Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          dyAkJOlRQ6T2HOHU82iCgr0v27DaOHxaZAgAhN4q9HY=
Subject key identifier:   7D:C7:24:9B:61:EA:DB:BB:1F:BD:86:24:CA:BB:44:A1:57:17:D9:05
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       0198898E5BF068A78C92A87109A24B611B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          050B
Signing time:             Fri 08 Aug 2025 12:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 12:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 12:01:04 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: S/P6ozp9Cov+2k8R2FPBmB5nrMv2C2iJ3EzcuymWp7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:8e:5b:f0:68:a7:8c:92:a8:71:09:a2:4b:61:1b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Aug  8 12:01:04 2025 GMT
            Not After : Aug  9 12:01:04 2025 GMT
        Subject: CN=7dc7249b61eadbbb1fbd8624cabb44a15717d905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:8a:45:16:14:63:ac:16:ba:4c:ef:e0:5f:
                    9b:c1:08:c4:2e:e6:1e:d3:66:29:1f:cb:31:b3:4e:
                    ac:f5:e0:5d:72:de:b9:2a:fd:92:c7:ad:0c:85:9e:
                    6b:ff:bf:84:16:f1:3c:56:89:92:60:8a:01:76:9d:
                    99:ee:6b:05:3d:6d:83:05:1a:f2:6d:4c:d4:79:40:
                    b6:2f:cc:71:cf:ba:b8:c8:df:cb:9b:f0:d4:1f:80:
                    b6:b1:79:73:53:bf:0b:8d:0c:cf:71:3b:e8:c1:ae:
                    17:30:65:1b:b1:73:22:72:cf:94:01:cc:a3:a9:a0:
                    4a:ef:46:bc:d5:56:c5:ce:a9:c7:5a:7d:84:83:1c:
                    c7:67:be:f3:a4:43:25:3f:78:03:cc:e5:8c:73:56:
                    fb:97:ea:73:83:76:35:09:db:8b:aa:f8:9a:99:3f:
                    c7:ad:cb:0b:77:96:07:31:e6:53:17:cd:8e:59:6c:
                    d3:26:08:02:15:22:31:65:90:d4:26:18:24:cd:b8:
                    44:cf:df:c2:d0:c0:7b:79:10:05:7f:a0:d4:e6:04:
                    00:cc:4c:7e:c3:6f:50:fb:89:c1:83:5e:91:a8:7f:
                    94:31:f3:4e:08:3a:5d:d5:f8:23:c4:17:02:df:ab:
                    69:dd:01:32:35:3d:48:0a:75:f6:82:94:fb:0c:a8:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:24:9B:61:EA:DB:BB:1F:BD:86:24:CA:BB:44:A1:57:17:D9:05
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:5c:48:2c:c9:99:c5:c0:82:25:6c:e9:27:0d:b2:56:f8:
         75:e3:ef:71:49:ad:ab:af:aa:10:5f:75:10:f1:68:e1:08:73:
         75:a2:22:f1:eb:6e:7c:bb:f8:57:e5:61:60:47:0f:19:58:f7:
         a7:b2:e7:c5:d2:f5:b6:d4:cb:86:17:11:2c:1d:ca:b3:26:aa:
         db:5e:f1:69:a2:71:44:e4:19:f1:12:9b:8b:a2:30:3c:80:f8:
         1a:8b:f4:6e:69:ea:c4:d1:2b:77:71:4b:5e:8f:7c:80:2a:1e:
         de:b2:fb:6e:ae:a8:47:40:bd:2e:38:8a:d0:a6:77:96:1c:ef:
         fa:36:46:a4:48:0b:8c:5b:d8:a4:41:7d:9b:bf:28:e6:c5:4d:
         f9:79:3f:60:aa:57:ff:b0:5a:6d:a8:d9:57:2b:01:0a:53:f1:
         cb:3f:77:d4:e9:be:28:62:30:c6:c7:32:d2:54:8c:b3:de:42:
         5e:5f:c7:8e:17:dc:94:4d:03:fd:4f:23:6b:6e:94:c4:f8:5e:
         76:9b:70:3c:9e:72:ac:56:df:6e:a8:5e:01:db:bf:af:d7:5c:
         b4:84:46:16:60:e5:6c:3a:48:11:ac:9e:4d:b1:76:cf:34:e7:
         bd:b0:32:ab:27:19:80:cf:37:17:95:bd:7e:eb:fc:69:89:35:
         17:da:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:41:42 2025 by rpki-client