Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          KneB1A5JLhzXa1f1tCP6k9fsTNeogny+brBcMrOBXOk=
Subject key identifier:   E4:65:88:66:01:B3:23:DB:B7:C4:6A:A3:49:85:B0:EA:C1:2E:1E:D5
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       019884D5707DF2783C610E10D09A16660E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          07D5
Signing time:             Thu 07 Aug 2025 14:00:37 +0000
Manifest this update:     Thu 07 Aug 2025 14:00:37 +0000
Manifest next update:     Fri 08 Aug 2025 14:00:37 +0000
Files and hashes:         1: 1-5NUrO_byWPObjKw_XJz8H8qct8.roa (hash: h1I1pFSK7rKXwOACmEPGtKZC6oMngaIIwONtJrknS64=)
                          2: CPodE3_RIBh9_-_Q9IrXnt0jBQQ.roa (hash: +FHXKf3f9JVzV+Qw7xj+2wXQmTxWPnbFGqd+rwkbcMY=)
                          3: EMXYEynUntG8ll4EW5Q-6Hk40TY.roa (hash: Xpiy8GuGmhJYwB9WLtl0u6lzkUU+gwZPYmYDPQzDZdI=)
                          4: OikZGL2LEHpl7dY7zmLA3J5GOEE.roa (hash: M6ctsVmPoPZhMMxHtbO6g9MMFqbmRKFOMWh5oVa/f94=)
                          5: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: v9SjwedpWQZTueaMM4pCVfmBuhYOSPgX/KtJBVzDOME=)
                          6: aeDfOfbVztGADm5NBTaLM-YRqHs.roa (hash: 0X4nT8WQ19Et5qFSAny70J/znuk2NQeORpBaCqs4M3A=)
                          7: hz6xJweyDBTu0FlGgkoGT3nyG90.roa (hash: 4L/5B8W7pat0hwm5hvGy2beSRYM1Jy9cIWMYZt0TEC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:d5:70:7d:f2:78:3c:61:0e:10:d0:9a:16:66:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Aug  7 14:00:37 2025 GMT
            Not After : Aug  8 14:00:37 2025 GMT
        Subject: CN=e465886601b323dbb7c46aa34985b0eac12e1ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:44:69:2d:b6:23:74:0b:9d:0a:c2:ca:04:
                    dd:cb:4c:58:cf:0f:bd:fc:e1:78:01:e0:6f:71:96:
                    b3:8c:69:cb:3d:a3:b1:d1:0d:97:ee:dc:8a:6f:ef:
                    b4:19:fe:c5:53:fb:08:22:42:a2:13:2b:b4:5b:48:
                    00:a9:40:be:ad:7e:1d:19:18:96:b4:8e:01:68:7f:
                    f4:14:25:c8:12:7e:07:b9:c3:dc:98:3c:c6:92:13:
                    2e:a2:95:b7:84:2b:3a:36:35:ef:e8:45:54:e2:08:
                    27:10:59:be:96:4e:1b:f5:31:18:f0:05:21:76:85:
                    c7:04:8a:f8:af:61:8e:fc:fe:09:4f:43:d9:ec:98:
                    84:0f:49:ca:12:d5:50:d5:dc:b1:15:9d:07:ac:2b:
                    70:47:f6:d1:e4:0f:e7:22:55:4f:40:55:a8:05:23:
                    f9:a6:14:2a:7d:26:74:67:81:b8:5b:5e:d4:ea:e7:
                    57:47:74:39:50:69:2f:64:7a:32:5f:72:3c:db:35:
                    7f:6b:4f:88:4d:d5:4b:7e:d9:cf:ed:2b:ff:aa:9f:
                    fe:81:ee:b7:cf:72:00:90:f3:91:f9:ac:73:10:1b:
                    4f:f8:7d:ce:fb:9f:cc:14:ee:de:4b:d1:92:76:1b:
                    37:68:c6:5f:01:8b:e5:c6:d5:f4:55:db:71:89:13:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:65:88:66:01:B3:23:DB:B7:C4:6A:A3:49:85:B0:EA:C1:2E:1E:D5
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:ad:4f:6f:a4:78:28:0a:f3:c5:ef:fd:db:72:43:1a:b9:
         2b:35:a6:f6:34:50:1a:8f:65:67:fb:23:e5:34:da:83:71:62:
         72:5f:51:1b:de:84:b6:79:67:3d:6b:5c:01:aa:11:d6:54:ed:
         ed:7c:34:1f:ad:2f:81:e6:b1:22:a3:c2:ac:1f:e7:04:9f:21:
         97:85:1d:19:53:b7:cc:c3:ce:28:28:8d:d9:00:e3:5a:b7:e6:
         ca:73:df:37:75:86:ae:5c:c5:1f:c8:81:86:6e:72:df:7f:df:
         c4:81:6f:26:2d:19:36:66:3a:25:8a:bb:d8:89:a4:ae:ef:35:
         a5:fa:7f:b2:17:49:d1:44:39:10:e5:fc:9f:d6:35:2a:dd:9f:
         e6:fd:e8:f8:55:c8:44:59:90:67:8c:77:fd:ac:3a:1d:5a:0b:
         14:b5:7a:e7:3b:1d:7b:0e:da:41:64:9e:e0:d2:7b:64:c8:41:
         41:9a:4d:d5:44:c4:67:e9:f6:4a:ae:fd:95:32:93:c2:09:42:
         bd:dd:11:2a:6f:f9:62:f0:d8:3d:eb:2c:ee:e2:32:1a:ac:ae:
         39:7f:20:e4:44:de:09:5e:71:b1:0e:25:f7:f0:10:b3:0e:55:
         38:25:3d:d5:f6:0d:14:2b:47:54:41:77:0c:dc:72:a5:bf:de:
         6a:7a:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:27:46 2025 by rpki-client