Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File:                     Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier:          ZebfWoO8pWg29hh+3OSz6d3HU6MBFMgJYNfIrvJ2+R4=
Subject key identifier:   6F:71:8F:3A:69:4A:20:73:55:41:85:62:06:0D:EB:EC:81:D9:23:60
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer:       /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial:       019873E34906E9CE4A9299E16739041940D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number:          CB
Signing time:             Mon 04 Aug 2025 07:02:11 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:11 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:11 +0000
Files and hashes:         1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: SLlntP4ISqhqOU24XNZToIZ4Jf40XqAq2cEQ6l3EZH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:49:06:e9:ce:4a:92:99:e1:67:39:04:19:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
        Validity
            Not Before: Aug  4 07:02:11 2025 GMT
            Not After : Aug  5 07:02:11 2025 GMT
        Subject: CN=6f718f3a694a207355418562060debec81d92360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:5c:93:99:5b:11:ed:ce:81:1f:a7:97:cb:
                    ed:41:8d:86:45:84:a0:b8:9a:25:a7:f1:22:d9:c7:
                    f4:f8:95:be:bf:e3:9e:75:7e:4f:3e:ed:97:a2:8e:
                    c7:f8:c2:cc:b5:c1:9b:88:e7:21:64:fd:d1:6a:16:
                    31:d4:22:61:fe:fd:51:c8:42:44:06:8a:c3:e9:1c:
                    7d:26:33:b0:86:90:5a:06:df:41:51:35:51:73:52:
                    63:b5:1a:94:e3:92:f3:14:81:6d:ef:4b:77:12:78:
                    24:44:42:1f:76:00:42:fe:5a:a6:a3:d2:96:67:6f:
                    1e:ae:00:58:06:f0:ba:fc:28:31:34:64:91:35:9c:
                    5a:25:ee:92:de:7e:cd:21:d2:64:82:13:4a:9c:26:
                    6b:b8:bc:ea:3e:6f:09:4c:bc:bf:af:da:01:e4:01:
                    34:44:9d:88:4d:24:e2:31:3e:4f:6e:29:55:9f:23:
                    af:b9:ef:6f:0e:dd:82:cd:e6:e6:4e:23:f1:96:f2:
                    6c:86:1e:9a:00:81:f8:19:1d:22:b7:14:98:31:cc:
                    f1:49:15:a4:ad:2c:b4:e2:82:c5:46:8b:2c:8a:29:
                    2d:7e:7d:0d:67:cd:02:10:1e:bb:af:1c:26:8f:6e:
                    fd:c0:76:14:1a:ad:df:63:02:ce:22:6b:de:34:77:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:71:8F:3A:69:4A:20:73:55:41:85:62:06:0D:EB:EC:81:D9:23:60
            X509v3 Authority Key Identifier:
                keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:ba:fb:c3:07:bf:c7:a1:38:3c:d3:ca:81:f2:cf:75:58:
         80:7b:88:a9:eb:6d:03:39:cd:1e:eb:69:2a:d3:c3:38:90:ab:
         6a:e5:bc:b3:ae:d8:82:05:7e:98:79:14:b3:b5:1f:f7:23:a3:
         61:dd:1e:dc:3f:cd:8b:8c:a8:b1:10:9c:d4:cf:44:e4:65:aa:
         7f:4a:da:2c:42:55:19:73:dc:0c:6b:b9:c2:eb:01:cc:b3:9b:
         b8:fb:66:59:c7:aa:8a:79:6b:be:7b:10:58:de:87:0f:99:76:
         1d:c0:c8:b5:e3:c2:c3:9d:19:25:29:df:04:17:6a:70:cd:33:
         c2:cb:23:ac:f3:7b:5b:2b:24:d8:25:e1:e5:41:ed:1b:ea:6d:
         d0:f5:8c:f7:d8:05:ed:19:71:15:c0:8f:5a:22:09:0e:db:71:
         47:2b:44:61:a1:01:33:f4:3a:67:5b:d0:11:80:a5:88:0e:44:
         81:c9:c9:a1:71:ce:bc:1b:22:01:32:c1:e6:15:0a:ba:04:d4:
         95:b3:7a:0e:78:c7:65:5c:08:dd:dd:57:df:bb:3a:7b:5b:d5:
         5a:f7:21:5b:ae:20:4e:33:97:de:13:da:45:b2:1f:0f:c5:94:
         43:37:1f:85:43:19:d1:88:6b:e9:5c:ba:9e:a7:ce:d2:d3:de:
         f3:4e:40:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:04 2025 by rpki-client