Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File:                     yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier:          R40VZ6QJADiYrF7p9Eqpluugc0saRaX6CLG6aewSjAE=
Subject key identifier:   EF:FD:8B:88:73:3E:A4:63:4C:51:E9:BE:38:A7:E4:06:5F:39:6E:C3
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       019875D0FDB24CC0D4893DE7311133AB8111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number:          0DDD
Signing time:             Mon 04 Aug 2025 16:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:27 +0000
Files and hashes:         1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
                          2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: drtniPgi3gpfZapTi2bj7Nb6TzPP8NJifCtcs21QE0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:fd:b2:4c:c0:d4:89:3d:e7:31:11:33:ab:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Aug  4 16:01:27 2025 GMT
            Not After : Aug  5 16:01:27 2025 GMT
        Subject: CN=effd8b88733ea4634c51e9be38a7e4065f396ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c4:66:a0:ed:3d:d0:e0:2c:34:66:8b:27:fc:
                    6c:bd:ff:9f:30:01:eb:d0:85:c6:77:4c:01:69:bf:
                    ed:81:68:4a:89:4c:de:40:04:28:1b:ae:37:63:86:
                    2d:81:ca:80:4d:f2:f0:9a:c7:f1:ea:44:7a:00:dd:
                    d7:be:38:1d:97:67:10:4f:d8:1b:82:d5:48:63:59:
                    fb:5a:9a:b3:52:c2:6f:04:d9:0b:11:1b:dd:82:69:
                    81:2c:b0:e2:c2:6a:9a:57:3d:fe:16:df:91:96:23:
                    d7:24:7e:02:0b:58:70:13:fb:fb:98:a2:e4:12:bf:
                    f6:f4:ba:21:9d:6c:8e:fc:8b:a7:3c:04:de:82:f3:
                    3f:51:a7:e4:35:9d:ab:ee:5b:2e:7d:99:5c:aa:5d:
                    8c:7d:ad:65:d8:6d:e7:74:94:a9:6a:fc:cd:5c:ed:
                    89:c7:4f:6c:c4:8e:7d:90:6f:20:57:b3:f3:45:34:
                    df:59:6a:a3:f0:0f:b2:32:86:48:85:09:c2:b4:c9:
                    66:7c:b8:e4:12:ae:23:ff:6d:4e:1b:03:46:fc:74:
                    cf:33:7d:bf:2c:8d:61:d9:80:09:32:d7:be:04:fd:
                    5d:31:49:0b:fb:ef:dc:ee:2a:3b:b0:74:68:6b:97:
                    37:fb:6c:01:da:4c:aa:8e:b2:74:c8:7c:5e:58:61:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:8B:88:73:3E:A4:63:4C:51:E9:BE:38:A7:E4:06:5F:39:6E:C3
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:7e:e7:d1:7d:e5:09:7e:94:1b:ee:cb:39:64:83:17:ca:
         8a:13:e5:f9:3f:a4:42:a8:0b:70:6d:2a:a5:0c:52:ff:56:64:
         f6:af:06:7b:13:64:12:25:c8:05:10:cd:57:54:9f:14:82:6e:
         62:43:4f:53:ae:45:80:0b:02:02:60:f0:79:3b:c5:b9:49:50:
         a9:dd:b0:fb:ff:b4:4f:52:f7:c8:74:94:90:4b:68:f2:fa:af:
         d3:4b:ab:c2:26:69:c6:f4:da:fa:35:69:cc:e8:c2:f9:07:42:
         8d:56:9e:5a:75:68:0e:ab:c3:c0:c4:0d:0f:4c:f2:70:6a:20:
         e8:8d:2e:5b:a3:b4:e4:7b:28:db:58:fb:45:6b:f9:6c:2b:3f:
         52:31:1b:ac:f4:ff:8c:e2:70:f4:bf:6b:80:24:db:9c:6e:3a:
         cc:35:94:d5:b3:86:a3:cc:74:4f:3b:a3:0a:bb:20:80:49:30:
         19:7a:9f:74:60:c9:6e:ee:c4:19:be:75:9d:d9:1a:d4:0e:eb:
         78:64:55:ed:ec:c8:fe:4b:a7:d2:02:46:c3:de:9b:b7:db:d6:
         77:3e:94:94:77:b7:c1:3a:df:d0:94:d1:93:2a:58:ec:81:43:
         b0:da:81:c2:96:79:fe:93:e6:14:a6:cc:32:a5:52:59:9b:ab:
         6a:4a:80:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:22 2025 by rpki-client