Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
File:                     yMLHMUWTBCz3QhD38DvnEGwiT4k.mft (raw, json)
Hash identifier:          MbAqY7stUpg7hnYsjAL+6D1ShL1WgN64LCfhOudmCRc=
Subject key identifier:   92:F3:87:F7:CF:1E:93:14:5D:50:E9:DA:E3:C0:F5:BF:C3:47:D3:3C
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       0198D698636C7E5015D5B31C439DDFB23783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
Manifest number:          1454
Signing time:             Sat 23 Aug 2025 11:02:47 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:47 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:47 +0000
Files and hashes:         1: 3dzOq8G9IRlpRN6VYAesJxFCM9I.roa (hash: pZlE7f/kxQT336UtrvzPnURvz6UI7VQoJaImOOVWpDM=)
                          2: JJmF9idPFAXWWPX9AjfEMsS8Ozk.roa (hash: Z6lxpjHZf+bFBTA5z2r8BCssBYWOfAe+nD+SW+UaYNE=)
                          3: YIJ2Q4Qz_oqoPZT1pP6ZmbNImuw.roa (hash: rwfSsDFI+XR6+eARP8r7vKDq4E96cyyI5p0FkLq3uMA=)
                          4: _RcJWBC9z2DoyJEEVJqiJ3iNmSY.roa (hash: shwbQcS4UjqPIXlBcN1Jjj6/KYNyV5tzzIShWjZk6kQ=)
                          5: nuCFwAqyzaBDOFqPTOr9WxwYvF0.roa (hash: s0EEOYTzU+K4DwXB/HLNvSrguhiOGINJ5MGi2FWEkwk=)
                          6: yMLHMUWTBCz3QhD38DvnEGwiT4k.crl (hash: SDcrw0GajxEMZ38yo06JwaoEb0DTfj0DAGL7bd9barc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:63:6c:7e:50:15:d5:b3:1c:43:9d:df:b2:37:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Aug 23 11:02:47 2025 GMT
            Not After : Aug 24 11:02:47 2025 GMT
        Subject: CN=92f387f7cf1e93145d50e9dae3c0f5bfc347d33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:14:61:da:c6:25:82:a7:dc:2b:08:06:f4:
                    c6:b1:02:fd:b2:5d:68:8e:a2:f2:e4:8c:65:6d:9b:
                    65:5c:be:f1:95:92:90:c1:fc:7e:ec:b7:23:7c:57:
                    27:87:59:68:ed:22:5f:a1:26:7b:e3:85:e9:04:e2:
                    b3:6f:44:ca:4e:1a:1f:1d:37:00:cc:65:85:4e:1f:
                    e9:c1:2a:68:eb:d8:92:38:39:a5:2d:cf:5f:6f:1c:
                    e2:da:63:82:82:39:fd:60:1a:15:b9:94:c9:ad:66:
                    41:45:2d:3d:9f:58:95:a5:e0:ae:ab:b2:0e:82:1e:
                    ad:48:0e:a6:da:fb:02:7f:98:11:69:49:89:f4:9b:
                    22:42:89:3f:3c:f9:8e:3d:41:a7:31:82:28:15:0e:
                    f0:81:73:d1:e5:63:f8:10:50:e9:5c:d5:12:ec:16:
                    fd:a3:b7:3b:73:3f:9f:84:d6:8c:a2:b4:0b:f7:54:
                    0f:86:27:f7:56:6a:02:a2:5a:80:a8:a3:5f:ed:17:
                    2f:01:e9:54:40:08:b9:d1:81:e2:3b:34:18:1d:df:
                    19:75:7a:ca:5c:d9:98:b7:dc:7b:e2:22:4c:bd:00:
                    50:9d:5a:ff:da:d2:6a:d5:02:d1:f5:63:66:cc:c4:
                    83:85:da:c7:22:40:63:6b:d0:21:f3:7c:cb:4c:dd:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:87:F7:CF:1E:93:14:5D:50:E9:DA:E3:C0:F5:BF:C3:47:D3:3C
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:bf:30:38:c2:e1:b2:1f:95:e3:fa:8f:51:5d:d8:b2:c2:2d:
         0b:d0:0a:f2:10:dd:9d:ae:85:4a:da:a9:52:2f:bc:1c:11:5a:
         10:a7:88:dd:e2:73:d7:fb:b0:1c:a4:1f:76:72:ad:8e:58:7a:
         85:ed:40:1c:4c:26:13:86:2a:cc:30:54:89:6b:04:96:b8:5a:
         d1:0e:d2:a5:16:74:1b:c9:80:1b:ac:f5:b9:86:c5:cf:e0:a2:
         cf:35:c3:31:7a:16:8c:1c:f6:30:8a:b1:57:2e:41:fb:c9:23:
         f3:b0:e6:c0:2f:8e:19:64:2d:98:dc:2b:32:0e:1d:ef:a2:4b:
         04:ff:94:57:94:d9:86:07:8e:cf:1a:e7:41:22:68:98:0e:bd:
         87:59:c3:5d:f9:1f:df:b6:8f:23:79:a6:25:21:60:22:48:c8:
         d4:05:4f:a6:a3:76:9a:71:a5:50:dc:28:68:f0:71:3d:00:0f:
         f6:e6:25:89:63:2d:90:ed:6a:b2:ba:22:67:e0:55:16:f9:7c:
         c1:09:38:1c:9b:53:bd:f0:49:a0:d5:e5:d4:8b:62:24:17:76:
         2f:92:26:6f:5c:53:61:52:7e:3d:9b:fd:df:3f:ad:61:59:82:
         c4:c5:da:70:33:39:5b:e4:b8:46:89:e3:e1:8a:92:1d:e1:03:
         bd:5a:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:51 2025 by rpki-client