Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          WCNdSbKd9JBOPh477oQpsxO2Bm34RGcFcEs/+fPSoYk=
Subject key identifier:   58:A0:B5:0D:94:CB:16:22:D9:1C:D9:A5:82:6E:FC:79:B8:27:71:67
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       0198D4740E25B9DBE7562BAF502834476420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          1396
Signing time:             Sat 23 Aug 2025 01:03:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:52 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:52 +0000
Files and hashes:         1: 1-0Y1K8-7iyhXdhoTYDD_MThh3vE.roa (hash: UqK1yASRyJvFv5c4mwnLEN1kbb6bTTjQR+7JRYc/30A=)
                          2: 8ugftUXGOYARk8hNtz_dZIPLHoY.roa (hash: fXuh9GYhE6qY7sn2WSDIqQCBrlOo2zt5TZUsfH3qCOk=)
                          3: MjdKbFiEyBYefwEqDa5k32efH84.roa (hash: yMrvEUe4dfvDGnvXjb6T/gK+z8B3+E50n+nxlmXb8j8=)
                          4: bAetBQfQtIL8HDlRLQtzqRXsmJw.roa (hash: KlLcSQqNQG0Ri5k3fpJMz79RuQ+R0fvjpj0v09+VZkU=)
                          5: wUKEEBhcd6Wo2EvvgdKvd83E2yk.roa (hash: d7ZYvsLRn0MHrjuGbJZLvgzBXdEm7D3EnDGgZUWMXjk=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: ChOYfgyNE+fLGkP9MN61dTl3Oxs08+7OKp18putaLuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0e:25:b9:db:e7:56:2b:af:50:28:34:47:64:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Aug 23 01:03:52 2025 GMT
            Not After : Aug 24 01:03:52 2025 GMT
        Subject: CN=58a0b50d94cb1622d91cd9a5826efc79b8277167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:82:d2:dd:13:5d:6e:a8:85:49:21:d8:1c:
                    02:30:0c:f9:39:67:2a:ae:77:5a:5a:83:7c:76:28:
                    87:10:5d:b1:cd:3e:8d:0f:74:8b:a8:e3:55:aa:63:
                    30:7c:f9:e0:98:ff:2f:9f:5d:e3:3a:df:4d:60:9b:
                    cd:59:5a:97:d9:e1:bd:18:e1:37:54:cc:6b:c0:3b:
                    e1:e3:db:43:4b:18:db:17:ab:65:34:d5:19:f9:6b:
                    4f:2b:ba:ad:e6:d4:a3:a8:e9:b5:30:f7:50:b3:f7:
                    12:b3:0f:51:ea:f1:e1:f1:50:55:74:65:41:b4:c7:
                    d9:58:db:32:3f:84:f8:75:d1:6d:64:e6:e5:9c:94:
                    f5:0d:9d:0f:98:47:e2:7d:3f:bd:84:39:34:07:6a:
                    8b:1a:85:cc:ce:4c:28:bf:e9:90:51:9f:3e:bc:c1:
                    85:f7:71:f5:ad:13:c4:7b:aa:a0:60:64:e4:9d:42:
                    b2:84:04:35:dd:5c:e5:2f:f0:db:92:4f:3d:4f:cf:
                    09:b0:a3:c2:2d:6c:81:26:64:11:0a:1e:a2:9b:b3:
                    a0:89:18:42:d8:97:13:d7:0f:14:41:29:8a:ce:bc:
                    c7:ca:ba:98:77:26:5c:8c:99:f2:92:1e:3c:a1:4f:
                    40:c7:ae:23:d5:ab:e2:44:c1:b7:16:4f:b6:1f:98:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:B5:0D:94:CB:16:22:D9:1C:D9:A5:82:6E:FC:79:B8:27:71:67
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:00:ff:e2:54:3d:7c:ef:dd:49:56:55:fd:c5:74:53:11:05:
         24:9f:6d:3e:68:2f:92:de:be:79:34:fa:2d:9c:29:6b:c0:7e:
         b4:9c:d7:10:68:6a:f5:aa:f4:d0:fd:6d:37:8a:fe:92:51:4e:
         d9:3b:e6:cd:dc:47:94:85:60:51:5b:06:e7:ed:fc:e0:5e:56:
         25:5b:e9:92:1f:9a:af:2e:90:08:70:70:d5:47:3f:6a:06:15:
         07:d4:5a:26:b2:87:4d:ed:5b:39:bb:76:2e:75:f5:8d:ca:1d:
         62:5b:91:c5:a8:ae:c9:6a:f7:59:9a:89:c2:80:ad:23:ab:f9:
         ce:0d:0a:b2:d3:41:65:60:28:55:be:84:95:b0:16:9f:71:43:
         99:fa:a7:b7:b3:c3:c7:a4:7d:23:75:1c:10:56:11:23:15:6e:
         b8:88:3d:c6:93:8c:2b:b3:ed:ce:81:ef:1e:5f:02:46:ad:dc:
         03:a5:ba:24:26:2c:8c:3a:73:0b:ff:35:6f:b8:29:b6:a1:c1:
         be:42:51:31:16:6c:13:64:b9:2c:14:9e:27:e6:d3:b2:28:08:
         74:a3:ca:b7:8d:c8:ba:99:e3:b4:78:ed:40:80:a8:a8:c3:ea:
         ff:4b:cc:e3:7b:cd:75:aa:f2:b2:e3:d1:11:7b:8b:3f:7a:f4:
         5a:cc:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:55 2025 by rpki-client