Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File:                     Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier:          D4LCCmLcmDZwxdetouQnZLes7QdLrVj+YhDIjcyKHeg=
Subject key identifier:   CD:B0:75:1F:B8:09:63:17:92:C9:99:28:52:76:D9:DD:3A:E9:E4:E8
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer:       /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial:       0198D4DFF75E5E67B52EF0D13BB9F0F6DD85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:44 +0000
Files and hashes:         1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
                          2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: lqCnPlsbJMh2y4UlzYdU8RCKGIUMipndaxz7pz4O+wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:f7:5e:5e:67:b5:2e:f0:d1:3b:b9:f0:f6:dd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
        Validity
            Not Before: Aug 23 03:01:44 2025 GMT
            Not After : Aug 24 03:01:44 2025 GMT
        Subject: CN=cdb0751fb809631792c999285276d9dd3ae9e4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:07:eb:cf:46:0c:4f:d4:be:b5:bf:e8:40:
                    43:1c:ff:bd:e2:43:99:8d:f9:17:97:cc:9f:c7:48:
                    9c:1e:e5:24:90:b3:ca:b0:22:7d:53:02:50:0b:a3:
                    8e:68:cb:8e:8d:7a:a0:88:21:f4:ff:fb:fb:ae:92:
                    8f:dd:01:3a:d2:0d:13:e6:fd:3a:8c:15:14:d9:70:
                    c9:47:28:8f:23:8a:2e:cd:35:de:70:c2:78:1e:db:
                    13:5e:3a:6b:84:70:41:ab:e1:0f:8b:18:bc:7b:d6:
                    3f:fd:f9:73:7c:21:d7:73:9f:68:0b:d3:d7:59:c6:
                    95:5c:25:53:51:d0:e2:51:61:2e:7f:86:57:0e:2c:
                    01:68:29:92:14:5c:56:44:90:f8:e6:1c:be:15:79:
                    de:c9:dd:90:62:18:0a:b1:79:4f:b2:63:8a:29:33:
                    ba:54:12:02:61:ae:fd:b2:8c:02:3a:3d:ff:37:19:
                    58:06:19:d4:3f:e1:61:d1:83:92:9a:d6:75:b6:11:
                    ab:49:34:39:a9:6c:fc:a8:7c:10:87:9f:57:01:4b:
                    24:a6:4c:3d:de:54:9c:12:71:5d:c1:81:ba:d1:12:
                    2f:eb:67:34:2b:24:18:75:8d:a6:b7:da:ee:ff:94:
                    11:fb:7b:75:b0:97:d8:77:be:8e:4d:00:f1:9e:b0:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B0:75:1F:B8:09:63:17:92:C9:99:28:52:76:D9:DD:3A:E9:E4:E8
            X509v3 Authority Key Identifier:
                keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:26:84:12:38:40:f5:23:bb:29:9a:29:5a:94:00:cb:de:86:
         70:8c:de:a2:9a:98:0d:34:54:5b:79:70:14:6e:70:69:09:b8:
         28:65:df:98:7d:ce:29:b1:5c:be:c7:41:90:8c:0d:2b:e0:70:
         6e:ac:23:c2:7e:0c:a7:c8:3a:3a:46:78:0b:6c:ca:53:6b:d3:
         a6:59:27:0d:79:da:23:96:61:42:d5:ff:d2:95:ab:73:8e:71:
         3e:7c:26:a9:18:87:15:64:cc:59:a9:ff:d3:36:02:b1:a7:07:
         83:44:02:70:fb:00:14:65:f9:99:31:00:bb:52:51:4a:58:d0:
         df:33:0f:05:8c:ce:0f:ee:bf:5d:62:ed:ee:65:4b:8b:64:1c:
         e7:41:8b:47:42:13:db:74:bd:c0:9f:15:ca:2e:5c:7b:c6:41:
         c7:d7:9f:85:7a:2a:58:72:76:89:ab:38:b7:2f:5a:d3:36:60:
         49:11:d4:cc:73:d4:2b:d0:46:d4:00:8b:9f:ab:68:d4:55:de:
         1d:a7:fc:85:76:fe:37:6d:2a:66:60:a3:1b:52:1d:55:26:6f:
         7b:fc:dd:84:a4:b4:8b:eb:aa:eb:ed:00:c4:12:94:81:36:bb:
         9c:64:8f:19:bd:a1:b1:5e:7e:99:cc:f9:e8:52:43:38:5b:c8:
         2e:a2:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:26 2025 by rpki-client