Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File:                     yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier:          W28XUE0MxYgqXVHQrMlyzeMO58cB2VAHLaildhBn18E=
Subject key identifier:   D9:15:0B:73:B7:95:20:CB:40:7A:64:5E:A1:20:1E:AE:73:33:81:70
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer:       /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial:       0198D6607581A947E242D12039B26A6745AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 10:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:42 +0000
Files and hashes:         1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: T8087TRMc2s7ctxjO0FoC8eUb+c9UHpklqigw0mTmFA=)
                          2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:75:81:a9:47:e2:42:d1:20:39:b2:6a:67:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
        Validity
            Not Before: Aug 23 10:01:42 2025 GMT
            Not After : Aug 24 10:01:42 2025 GMT
        Subject: CN=d9150b73b79520cb407a645ea1201eae73338170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:1a:c1:05:2e:57:84:3c:09:08:89:03:c0:
                    1b:b4:a4:dc:be:c0:fc:7e:4d:04:9d:dd:af:a7:81:
                    a5:31:c1:e7:58:7d:d2:ed:11:d0:1e:87:46:6f:6f:
                    6c:ca:e7:f2:47:61:de:62:c8:1c:04:fb:ad:52:dd:
                    f8:d5:dd:6b:69:c7:73:e0:b2:f3:4d:79:b4:ae:b6:
                    3a:95:da:c2:08:76:d3:ad:45:b1:0e:29:32:de:7f:
                    99:17:fb:0e:83:e9:28:67:af:7c:b8:62:f7:90:16:
                    57:86:a2:32:a0:e8:86:5d:0f:84:68:15:ce:5a:a1:
                    00:10:f9:32:b7:04:93:59:1a:40:00:0e:43:8f:db:
                    00:bd:e4:8b:f8:fb:54:e5:ba:1c:31:16:2e:77:b2:
                    70:9a:18:10:33:09:53:81:cd:89:86:ba:89:ab:c6:
                    03:bc:9a:f3:d3:1c:bb:9f:8e:7d:9b:72:79:73:5f:
                    16:f8:f5:54:5b:12:6f:14:55:08:fa:a8:65:2a:bc:
                    48:9c:eb:3d:05:ad:db:fd:57:28:46:aa:44:d6:fa:
                    a1:52:40:72:81:af:7f:84:22:48:b9:a9:38:7c:80:
                    01:10:a1:a3:e4:f2:7a:22:a0:d9:9f:4e:5d:d0:36:
                    c0:9d:7e:5b:8d:6a:86:ed:b9:21:92:71:01:91:57:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:15:0B:73:B7:95:20:CB:40:7A:64:5E:A1:20:1E:AE:73:33:81:70
            X509v3 Authority Key Identifier:
                keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5e:3c:e3:15:5c:a5:15:93:b1:b1:c2:17:81:cc:8f:8f:32:
         9d:1d:9e:c1:eb:08:e7:46:77:15:98:43:bc:98:9b:59:55:5b:
         71:f4:1d:d4:12:82:7a:85:87:45:9c:e7:10:ef:8c:27:6e:63:
         a5:a4:d2:1e:a8:52:15:8f:25:b3:22:0a:09:9d:82:74:ed:cc:
         7f:c4:f9:ea:bf:08:03:71:34:0a:22:08:55:17:9f:83:d9:5b:
         da:4f:c4:74:23:f3:52:1b:b2:40:bf:15:2c:5d:c6:5b:68:28:
         70:12:ae:8b:c5:75:6a:0f:bb:b0:ad:7a:0a:9c:58:68:0c:b9:
         81:78:9a:70:bc:f4:f8:5f:cb:07:5d:8f:7e:3f:f2:c5:72:e8:
         36:ca:27:ea:c1:d2:c3:af:92:52:4f:4d:f6:76:0e:27:b2:d7:
         cf:22:85:b5:ac:00:fe:5f:ed:e2:6b:1e:8c:b9:f8:21:fb:e3:
         0f:11:c7:ee:73:f9:30:6c:ca:59:4d:5f:87:e5:47:1f:75:18:
         9b:81:87:85:55:5d:07:02:e5:7e:ba:33:c1:eb:d7:52:67:76:
         5d:c8:67:24:f6:96:1f:8b:9f:8c:6d:9e:58:e3:90:c9:2e:2c:
         b0:e7:08:b1:be:de:fa:90:c6:80:44:45:8e:05:96:11:f5:48:
         b9:a4:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:50 2025 by rpki-client