Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier:          LZnH32SH13axkwFuCsssdSZbnK5bjATJeFSipfdouOc=
Subject key identifier:   12:BC:CF:19:D9:F5:17:6F:E4:C1:87:8F:F9:4E:9D:BB:69:55:67:49
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer:       /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial:       0198D5BC14EFC7C6091FD668D226B69C4C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 07:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:09 +0000
Files and hashes:         1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
                          2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: Wb4AYxTf30zb3XHrQK7l2frCFk7Nv6y274HkcnNUV38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:14:ef:c7:c6:09:1f:d6:68:d2:26:b6:9c:4c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Validity
            Not Before: Aug 23 07:02:09 2025 GMT
            Not After : Aug 24 07:02:09 2025 GMT
        Subject: CN=12bccf19d9f5176fe4c1878ff94e9dbb69556749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:45:76:ce:e7:a7:1c:06:56:04:b6:ee:98:
                    59:9e:3e:48:10:58:f2:da:18:a8:4b:39:20:65:8b:
                    17:8b:3a:23:90:1e:36:cf:e0:ad:27:58:53:41:b9:
                    ad:4d:7e:75:e7:69:a5:12:5f:16:28:4a:09:6e:e7:
                    ac:fe:cb:af:08:9d:ea:98:d5:e1:fc:d6:41:4f:4e:
                    5b:b9:6e:dd:ba:66:7f:08:74:5e:6b:be:ff:7b:17:
                    27:d0:1a:1b:6a:9f:a9:14:d7:a4:f7:99:95:49:6d:
                    a4:fd:88:b5:78:06:59:50:27:ce:70:42:6d:aa:69:
                    b2:1b:03:46:9b:84:75:0f:cd:87:81:8e:8f:4e:8d:
                    52:48:63:4a:8e:5b:2c:b1:89:bf:3d:0b:70:04:94:
                    8b:31:02:5a:56:fe:65:6e:30:87:48:6b:23:f0:66:
                    11:c8:48:6c:86:7e:46:db:2a:7a:20:30:88:20:43:
                    79:fb:cc:b8:fe:ba:37:bb:cd:05:e9:13:e2:eb:e0:
                    7e:25:de:e7:0d:c7:b0:32:23:ff:2e:7c:74:72:e4:
                    1a:e7:24:8a:1f:44:29:ac:b6:72:21:69:67:98:7b:
                    e4:81:56:4a:6f:1d:7a:5f:96:51:bc:f8:db:c4:cf:
                    52:0f:fd:1f:d8:3c:c1:d2:ef:7b:20:ee:39:7a:e5:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:CF:19:D9:F5:17:6F:E4:C1:87:8F:F9:4E:9D:BB:69:55:67:49
            X509v3 Authority Key Identifier:
                keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:4d:8a:1b:8d:52:57:ae:fe:ad:2e:a7:49:8e:20:6c:61:
         a1:d2:f7:23:14:43:80:cd:aa:f4:af:0f:71:a7:79:7a:6f:87:
         5c:41:45:1e:3b:24:6b:aa:e1:31:0e:f0:a2:45:45:c7:f1:b2:
         8f:78:06:51:5e:42:8f:11:56:6d:49:69:27:db:ca:91:77:ed:
         48:b2:02:f0:ab:48:e2:ca:0d:34:78:c9:68:56:7b:97:1c:86:
         10:22:46:9e:98:f9:ff:a0:59:08:9d:df:3a:a5:84:61:62:51:
         00:8d:07:57:24:01:cf:d4:18:5b:b7:32:bb:58:38:96:b7:c8:
         b1:45:c1:81:43:47:e5:5f:27:e5:f7:3f:3c:d6:e9:1e:bc:68:
         16:f6:cc:07:96:34:13:17:c8:43:68:36:e1:c4:a1:ce:70:44:
         6c:99:2c:47:5e:52:bb:6e:fa:66:0a:2d:cb:ed:d0:66:35:56:
         d7:33:26:7b:fc:dd:48:66:01:72:83:a3:e1:ff:18:0b:da:c1:
         a6:e7:c0:b5:a4:d5:de:52:bc:2e:e7:97:81:ed:9c:2d:9b:82:
         20:f8:8c:2f:55:7c:9d:e5:70:1d:25:5f:b0:ad:9e:ca:36:91:
         b3:03:55:6b:01:6a:1f:da:33:f4:11:8f:50:ec:36:0b:28:66:
         ac:d8:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:24 2025 by rpki-client