Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File:                     ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier:          b5QF4Oyi4nahj0k5UzXWCzX4OEzsbNRzrjacEj4posY=
Subject key identifier:   5C:8B:E9:BE:06:4B:93:A0:A0:20:D8:D2:49:F5:12:23:BF:EB:CA:C4
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer:       /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial:       0198D69870AE41B15BFE90618B807323555A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 11:02:51 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:51 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:51 +0000
Files and hashes:         1: BSKyscvQ3nExMPLDsZnzOtDyPn0.roa (hash: 0G/NEbmQBX4xHGs1virHRK4PzlJoNrkOAGXadEBAaoU=)
                          2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: sw+hdmDI9vNG0IPEFTYMFnpzD1vkGkT7okZxJlXeOJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:70:ae:41:b1:5b:fe:90:61:8b:80:73:23:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
        Validity
            Not Before: Aug 23 11:02:51 2025 GMT
            Not After : Aug 24 11:02:51 2025 GMT
        Subject: CN=5c8be9be064b93a0a020d8d249f51223bfebcac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f4:8c:fb:63:ef:90:a2:a4:c0:9b:37:d7:af:
                    87:45:6e:52:cd:cd:cc:f7:db:8d:51:f1:48:6c:10:
                    ec:37:0f:39:c5:76:29:7f:6f:9f:d2:bd:3c:f3:f1:
                    04:19:e5:19:1f:a8:02:a6:d9:15:20:69:d2:ec:96:
                    cc:e2:c4:b6:49:6d:42:f5:5c:9e:6d:1d:24:33:51:
                    de:36:cf:a0:3e:61:ff:5e:48:d0:cb:ec:e7:f3:a0:
                    db:c6:df:cc:39:a2:49:cf:9f:06:b7:93:73:f0:d4:
                    b8:99:ba:db:05:19:f2:f7:19:0e:7c:5c:88:85:79:
                    43:f1:14:f1:b6:5c:0a:68:eb:95:34:e5:d4:02:54:
                    1f:89:93:07:49:f3:86:e8:04:a2:b0:14:4c:67:74:
                    4c:62:02:b5:8e:23:f0:b1:23:30:fe:f4:34:7d:e7:
                    d0:4f:b9:d7:b3:e9:7b:b9:13:19:b3:e1:81:08:76:
                    fb:a6:e2:bd:8f:6a:6b:bb:7c:be:7c:11:1b:86:9e:
                    58:44:85:a5:f3:4b:18:92:7f:24:95:7c:e7:ac:67:
                    f3:ab:9f:ea:e3:2b:54:1b:f3:c8:51:79:d9:1b:d6:
                    58:3a:be:00:b9:30:73:db:35:8b:72:4f:58:bd:a1:
                    06:4d:ad:2d:12:f5:5b:e7:00:ea:04:d0:44:c7:27:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:E9:BE:06:4B:93:A0:A0:20:D8:D2:49:F5:12:23:BF:EB:CA:C4
            X509v3 Authority Key Identifier:
                keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:9e:27:b6:bb:6f:9f:98:81:9d:da:19:4d:87:2d:28:a2:
         76:ec:f2:35:80:32:39:5e:a7:cd:52:92:ce:f5:59:44:dd:18:
         4b:42:97:0b:a3:25:e5:e7:5e:92:27:51:e0:ca:92:23:87:24:
         66:16:80:68:f4:96:6a:b4:dc:43:b2:cb:b5:f3:bb:35:fb:8a:
         dd:6d:f8:9e:8a:b9:c6:50:d3:4c:99:da:8b:72:43:4a:93:69:
         34:71:66:f8:7d:49:1f:91:92:84:5c:9e:da:c7:a8:36:26:75:
         f4:98:30:ac:88:ae:5f:30:e4:56:be:0e:a5:ed:51:92:36:f5:
         8d:30:ba:1a:39:9a:10:18:44:c5:50:af:fc:b7:a6:29:72:2d:
         1d:3f:42:f2:fd:79:73:14:98:1a:db:cf:ae:67:28:1e:42:aa:
         72:31:36:20:d0:23:a3:12:94:b9:71:9b:fd:50:c4:6d:9d:aa:
         ec:35:c1:f9:30:fb:40:b5:12:6d:86:b7:d8:01:b9:51:5a:c2:
         44:a7:1e:02:80:44:7f:e5:8c:e7:f9:f4:e7:76:7a:24:94:07:
         f9:b0:10:39:9b:47:c2:e9:33:c8:59:01:2e:8f:a9:8c:93:63:
         64:93:ca:cf:ee:6a:83:16:2c:f8:5e:ea:42:77:f3:8d:cd:eb:
         a1:07:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:08 2025 by rpki-client