Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
File:                     YIH8-etwqw4f3KwJx_m7XgFMnb0.mft (raw, json)
Hash identifier:          q0IvCYOBnRfrPYdyk+xN/tZsKtP0CyNKP0qrBU/+y38=
Subject key identifier:   33:3C:A2:F4:EA:EA:90:46:E9:69:CC:FB:9C:8A:71:3F:43:15:EB:EC
Authority key identifier: 60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD
Certificate issuer:       /CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
Certificate serial:       0198D54E7E6279C78C29D5A6B957F04C16D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
Manifest number:          0BA4
Signing time:             Sat 23 Aug 2025 05:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:27 +0000
Files and hashes:         1: SCQrnzyM4Bx20DPOMtssZk-Wu68.roa (hash: wtLko9TY7/20VtwY2KqfAs6WX/4oN6rpkwycX+Q3z5I=)
                          2: YIH8-etwqw4f3KwJx_m7XgFMnb0.crl (hash: gMtdAuyqIpih+xS+KWYWk6nsQrhZQ2iE88PgN1qbMds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:7e:62:79:c7:8c:29:d5:a6:b9:57:f0:4c:16:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6081fcf9eb70ab0e1fdcac09c7f9bb5e014c9dbd
        Validity
            Not Before: Aug 23 05:02:27 2025 GMT
            Not After : Aug 24 05:02:27 2025 GMT
        Subject: CN=333ca2f4eaea9046e969ccfb9c8a713f4315ebec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:78:95:39:13:dd:5d:ae:47:32:54:a2:ba:
                    41:3e:f4:d9:fa:e8:af:a9:67:93:df:cb:92:de:85:
                    d2:70:91:49:f5:fa:c8:f6:7c:f6:81:09:e3:20:a4:
                    68:33:11:0a:45:2b:53:ba:1e:ce:22:f3:4a:ae:d6:
                    f8:ca:fc:2e:c4:cb:84:e7:44:72:e5:81:82:c9:ca:
                    f3:fc:1f:bb:9c:8f:a6:7d:75:3d:28:88:b1:ce:e7:
                    09:d5:7f:d0:5d:ad:f7:ae:fb:6b:a0:6f:9c:a1:08:
                    66:81:62:f1:0d:2d:37:f0:a7:58:2b:a3:46:a9:be:
                    62:11:15:c9:68:5d:4c:31:a0:e5:ad:a0:65:55:e9:
                    d7:a8:11:fb:be:c8:19:c2:6d:da:7a:31:65:d3:b5:
                    7d:31:9c:03:e1:fb:5c:31:c5:f7:19:25:84:87:e9:
                    b6:6c:1f:ee:81:2d:69:4b:25:05:58:84:fa:f5:0f:
                    b1:57:75:dc:9b:48:b9:6f:f8:a6:77:3a:42:86:5a:
                    a0:69:79:1a:77:bb:87:40:d6:b1:72:c4:ee:3e:1c:
                    d9:a6:5e:dd:21:5a:b2:2c:3c:67:0c:3c:ed:e6:8b:
                    d3:6b:10:3e:5c:9b:9c:21:3a:59:30:ee:58:8a:7d:
                    a2:28:10:1f:2b:82:6b:bf:a9:79:b5:70:6b:60:17:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3C:A2:F4:EA:EA:90:46:E9:69:CC:FB:9C:8A:71:3F:43:15:EB:EC
            X509v3 Authority Key Identifier:
                keyid:60:81:FC:F9:EB:70:AB:0E:1F:DC:AC:09:C7:F9:BB:5E:01:4C:9D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIH8-etwqw4f3KwJx_m7XgFMnb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ffd1ed-69b1-4932-8fd0-77f9ed1195d5/1/YIH8-etwqw4f3KwJx_m7XgFMnb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fa:c3:97:aa:e9:ed:bb:2a:b8:d9:d7:65:cd:16:be:7b:37:
         a0:78:d5:17:c8:59:dd:6f:9f:ce:49:7c:13:9d:19:a8:ce:ee:
         6e:79:97:0a:3e:c2:9a:23:dc:dd:b1:9c:ce:10:cc:79:a0:4d:
         b3:10:f2:a5:51:0a:21:2d:3b:63:96:9c:17:ee:f7:52:fd:63:
         0c:25:ff:5c:93:82:35:0b:00:ab:4c:9f:54:eb:bf:8f:74:c3:
         00:de:f7:b9:28:93:f4:81:99:37:20:92:64:27:f4:d7:b6:01:
         7d:fe:f1:a7:d2:45:c4:87:31:71:f2:89:c4:8b:71:b5:78:6b:
         6f:8b:2b:68:a1:37:5f:55:f4:29:48:9d:a1:68:b0:0f:e3:c9:
         b8:41:3f:7a:7a:6f:34:91:da:6e:23:d8:be:a0:88:ca:cc:b9:
         81:64:c7:ff:f8:1d:50:d4:4d:9b:d4:94:1d:6b:4d:c8:52:a8:
         f8:10:10:e7:d0:0e:d8:81:e2:fb:38:b6:e2:7d:df:87:cc:52:
         8a:53:ee:01:0f:9e:8a:62:34:d7:c3:59:87:8f:f9:5c:49:ca:
         2f:1e:75:31:2b:37:68:9c:ee:06:f3:41:3c:67:99:b8:1a:8c:
         f5:42:46:76:ff:9f:7d:90:2b:ab:73:d2:c8:bf:03:c8:c4:7c:
         cf:8a:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:39 2025 by rpki-client