Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          1gKfZFCu9T18KogGyb97ocfSIes+4A6NZdya4fWkDxw=
Subject key identifier:   1B:A3:DB:D9:3B:F5:63:29:FE:8F:59:3D:F7:74:C1:15:98:61:58:12
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       0198D65F3049B5C9F888372E7281DA62E96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          15DD
Signing time:             Sat 23 Aug 2025 10:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:19 +0000
Files and hashes:         1: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: VQGV2mQleZ+eZy1AxWQhAqIA9W+r2XV9Sgm80twDRIg=)
                          2: z9zEGi_XQqptGezSebT8w5b6aS0.roa (hash: z9ugxBDlyl3BhzVIONVnCcdUfAwyBcjvQs6vKwlWW+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:30:49:b5:c9:f8:88:37:2e:72:81:da:62:e9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Aug 23 10:00:19 2025 GMT
            Not After : Aug 24 10:00:19 2025 GMT
        Subject: CN=1ba3dbd93bf56329fe8f593df774c11598615812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:76:27:84:ca:24:f0:c8:57:6a:65:d8:4c:
                    27:7f:f5:3e:11:7f:b1:43:78:83:b4:62:34:c7:99:
                    3d:1a:51:30:c7:31:ef:df:0f:d3:db:05:a8:7f:ae:
                    f0:6a:a4:65:bf:31:fc:f7:c2:c7:db:e6:f5:10:85:
                    ec:8d:c9:5a:66:7d:f3:5a:1c:44:dc:fd:07:73:e1:
                    d3:2e:50:bb:9f:57:5a:a3:8d:e2:83:9c:d4:72:87:
                    a4:c7:12:f8:c3:20:ed:70:14:df:de:e4:22:1a:3b:
                    d9:93:48:b3:ce:85:39:4e:e2:09:ad:84:fa:5e:2f:
                    f1:8e:7d:01:f4:c8:06:b3:f8:82:e9:ad:bd:e6:9c:
                    2f:6a:1a:86:e7:0d:85:10:85:00:45:fc:4f:bb:cb:
                    3b:09:d8:0d:85:e4:d4:88:6c:ca:0a:34:8b:2f:22:
                    ea:3f:af:a3:37:93:dc:18:97:2e:f5:5e:c6:d6:66:
                    a4:33:83:ae:e9:50:fa:a6:ac:00:44:2b:95:a9:22:
                    f2:1c:ae:e2:0a:b2:09:25:79:21:c5:bc:a2:b5:e5:
                    97:ac:58:ec:a7:ab:71:5d:3c:f2:70:84:fd:23:80:
                    4e:b9:a5:a8:2c:ca:63:2f:c6:a4:38:0a:06:f8:5b:
                    60:b2:96:ea:85:0c:a9:49:ae:9e:6f:d2:8e:77:fd:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:DB:D9:3B:F5:63:29:FE:8F:59:3D:F7:74:C1:15:98:61:58:12
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:d4:34:8c:d6:a9:26:d0:7c:3d:20:5d:4d:0c:b5:06:cd:
         4b:ad:e0:37:86:e4:d0:09:8e:33:59:78:8a:eb:4d:eb:40:23:
         c1:89:6f:0d:99:5c:ad:c1:26:e6:96:fc:19:38:43:74:d0:ee:
         52:b0:c2:76:e0:7a:dd:83:3a:7e:91:e4:8f:3e:e0:39:d9:d9:
         51:9e:f8:32:f7:a9:ca:a1:03:d0:13:e7:ca:86:25:ee:0d:9c:
         32:70:54:58:70:be:fd:97:b4:49:31:d6:37:f2:ce:5d:df:f2:
         3f:bf:da:06:d4:94:a2:a4:39:a7:8d:a4:94:91:a6:47:56:32:
         11:b8:e9:2b:3d:42:8f:a4:cd:ee:47:1a:42:1e:f0:5f:67:f6:
         0d:f0:bb:7d:3a:1e:ab:7b:df:18:71:66:96:fc:2d:f1:a0:6f:
         12:22:12:bf:1c:13:92:dd:aa:7b:cd:af:15:3a:6e:6b:01:33:
         b0:ff:da:4c:10:58:57:5a:0d:df:82:7a:d6:ba:18:0d:7b:7a:
         a9:07:d4:06:5f:27:d8:22:41:12:b6:71:24:77:95:aa:08:71:
         8f:a3:e9:66:89:46:e4:0c:b1:f0:18:40:9d:6c:d3:88:db:45:
         bc:e6:fa:bb:35:60:21:ea:20:be:05:21:21:1e:43:f8:60:aa:
         ca:cc:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:50 2025 by rpki-client