Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File:                     Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier:          z7glUb+xXI0ayjqhxpOkaCP5tJXjfJUHUjPZRCAt5jo=
Subject key identifier:   CA:D5:E2:1C:79:75:C5:F5:61:1E:FD:A0:32:06:2A:D8:46:AB:F9:5F
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer:       /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial:       01987B9D93E3060FBA9CD20A0C446760C7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 19:03:01 +0000
Manifest this update:     Tue 05 Aug 2025 19:03:01 +0000
Manifest next update:     Wed 06 Aug 2025 19:03:01 +0000
Files and hashes:         1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: s79B71wbnVyQ1ilvM3/8pGyGCAltVYUELd6pW2d4LQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:93:e3:06:0f:ba:9c:d2:0a:0c:44:67:60:c7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
        Validity
            Not Before: Aug  5 19:03:01 2025 GMT
            Not After : Aug  6 19:03:01 2025 GMT
        Subject: CN=cad5e21c7975c5f5611efda032062ad846abf95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:01:3d:19:fd:f5:0f:fc:0d:30:52:4a:7c:c8:
                    77:ab:1c:80:45:61:90:23:4b:ea:86:cf:22:cb:d0:
                    ca:62:c1:33:e6:94:c5:80:83:33:ed:af:9d:d3:57:
                    3b:9d:e9:15:8c:d6:ec:87:d1:00:71:cb:6c:eb:1d:
                    e3:a9:f9:0a:64:15:65:e8:56:dd:54:b6:3a:8e:5d:
                    4b:f6:c4:31:d1:c4:9c:4e:03:47:a7:e6:0c:c4:ab:
                    92:86:89:ad:da:06:51:bd:9d:88:47:f0:90:39:38:
                    b0:9a:af:1a:e5:9f:ca:1e:8f:62:8d:e4:e6:b3:e0:
                    34:bd:da:65:2c:20:2b:b4:b1:5c:48:3e:34:73:c5:
                    08:17:cf:02:01:84:1d:91:22:1f:ae:f4:a7:94:d4:
                    e2:97:21:d8:c6:05:bb:49:44:7d:3b:b5:9b:60:9e:
                    c9:30:df:ba:41:6a:38:dc:d1:81:e2:7b:8e:11:88:
                    55:3a:54:f3:27:66:72:8e:88:4b:4b:f2:4e:bb:7e:
                    db:56:54:5a:7d:90:9d:c1:a4:fc:15:b6:12:1d:62:
                    d5:73:7d:3b:2d:79:15:bf:cf:da:51:df:b2:53:5d:
                    23:44:e3:89:23:fe:2c:57:48:2b:79:c8:9c:43:96:
                    56:e6:de:d5:65:16:40:70:78:8d:be:5a:ce:86:91:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:E2:1C:79:75:C5:F5:61:1E:FD:A0:32:06:2A:D8:46:AB:F9:5F
            X509v3 Authority Key Identifier:
                keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6a:53:f6:b9:48:8d:fb:0a:09:69:ae:47:d4:c3:3d:28:07:
         e8:dc:b4:3d:ab:a5:61:60:37:d4:c7:22:52:63:83:1c:72:0d:
         da:94:5a:c6:b0:42:2d:8a:5d:66:65:7d:26:69:8e:4c:7c:96:
         09:c3:25:91:95:07:28:7f:62:f8:31:18:6f:9c:05:80:7e:31:
         3a:9f:c2:34:3e:ad:1b:bc:78:89:4f:82:2e:61:29:af:39:aa:
         67:f5:d9:e1:22:24:d0:07:60:1b:13:a0:08:f4:04:33:70:69:
         13:58:9a:2a:e0:01:91:bf:6c:4c:da:9a:5d:2f:1b:dd:ed:85:
         84:27:da:43:ca:b1:0b:5d:8e:81:7f:34:23:ee:9f:69:ce:c9:
         ff:99:e9:fa:2a:51:fa:89:8e:b6:8c:9f:cb:eb:69:1b:37:18:
         e1:ca:85:7a:49:8c:ef:9f:52:16:88:52:5e:46:45:79:5a:7c:
         d9:28:a3:c1:6a:bd:db:22:89:07:b0:67:bf:56:08:76:08:16:
         7a:16:e1:93:bb:a0:a4:08:6c:cd:ef:3d:62:6d:c5:6c:42:c1:
         18:31:fb:e7:ae:9a:22:83:87:40:df:49:c2:4f:48:bc:ca:00:
         de:a2:21:16:b8:d3:24:67:80:47:66:95:26:55:b8:0d:40:74:
         82:f3:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:25 2025 by rpki-client