Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          nezTFY6xFT0buAu0pGIkfxp3/ACL3/epODCzGYbNrlI=
Subject key identifier:   1A:9E:9E:5D:67:7F:45:F0:60:2C:18:02:20:92:50:01:AA:24:DE:D1
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       0198D6CCD4CB6AC4E75847FCEECC18A9489D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          07A2
Signing time:             Sat 23 Aug 2025 12:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:04 +0000
Files and hashes:         1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: DX4zuaUqKc//XIUib65uoRNoWDfAmcIIu3NYeGFKpVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:d4:cb:6a:c4:e7:58:47:fc:ee:cc:18:a9:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Aug 23 12:00:04 2025 GMT
            Not After : Aug 24 12:00:04 2025 GMT
        Subject: CN=1a9e9e5d677f45f0602c180220925001aa24ded1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:a8:c5:74:0d:6c:04:38:56:cb:03:78:b6:
                    40:b0:8b:ac:f3:07:f4:89:9d:90:32:81:a9:5f:3a:
                    a6:7d:5e:df:62:8e:68:a5:01:79:bc:07:c8:fd:8e:
                    26:37:ad:8e:8f:53:1d:43:5c:76:86:58:b7:1b:53:
                    40:bf:8a:25:ba:70:ed:b3:90:c0:62:7f:75:db:cc:
                    d9:d8:fa:ed:7a:cd:54:97:db:9d:89:a8:c4:40:b2:
                    81:7e:70:94:2f:8a:8c:80:45:fc:3f:cc:c1:53:96:
                    8b:10:81:2f:cf:3c:b7:99:32:7d:40:a0:2b:53:52:
                    9e:07:1f:41:ea:a7:9f:25:a4:9f:ca:af:40:ef:84:
                    c5:96:f4:3a:80:30:dc:e2:57:14:f2:be:7f:99:d2:
                    55:a7:1c:8a:aa:fd:a7:d7:35:6e:a2:85:f8:0b:82:
                    97:de:cd:12:ea:f2:ec:dc:f7:9d:29:a1:47:91:08:
                    7d:a2:bc:93:d2:32:22:a4:83:34:11:f6:0f:49:0c:
                    b7:d6:1d:d7:2c:e9:41:a0:f4:f4:c6:92:af:2e:77:
                    c5:7b:0e:43:af:93:b8:98:e1:0f:4f:70:bc:73:a9:
                    4d:e7:0b:0d:83:3b:54:0e:52:52:8e:43:30:5e:14:
                    28:39:22:ec:66:c2:15:7d:0a:ef:fb:67:7c:c5:66:
                    f1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9E:9E:5D:67:7F:45:F0:60:2C:18:02:20:92:50:01:AA:24:DE:D1
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:ae:e5:b6:a2:46:1d:a2:3a:f9:41:78:26:85:4a:9e:80:
         0e:12:5c:95:98:f8:de:d0:48:7e:2c:1d:65:0c:c6:b9:45:88:
         15:a1:e3:3d:b6:4e:74:4f:94:78:e2:cb:a2:ce:55:7e:36:dd:
         2c:fe:59:0e:6b:f4:60:08:14:cc:41:fa:c1:64:a5:f0:f6:7f:
         9b:18:3a:ce:a7:f6:e5:9f:04:36:8c:fb:01:aa:ae:8e:d7:47:
         20:22:3e:81:56:8f:b5:3d:c2:eb:c1:57:d2:30:83:52:f2:d3:
         a0:f8:23:b2:2c:c7:84:04:96:0f:6a:8e:2c:89:52:f6:75:f9:
         5d:11:e8:3c:ec:f4:88:f8:bc:94:ec:4f:d9:00:7e:3a:0a:b8:
         08:38:01:46:a3:48:96:31:44:84:cc:66:55:fe:7c:04:40:a2:
         3a:aa:91:be:6b:dd:a6:2f:f4:cb:87:ac:ff:f5:66:d3:63:9e:
         ff:a6:f7:c1:2b:1b:c9:2b:ff:bc:92:f0:36:02:56:19:20:56:
         e7:da:3e:aa:f3:24:60:ec:f2:8f:a4:ef:15:90:e7:e2:49:24:
         63:56:29:57:87:55:6f:db:a6:99:e4:29:c0:b1:4f:e5:f5:7a:
         5f:f6:83:9e:2d:90:7d:79:d0:f3:92:41:ba:4c:e5:b8:bc:b3:
         6a:3a:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:43 2025 by rpki-client