Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File:                     1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier:          4kbfEF/x8jvBmGAocdbcmXScl8aiRnnPBObkiq4SBV4=
Subject key identifier:   09:A0:35:07:1D:D1:25:CE:7C:FF:8D:6A:80:C0:6E:25:6E:43:FE:C9
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer:       /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial:       0198D5F186B4669F817FA723B1D94082D5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 08:00:32 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:32 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:32 +0000
Files and hashes:         1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: eLB5BvwL3FVsgFZ1HV+mf8GW74/H2aEGlahZhpi3k0c=)
                          2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:86:b4:66:9f:81:7f:a7:23:b1:d9:40:82:d5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
        Validity
            Not Before: Aug 23 08:00:32 2025 GMT
            Not After : Aug 24 08:00:32 2025 GMT
        Subject: CN=09a035071dd125ce7cff8d6a80c06e256e43fec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:e7:72:7a:b6:69:6f:ba:24:54:93:95:f5:
                    a4:6e:1d:05:c7:e8:89:ba:2a:73:20:9d:95:2a:74:
                    9f:d4:dc:64:d5:5a:93:e9:e3:04:b6:b9:be:ae:fc:
                    f4:8d:bf:c3:6d:6a:a7:2b:82:4e:e2:06:bb:21:c7:
                    c1:5e:c3:f3:28:9a:45:cd:da:dc:43:45:2a:42:ba:
                    5f:27:f3:19:7d:38:36:93:77:2c:c4:bd:03:7e:f9:
                    ee:88:10:c5:e9:ff:9e:f3:14:6f:6c:ae:e0:d0:13:
                    49:4f:f1:7d:00:79:04:43:80:3b:a5:42:7a:4b:60:
                    3c:59:cb:fa:6d:44:b4:9d:2b:47:7b:84:b6:4a:75:
                    32:a5:9f:84:04:5d:6b:a2:21:14:eb:53:68:34:f1:
                    67:99:cf:cd:ff:67:44:1e:cc:61:34:19:d1:57:88:
                    25:de:e3:56:71:81:f2:ef:54:cb:6a:49:a4:26:5e:
                    bf:48:99:ee:05:31:0b:c0:4c:28:30:07:46:6a:28:
                    46:d2:47:9b:1e:2e:f6:a0:75:18:5f:fa:c0:87:80:
                    fa:1a:d8:c9:e7:ff:b2:11:ac:04:7c:3b:bc:b3:7f:
                    03:5c:c6:2d:33:fd:7b:81:98:a7:e9:81:9c:f9:95:
                    21:92:ea:88:a4:21:46:89:92:70:cc:d8:ce:2b:73:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:35:07:1D:D1:25:CE:7C:FF:8D:6A:80:C0:6E:25:6E:43:FE:C9
            X509v3 Authority Key Identifier:
                keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:f1:14:93:5b:21:46:ec:ad:1e:7d:d7:11:eb:bc:07:06:
         f1:f2:50:56:12:e1:95:0d:12:1a:8f:77:d4:7e:18:c8:8c:de:
         57:df:62:31:c9:29:a1:4e:2c:a5:a1:0e:4b:46:0f:6f:61:a4:
         96:f2:5d:74:08:ea:5f:1c:ff:6d:13:26:ea:f7:21:b1:ad:9a:
         20:a5:d9:71:0b:5c:b0:4d:19:5a:d5:01:e1:7e:04:3d:86:7c:
         29:57:74:e6:ba:3f:fa:bb:3b:57:bb:d3:09:5a:fc:7b:d6:43:
         da:75:49:40:d9:31:99:be:92:ea:80:87:d2:dd:36:c6:bd:5b:
         8d:1e:9e:b9:83:e0:be:46:77:fc:ff:e0:45:bd:ae:1d:2a:25:
         e8:1b:6d:c5:97:05:f2:7d:3a:d0:ef:f7:e3:65:86:58:5c:0b:
         57:f9:07:e2:b2:00:85:af:0c:40:35:1d:6f:17:e5:80:57:9b:
         6a:c2:75:87:9c:9e:f3:e2:3d:53:ce:82:47:2d:5f:7a:c3:5e:
         55:fc:82:48:8f:97:09:03:69:b9:b9:00:b2:d7:a4:a7:5d:5d:
         12:44:ed:ee:7d:30:44:86:7a:97:4c:40:20:b5:b3:24:ac:c5:
         2c:42:58:f5:33:85:70:5e:67:12:64:f5:1a:d5:eb:84:cc:c9:
         3e:71:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:25 2025 by rpki-client