Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          qJjufHbeOPxeeTXStH9NGgJYbxLbgGvvCIEV7WIZsK4=
Subject key identifier:   F4:74:C8:4C:A9:A4:C4:D2:6E:30:F0:7D:E5:E8:CB:5F:68:40:E0:3E
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       0198D6987D00EC7E37333F83C040781DF48B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1653
Signing time:             Sat 23 Aug 2025 11:02:54 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:54 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:54 +0000
Files and hashes:         1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=)
                          2: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=)
                          3: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=)
                          4: iet7MjdD3tNr9H3e8mAcOix2TP8.roa (hash: ezXufe6PAorgReJqNNieKsjaS0PdS8wnpJWtjRxO3X4=)
                          5: tzsxxq3WmCusza_r9Nk7AWxH7Jk.roa (hash: goqPhfATTY7UUdH4nZlMzNdPQpsyFFgFHBxyoIIk6WA=)
                          6: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 4Gs1CVqgMsOcZW3q0Z1iEo4RRCU8tcIm7nOfL+67cvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:7d:00:ec:7e:37:33:3f:83:c0:40:78:1d:f4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Aug 23 11:02:54 2025 GMT
            Not After : Aug 24 11:02:54 2025 GMT
        Subject: CN=f474c84ca9a4c4d26e30f07de5e8cb5f6840e03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:bc:31:b4:dd:6f:3f:19:8d:16:d4:bf:fb:
                    84:45:2f:07:75:05:39:a2:07:32:6b:92:d8:7c:a6:
                    62:dc:db:24:21:60:f2:80:a4:44:ef:7c:78:d9:df:
                    bd:b6:34:5f:e0:50:d1:b2:39:af:9f:af:f6:f1:3e:
                    d1:39:f6:bc:71:2c:09:c7:cd:fd:ca:13:9e:42:bc:
                    06:f6:d4:a6:b6:b6:cb:88:33:0a:50:93:82:4a:5a:
                    02:1d:6d:65:69:95:eb:84:14:47:26:39:07:35:a4:
                    37:c6:7b:08:fc:74:24:be:f0:b8:59:0f:8f:41:dc:
                    c4:e4:95:62:6e:ef:ef:f3:6d:94:6a:f2:ac:2e:3d:
                    fa:96:3c:ab:41:cb:07:70:51:78:26:e7:2c:40:ad:
                    ba:a8:08:75:0e:63:91:8e:67:20:81:81:ba:f5:20:
                    61:2b:b8:9f:fe:b8:38:2d:db:1d:f9:f1:5c:24:2e:
                    a2:8b:30:98:3c:48:2e:64:b1:d5:de:7c:5d:cb:fa:
                    99:c7:7e:56:a7:67:2c:1c:be:42:ca:60:07:68:05:
                    44:00:99:33:41:25:16:ed:fa:39:4a:19:62:82:be:
                    41:b2:b5:68:13:80:56:93:49:2c:da:4a:c5:94:58:
                    fd:59:01:f3:79:73:18:cc:bd:d1:85:cf:2f:6c:cd:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:C8:4C:A9:A4:C4:D2:6E:30:F0:7D:E5:E8:CB:5F:68:40:E0:3E
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:92:c6:27:da:c2:2d:d5:de:c2:b5:fc:4f:ce:c0:db:d6:31:
         59:2b:1f:ba:4c:88:c8:18:e2:f6:41:e1:38:0e:6f:3a:7a:87:
         2f:78:48:d6:52:fc:95:fc:0d:7a:67:17:01:53:20:34:46:8f:
         76:eb:94:82:03:64:3f:1f:f8:6c:45:54:77:3b:14:fe:de:94:
         fe:a9:c0:39:fc:a9:1b:a8:60:58:bd:ef:96:8d:bb:7a:1c:06:
         6f:6b:2a:9d:36:8d:ca:fa:23:44:f6:30:11:d7:06:80:e4:c9:
         96:56:9e:c8:97:50:02:6e:7a:27:e7:4b:82:ec:21:79:e9:e9:
         8b:5c:b4:fd:1c:47:30:c0:ad:0b:66:09:be:06:60:04:50:39:
         e7:32:ef:37:e7:94:00:b6:e6:3b:69:83:7a:31:ad:0e:56:67:
         a6:31:20:7f:77:d0:e1:e0:c7:3c:da:80:66:12:64:83:23:f6:
         bd:63:55:ef:4a:ea:be:8e:a1:b6:6d:7a:53:9a:38:7e:24:35:
         53:ab:ea:7a:5b:eb:ac:a5:a2:25:fe:fc:24:bf:b5:a7:61:a2:
         ad:06:9d:c6:f0:9c:7c:37:ac:f7:11:bd:53:b5:33:be:f7:9d:
         4f:4d:0d:ed:39:99:0c:b1:0d:ed:29:a6:a6:a2:23:64:4b:37:
         16:a9:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:28 2025 by rpki-client