Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File:                     yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier:          b9qU4KgNCu7IW21PJfE48u+jWrk3oM97cF/X444FZhI=
Subject key identifier:   90:E5:FE:B6:BD:02:82:7B:B1:C2:E4:15:EE:F7:45:C9:6D:87:4C:CA
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer:       /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial:       0198D54E98DF02801293D72ECF9656891BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number:          0865
Signing time:             Sat 23 Aug 2025 05:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:34 +0000
Files and hashes:         1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
                          2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: RwzUjd6u5ep3msBEui4gD+uYwR0YrHgHWFANLU1r3bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:98:df:02:80:12:93:d7:2e:cf:96:56:89:1b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
        Validity
            Not Before: Aug 23 05:02:34 2025 GMT
            Not After : Aug 24 05:02:34 2025 GMT
        Subject: CN=90e5feb6bd02827bb1c2e415eef745c96d874cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:22:ff:b8:83:e2:a2:5e:06:6d:c6:75:58:
                    6d:84:0c:07:59:92:c1:f7:cc:48:d0:47:b6:4c:b1:
                    96:d7:30:a4:1f:f6:22:52:d6:06:c8:32:35:91:b8:
                    65:dd:6d:96:e0:af:6f:21:47:6f:e3:44:e6:7b:51:
                    04:d0:58:12:04:9f:ed:52:ae:ef:6a:a5:fe:f7:29:
                    d9:9f:13:81:a7:49:32:73:12:99:77:6a:8a:17:a2:
                    b6:8b:ce:9b:35:02:9d:ab:5b:aa:1b:57:c0:45:15:
                    a8:4f:e5:3f:03:7b:51:a6:37:e5:cf:b6:48:d6:fc:
                    2c:1c:9d:66:09:bf:cf:ba:7a:f4:3e:40:f9:2a:5f:
                    02:e0:ca:37:15:25:35:50:41:88:27:38:b9:9f:cd:
                    af:9b:96:e0:3e:ac:6e:0f:0a:24:3f:45:64:e7:fb:
                    36:46:04:f9:ad:70:e8:16:f7:da:5c:f3:35:bf:13:
                    83:41:69:d0:27:76:80:44:dc:a4:a3:03:6b:13:bf:
                    95:9c:93:46:43:e3:cd:33:b2:25:7d:bf:c6:22:42:
                    d7:0d:d6:9e:d4:e0:97:da:04:8f:8f:21:47:0d:33:
                    65:48:06:07:78:34:f2:41:9e:ee:f9:55:67:a1:81:
                    73:40:35:9a:8d:49:05:b8:91:40:d0:31:a4:e9:b2:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:FE:B6:BD:02:82:7B:B1:C2:E4:15:EE:F7:45:C9:6D:87:4C:CA
            X509v3 Authority Key Identifier:
                keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:69:90:e3:e5:b5:9b:2b:65:c5:ed:4e:6a:aa:3f:5f:87:
         fe:43:d6:88:28:3c:13:ce:b6:ac:21:2f:cc:91:26:5d:fb:50:
         57:ac:f6:12:14:94:ff:33:45:14:31:30:82:12:ff:c7:91:ac:
         18:16:94:eb:b6:3c:78:49:64:5b:90:76:85:a2:ed:95:c2:9e:
         1b:48:17:3b:4d:a0:cc:77:b3:3c:9c:ea:2c:51:83:0f:5d:e3:
         3d:ea:d5:4c:34:6f:86:f2:60:31:b5:0c:ca:dc:60:a1:4a:6f:
         94:ad:a2:6c:39:e6:2c:4c:cd:9d:18:03:12:d7:23:08:60:9e:
         a9:ac:dd:de:77:c7:c8:b4:c3:c1:62:18:3c:f0:7e:e2:49:de:
         1d:ae:e1:2d:fa:d1:02:36:2c:00:94:e1:29:bc:d3:4b:45:a5:
         9e:2e:c6:d5:d5:42:36:5d:21:57:2c:29:ab:89:c3:dc:35:c2:
         7e:6f:5d:db:b6:7d:72:24:8e:bb:4b:23:f6:96:bc:38:40:da:
         81:85:ce:1a:b9:dd:31:3a:79:06:c2:ce:2e:f4:6b:43:28:41:
         6e:16:7d:3a:df:56:ff:5c:49:18:02:2a:a0:21:a8:34:45:81:
         eb:bf:b4:26:1d:1b:92:0c:5d:31:23:15:f9:c7:43:b4:10:55:
         e2:fb:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:54 2025 by rpki-client