Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          GS3tVZgrmLkqIeInae3dHMh05xCv8Th/gYqqqRd05AI=
Subject key identifier:   2D:2C:E7:49:B8:75:7E:5B:82:66:95:6D:28:07:F7:01:19:DE:91:22
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       0198D69830244763FF50AA526B7F49BDBF30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 11:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:34 +0000
Files and hashes:         1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: tDvTHOc+HQMVSAH5vwsh5cFiCIm/9H+OkbPLoNfRb2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:30:24:47:63:ff:50:aa:52:6b:7f:49:bd:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: Aug 23 11:02:34 2025 GMT
            Not After : Aug 24 11:02:34 2025 GMT
        Subject: CN=2d2ce749b8757e5b8266956d2807f70119de9122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:26:78:dd:f1:9f:38:0d:48:cd:6d:d6:75:
                    e4:24:ef:61:cb:6f:d8:39:ef:9f:fd:71:c3:92:cd:
                    10:44:46:da:e3:aa:74:89:db:6d:29:51:38:bd:d1:
                    20:80:f0:7d:ef:d1:76:da:6c:28:85:c7:bd:98:5a:
                    eb:21:0d:19:aa:cc:8d:30:90:de:ee:9d:c6:68:05:
                    df:24:a6:12:8b:10:5a:8b:ef:79:30:e4:8c:1d:40:
                    bf:dd:eb:65:cb:a0:3d:16:2a:4e:c4:f0:55:5c:e9:
                    50:ad:8f:c5:1f:ea:92:44:ea:a6:5a:33:a7:29:6f:
                    37:22:4a:d3:6c:1e:ad:fa:c0:19:a9:2f:b0:88:f4:
                    00:b9:c7:f1:f6:2c:f5:43:d6:bd:55:5c:8a:9e:0b:
                    c0:63:79:ce:a3:64:f3:b4:a1:81:3c:f3:27:92:fe:
                    8c:84:99:ca:95:05:31:f1:52:53:fe:04:64:c0:b5:
                    23:5e:a4:6a:34:ad:a1:e2:ce:e4:df:87:95:42:c5:
                    2d:5c:ea:bd:f7:c1:e4:bc:4a:3c:c1:6e:2c:65:62:
                    33:28:db:e2:5d:8a:80:f6:09:03:45:e1:85:dd:22:
                    ac:24:4a:86:71:d7:1c:d6:26:33:41:f8:d0:f2:af:
                    23:67:f3:51:bb:d1:f7:2a:35:15:e2:03:a5:7b:8e:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:E7:49:B8:75:7E:5B:82:66:95:6D:28:07:F7:01:19:DE:91:22
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:31:34:ae:9e:7f:39:82:bf:b5:00:9d:47:f8:5f:95:c7:
         f8:2a:f4:25:fb:42:a5:61:94:f9:85:22:34:76:34:95:74:aa:
         c8:12:8e:91:7e:32:21:9e:40:9c:57:ea:fd:19:9c:51:85:3c:
         7d:36:3d:1c:1a:6b:c3:75:2a:a6:28:96:7b:a0:9a:bd:47:02:
         81:1b:17:af:bb:26:d6:20:0e:ef:d7:70:f3:7c:b3:e3:07:83:
         7b:ad:c2:b1:7f:cf:e1:d5:31:b6:bf:26:49:a2:f7:5b:c7:ac:
         4c:8c:44:28:eb:5a:1f:79:65:25:05:38:ec:07:67:33:0c:41:
         ad:b6:0f:20:37:2f:4c:b5:ec:c0:7f:88:b3:d1:ab:18:f9:01:
         02:ec:a5:4c:7d:8d:ff:eb:d2:d7:72:21:e6:aa:e6:93:a6:9e:
         17:bb:86:1a:9c:ee:79:2e:da:b1:8b:13:34:ff:3b:aa:3c:d0:
         3a:84:93:91:10:85:bd:30:cc:9c:c1:94:6e:3e:9f:4e:bc:d2:
         7a:ed:aa:77:17:6f:af:d9:42:16:0f:2e:28:63:e3:ac:9d:e1:
         73:c8:3a:ea:a0:06:3c:69:cc:48:4c:64:f5:bc:34:9d:9a:c4:
         6f:5f:4b:35:bb:0e:e9:69:b9:e1:a3:28:ec:7e:23:7f:95:4f:
         c6:21:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:29 2025 by rpki-client