c:bc:09:b7:18:a1:ed:79:de:13:d5:0f:dc:28:a8:8b:
         33:d7:84:32:1f:28:7f:76:71:42:8b:10:d7:17:ef:c9:c7:c4:
         88:e6:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:04 2025 by rpki-client