Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File:                     y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier:          /iABivBrsDR92C+Rqbov9/aKIw6bjTj57bjuJyQcXfU=
Subject key identifier:   50:33:AA:9B:4B:DE:30:D2:FF:A0:57:C5:93:7F:D6:EC:17:8E:E2:A6
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer:       /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial:       0198D69801BA970FEE2C51E0B341D272EB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number:          0778
Signing time:             Sat 23 Aug 2025 11:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:22 +0000
Files and hashes:         1: UP5nddVRXKDFwn0rBo0YDADmUWk.roa (hash: c3q9Feje6DSdFs0M8UM9vMSjOtIoCDA85WxaounA6ns=)
                          2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: gsa/gp85TodnyWq8G2Ahy7AXNMH+74mShv5J+S5kJZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:01:ba:97:0f:ee:2c:51:e0:b3:41:d2:72:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
        Validity
            Not Before: Aug 23 11:02:22 2025 GMT
            Not After : Aug 24 11:02:22 2025 GMT
        Subject: CN=5033aa9b4bde30d2ffa057c5937fd6ec178ee2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3d:ec:1a:08:34:5a:23:c3:bb:ff:51:8f:32:
                    b3:ec:2c:89:f5:66:7f:7e:18:f7:c2:d4:55:f7:e4:
                    aa:14:a9:84:f7:cd:7c:d0:20:ed:c6:04:40:25:cf:
                    64:cd:ec:29:52:28:70:11:e9:2a:9f:c9:12:25:49:
                    6c:59:90:71:fa:e3:13:4c:32:83:b7:85:0e:cf:cc:
                    4b:a3:22:e8:0b:e2:e8:88:b0:2d:10:40:07:5e:04:
                    99:d6:5d:fb:7a:ae:36:b8:cc:85:d0:b5:d8:3d:76:
                    a6:25:05:14:e7:0d:0a:66:47:0b:14:14:a5:3b:9e:
                    5d:96:bd:51:df:fe:ff:b5:b4:12:07:44:b9:bd:75:
                    36:13:dd:f8:29:5f:24:4d:7c:bc:4d:06:25:49:b9:
                    47:0a:b4:cf:d4:b7:b2:90:47:e6:16:76:97:e2:5d:
                    b8:c9:70:03:03:05:26:67:63:46:ee:28:72:b8:20:
                    c2:d0:06:4b:fe:05:82:93:36:94:69:40:8b:bd:36:
                    7f:e8:54:90:4c:73:2e:8c:63:a3:8f:75:c2:e4:04:
                    5d:b1:9a:16:64:76:9b:dc:90:1d:63:f9:bc:b3:14:
                    9f:91:c3:5d:24:e8:3d:4b:07:a6:91:26:2f:29:b9:
                    4f:80:89:3b:16:f8:48:b2:b7:b7:8c:80:a5:b6:63:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:33:AA:9B:4B:DE:30:D2:FF:A0:57:C5:93:7F:D6:EC:17:8E:E2:A6
            X509v3 Authority Key Identifier:
                keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:c7:4b:30:69:a1:0b:24:d3:fd:50:c1:91:03:bd:48:88:
         c4:ae:c5:a6:10:6e:14:77:8c:13:1b:83:4d:94:b1:11:76:4c:
         73:52:dc:9c:4c:19:8a:5f:72:2f:da:79:9d:a2:22:5f:36:f4:
         78:a8:82:d2:0a:bf:06:1b:9f:a4:9a:02:50:7b:c5:dd:0c:18:
         a9:ee:c5:7f:ad:5a:a3:dc:c3:70:c4:38:85:f3:a6:4e:70:fb:
         df:40:43:61:36:07:1f:42:f5:33:22:c1:fb:e1:f2:17:93:93:
         8b:0a:01:1c:6c:3e:9e:4a:8b:49:32:cf:a0:0b:c4:42:57:b8:
         9d:3b:e2:64:97:c9:f2:88:56:14:ea:fd:3d:2a:b6:69:9d:15:
         f7:f3:86:1c:eb:7a:54:16:65:9f:16:32:7a:de:e8:7a:87:2e:
         08:66:a9:23:7e:27:91:84:7a:8c:c0:6e:72:72:77:26:59:f7:
         7d:0c:aa:d6:35:68:37:f1:79:56:b3:22:98:59:ab:b6:ae:30:
         87:6a:05:9a:a5:ec:b8:5f:dc:a4:30:8b:3a:9e:bf:f2:4c:76:
         50:37:2b:9a:b8:cd:76:87:00:56:0d:37:8a:17:f7:33:d7:fd:
         24:69:9d:84:37:e0:68:17:5d:19:34:3b:bc:4b:0d:66:5a:e9:
         a4:2f:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:25 2025 by rpki-client