Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File:                     yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier:          pBwFH5gdjepz1GrQ79k9rKAykwlIHGPUwtHiUHnxQIw=
Subject key identifier:   27:25:13:D9:95:9A:38:3C:C3:C3:D5:7F:3D:86:4B:78:7F:2C:C3:53
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer:       /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial:       0198D850FF00CBB45A1EC07CB6B0F0F12A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 19:04:03 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:03 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:03 +0000
Files and hashes:         1: NUVu2dR1iocqmPEQ_D2e-q6eSn8.roa (hash: 1hCazZpKjVTtjQVFUWpkmXqPQOre2tDQ3dmWvgeOvfo=)
                          2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: p4kb/CLM/YiZOHvNCoE+z+s1P4krCUkWmGwB0RmNgRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:ff:00:cb:b4:5a:1e:c0:7c:b6:b0:f0:f1:2a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
        Validity
            Not Before: Aug 23 19:04:03 2025 GMT
            Not After : Aug 24 19:04:03 2025 GMT
        Subject: CN=272513d9959a383cc3c3d57f3d864b787f2cc353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:74:06:8e:c0:08:91:21:fb:a0:e2:f8:84:
                    31:6a:a0:d5:7d:a9:d2:9f:17:73:e3:ea:71:76:7f:
                    c1:e6:a8:92:97:bf:75:66:56:ea:73:4f:3b:b3:8d:
                    06:9e:5c:de:38:d1:2c:2d:12:52:e1:35:34:c7:d1:
                    c3:dd:6f:c9:d5:50:56:2a:a4:06:91:30:32:af:87:
                    b5:f0:fc:f3:13:a7:0a:03:86:a4:9e:a3:7c:4d:9c:
                    38:f9:c3:30:c1:0a:9d:84:15:59:ca:12:e8:36:e9:
                    9b:3b:93:d6:c7:94:e9:e5:09:42:17:df:9c:16:49:
                    90:8e:05:41:32:fe:60:67:c1:4c:cb:10:cc:e2:a8:
                    4e:db:69:85:4a:54:4b:d4:8c:4e:3b:94:c6:98:74:
                    1b:25:22:dd:54:69:47:ee:a6:28:f2:91:8d:8e:f5:
                    1c:f7:fd:c2:da:34:1f:31:4b:c8:e8:b5:f2:c0:fd:
                    70:5c:78:b3:7b:a7:b4:bb:d0:e7:3f:22:87:8b:73:
                    82:b9:09:fc:dd:ca:e9:13:e3:e3:ac:48:46:6f:44:
                    27:ee:35:ba:bb:c1:1c:38:f9:f6:dc:27:ff:fa:1f:
                    29:93:67:c6:a3:08:ea:05:ff:f8:6b:b2:b4:a1:1d:
                    a8:8e:dc:a6:49:52:8f:93:80:ab:2d:9b:38:bc:bc:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:13:D9:95:9A:38:3C:C3:C3:D5:7F:3D:86:4B:78:7F:2C:C3:53
            X509v3 Authority Key Identifier:
                keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9e:80:ca:67:c0:6b:af:a7:93:d8:e5:62:b1:57:a3:54:01:
         06:51:e9:37:91:2f:52:dd:03:c7:27:7f:80:6c:b4:71:d1:ca:
         26:71:c4:e9:c3:bc:98:bf:de:fa:c3:22:2b:bf:bb:51:f5:dc:
         78:a7:12:76:e9:b2:9a:16:cd:2d:21:f2:97:a2:de:24:59:b2:
         65:70:9b:8b:5f:c0:01:98:d2:27:f9:ae:1f:80:06:af:d4:47:
         7f:a2:4d:aa:3c:b0:1b:c7:6f:72:ab:ad:57:6a:42:71:69:62:
         07:ee:fd:98:63:27:19:76:7c:17:61:ec:3a:dd:19:f4:2c:c7:
         35:bb:f4:a4:d7:0b:15:b7:c0:34:93:db:2a:ca:0b:fa:95:1c:
         8a:d0:74:9c:2c:85:a9:80:74:8e:da:26:bb:51:f5:07:b6:74:
         cd:95:fe:c0:2c:c6:7e:a6:6b:0d:d5:1f:a7:2d:00:45:c5:d1:
         0e:be:bd:5d:d8:83:e5:7b:79:08:b9:25:a1:32:fe:a1:fa:09:
         31:e6:a5:52:dc:c8:78:8e:34:56:7f:61:8a:d7:14:7d:a8:46:
         03:4b:cf:41:d6:3a:ea:8f:93:8e:d1:c0:76:22:11:bf:d9:ca:
         11:a4:38:f6:a1:87:b4:32:43:2c:30:c2:50:44:84:0e:30:2e:
         8b:83:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:54 2025 by rpki-client