Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          5Q4yBSLSMhh436MQHXWO91u7r14h46Y5sIn+As1MNNE=
Subject key identifier:   A2:5D:5E:DA:A9:5E:A2:F4:7D:9A:73:E0:BA:EA:73:02:B9:4C:E4:77
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       0198D5BB9F0BD811E2342C37327B8CA3AA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1259
Signing time:             Sat 23 Aug 2025 07:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:39 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
                          3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
                          4: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          5: gu6tT7UFC6FmYiSvKO6wxYLbsHc.roa (hash: 33W9F+bpX2oF1GIOeMA/5dpyW1er0qfORrvZ4OzY3Zc=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: y3ydozBuBzdyXXzxCyw6W3FoqioGiWZJQUfmY/KnuWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:9f:0b:d8:11:e2:34:2c:37:32:7b:8c:a3:aa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Aug 23 07:01:39 2025 GMT
            Not After : Aug 24 07:01:39 2025 GMT
        Subject: CN=a25d5edaa95ea2f47d9a73e0baea7302b94ce477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:34:1e:23:66:09:9e:1a:d5:62:36:6d:a4:1c:
                    7a:04:d0:3d:50:aa:65:bc:57:96:4c:d2:6a:b0:03:
                    96:64:15:8b:f8:02:26:10:2b:98:17:b6:e3:50:04:
                    42:ac:91:20:95:f6:8e:57:9a:3d:5e:f0:3c:52:4e:
                    24:7d:1b:d2:f8:cc:61:f2:ea:2a:5f:a5:24:95:20:
                    33:56:21:2d:e8:d9:af:b8:e3:1f:89:0c:d3:1c:c9:
                    02:f7:2c:fb:4a:95:35:de:69:fa:fc:1a:3a:bd:28:
                    8c:da:cf:d9:d7:09:47:43:7c:18:e0:03:46:b3:76:
                    5b:ca:4a:8b:3f:4f:79:9c:5f:5b:40:4f:72:72:52:
                    dd:d8:b7:4d:ec:92:fa:d4:6b:78:00:bc:f9:e8:ec:
                    35:88:37:5a:95:4c:b7:5c:1e:cc:a8:3d:1f:84:5b:
                    94:11:e4:2d:b8:51:51:46:18:38:49:14:9b:c0:58:
                    d9:be:66:b3:1c:27:cf:ee:e6:97:38:d1:b6:8a:83:
                    40:40:98:50:f3:77:90:0a:cd:c8:ae:3c:3e:fb:11:
                    62:66:52:9c:bf:4b:62:4b:5a:5c:d7:a8:81:f9:55:
                    96:43:d7:f8:5e:66:05:24:7f:12:c1:54:da:8d:24:
                    29:a2:bc:be:b7:ff:d6:8a:93:8f:fc:6b:b9:6d:07:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:5E:DA:A9:5E:A2:F4:7D:9A:73:E0:BA:EA:73:02:B9:4C:E4:77
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:7d:aa:e7:16:6b:2f:4b:1c:b8:83:58:ab:9b:b3:41:e5:
         46:13:8c:ec:a5:22:62:81:65:5c:c1:9e:58:2a:b7:1f:d1:8a:
         fe:ef:89:fc:d7:86:59:61:bf:4a:a6:f1:29:cf:6a:f6:ea:0c:
         51:8a:d8:26:24:09:2c:99:d8:ce:db:de:73:be:bd:db:71:5a:
         30:da:90:b0:b7:85:61:7f:2b:52:ce:11:ef:89:06:b3:0d:2f:
         98:9f:bf:c1:c9:64:10:97:17:39:45:2c:71:18:c2:32:31:a8:
         19:0e:fb:57:d4:ee:21:60:f8:45:26:5b:2a:d6:96:e6:2b:f7:
         e1:f3:3b:3d:74:12:9e:6a:18:ed:cd:47:20:71:89:3b:ea:19:
         82:c3:e9:f3:55:86:2c:75:f8:79:43:dc:8f:0a:0f:63:3d:76:
         e6:f8:33:e0:e7:bd:f3:db:b5:3e:31:61:da:d5:c8:2d:5d:15:
         b8:a6:47:93:28:63:17:d0:bb:15:e9:21:d9:a0:e4:60:66:af:
         e5:f2:36:f6:f8:d2:aa:78:7b:e1:89:1d:73:98:6e:8a:12:fb:
         78:46:db:e5:da:6e:85:33:99:b8:62:66:de:ab:c5:c4:b6:3d:
         1f:f7:04:a0:64:47:1d:cb:6b:0c:b0:21:71:fe:7f:e0:0e:14:
         d5:f6:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:59 2025 by rpki-client