Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File:                     yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier:          N1yYtn8luEatMe4RoePC6/8D777Lmm5r6XBdppgrqdo=
Subject key identifier:   CD:A5:F2:63:AD:4A:27:B0:D1:C2:F1:E9:6A:4B:BE:B5:13:B1:63:6F
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer:       /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial:       0198D705AD24A031D988F95E9439D2A240FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number:          077E
Signing time:             Sat 23 Aug 2025 13:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:10 +0000
Files and hashes:         1: YSlfWP3DY80Smx0TIqkuPzTOoec.roa (hash: zxri6NDPBUgI6E9l7vT1svBXNo7QAt30+iiVihETiFE=)
                          2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: 6WflIvtr4mN/wWWfcnh3L6sUoJvcBMu0P+Vs9gj1AyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:ad:24:a0:31:d9:88:f9:5e:94:39:d2:a2:40:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
        Validity
            Not Before: Aug 23 13:02:10 2025 GMT
            Not After : Aug 24 13:02:10 2025 GMT
        Subject: CN=cda5f263ad4a27b0d1c2f1e96a4bbeb513b1636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:a3:63:16:ec:c4:98:52:98:9c:a9:89:f8:
                    20:7b:5e:55:a0:9a:aa:64:7b:e7:3a:bb:ff:be:72:
                    25:8d:b7:31:10:0f:78:41:74:00:5a:2a:89:fb:0d:
                    4e:eb:d0:bf:62:76:44:8f:2e:57:fb:9d:a9:a0:8e:
                    6c:82:f3:40:4e:9d:c3:77:72:80:ec:56:e2:a5:c7:
                    37:ad:de:8a:90:91:ef:af:30:13:d1:32:a7:d8:dd:
                    53:91:b1:1d:04:ef:d6:42:e4:4f:27:bb:08:df:3a:
                    74:2f:7d:a2:bc:50:7f:80:af:41:04:45:d5:d2:fa:
                    14:3e:d3:c1:29:d2:78:62:a2:30:97:86:8c:62:6f:
                    07:e9:a6:ed:2a:14:82:a9:9f:da:a8:5e:4e:42:5c:
                    20:f4:60:7c:12:fd:55:f5:60:1f:7d:f3:a8:bf:bd:
                    3a:3d:9c:cb:db:b2:bf:c7:2c:96:92:09:c3:3e:63:
                    dc:f0:9b:fc:30:7c:44:5f:66:f9:58:0e:ed:f3:ca:
                    11:4c:8a:d8:b0:6b:a4:d9:11:46:34:5d:b2:cf:b5:
                    bf:78:2c:76:3b:a9:9c:d7:8e:d7:62:3a:9b:52:a4:
                    97:64:68:50:00:e5:a4:e2:56:14:18:f0:5c:14:a7:
                    82:d0:a0:37:6f:d6:3a:96:1e:08:9a:11:83:f3:7d:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:F2:63:AD:4A:27:B0:D1:C2:F1:E9:6A:4B:BE:B5:13:B1:63:6F
            X509v3 Authority Key Identifier:
                keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:ea:c8:95:bf:93:71:80:e4:fc:3d:8a:17:14:f7:f2:2a:
         6d:42:16:b0:7f:3e:3e:75:b4:ac:99:0a:52:9c:2c:bd:c6:cb:
         51:7b:8b:2e:1a:66:bd:64:52:f2:ac:bb:5f:e8:26:52:1f:da:
         61:fa:50:b0:71:be:5c:34:11:dc:59:32:03:e3:8b:2e:d4:13:
         8d:56:2e:0c:dc:e3:6e:ea:9c:46:2e:08:d5:60:96:89:ae:77:
         6d:90:3c:1f:00:7a:7a:f7:9e:84:26:05:94:03:88:45:29:7c:
         0e:d8:d2:73:89:5a:d0:f1:17:cb:34:c7:2d:bd:4c:fb:5f:99:
         73:3f:ca:e8:24:62:5b:10:6e:aa:73:5c:66:f6:a5:60:73:8a:
         7d:6b:dd:4c:8a:7a:fa:89:eb:c8:52:b9:46:eb:fa:b1:aa:f2:
         f2:74:76:1d:96:ec:b8:c0:4f:9c:0a:a5:30:39:4a:2b:11:f4:
         35:8f:3e:be:7b:44:c5:0b:3f:9c:5e:4b:95:70:30:b9:1a:5e:
         72:e2:63:83:24:56:95:18:d1:ca:65:d5:d1:69:2c:18:71:24:
         27:30:86:78:e6:ed:aa:18:c5:d6:79:b3:12:98:d2:37:f5:14:
         20:6d:4b:15:84:1a:78:32:91:ec:20:8a:ac:b9:2c:3e:50:07:
         8a:66:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:44:06 2025 by rpki-client