Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
File:                     YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft (raw, json)
Hash identifier:          4/03XbBk4Y5PyOFpyz2XySk5Per1IlhVVmRE703hLmU=
Subject key identifier:   D7:96:06:1C:C6:83:47:10:A4:AA:AE:1E:74:EB:02:96:BA:11:AD:17
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Certificate issuer:       /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial:       01987FAF6D2E8348623E11D111C1C49F9AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
Manifest number:          5B
Signing time:             Wed 06 Aug 2025 14:00:59 +0000
Manifest this update:     Wed 06 Aug 2025 14:00:59 +0000
Manifest next update:     Thu 07 Aug 2025 14:00:59 +0000
Files and hashes:         1: NjG7UftPha6G7qBinySuoW20NO8.roa (hash: R5m9h3tvZkXvsunZXBGggcub279WCQw0iYlNo/aPjLE=)
                          2: YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl (hash: t/XeJHQlMdt21oCFfciC6oyjHgGeGrtD8wkmewtz2mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:af:6d:2e:83:48:62:3e:11:d1:11:c1:c4:9f:9a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
        Validity
            Not Before: Aug  6 14:00:59 2025 GMT
            Not After : Aug  7 14:00:59 2025 GMT
        Subject: CN=d796061cc6834710a4aaae1e74eb0296ba11ad17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:0c:ef:65:34:39:3e:2e:8c:bd:ae:64:a4:
                    91:61:a0:23:97:36:38:db:dd:fb:e2:42:2b:c7:b4:
                    d1:31:76:ec:99:b8:15:7a:65:46:82:0a:23:a8:3b:
                    7d:6b:36:bd:80:72:5d:16:ca:52:eb:fb:6f:82:5c:
                    26:81:b9:b9:91:38:8c:19:c1:e8:6d:19:95:f8:0c:
                    5d:91:92:6b:90:64:b5:c0:bd:f3:70:62:2d:94:81:
                    7e:96:e7:57:ed:31:9e:81:17:e3:7c:20:28:d9:c3:
                    5d:c2:2a:73:db:b4:49:34:d3:d3:b2:17:c6:d1:a7:
                    74:75:46:0c:c7:a3:74:d0:28:7f:f0:cf:6d:3e:a0:
                    98:f3:e2:90:fc:f5:36:e0:54:b1:af:91:aa:f4:64:
                    e0:ba:e9:4b:f9:0c:c8:80:81:14:fd:bc:2d:1e:95:
                    ee:18:1c:54:36:16:e2:28:e3:2f:fb:27:7d:9a:6d:
                    be:02:5e:48:e6:65:ef:c8:53:c6:d9:a1:7e:53:3c:
                    2a:9f:ae:b4:e8:3e:2c:42:40:74:a7:3e:03:e3:82:
                    17:13:4d:dc:04:0c:fc:8f:31:31:11:c4:45:e5:8e:
                    09:ec:0f:05:e5:86:9a:30:0b:ef:72:b6:47:4c:7d:
                    0e:5e:78:b5:bb:75:3a:d4:70:6c:9a:e8:e4:af:d2:
                    da:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:96:06:1C:C6:83:47:10:A4:AA:AE:1E:74:EB:02:96:BA:11:AD:17
            X509v3 Authority Key Identifier:
                keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:43:71:7f:6e:37:85:18:1b:86:75:2e:4a:5b:b6:3f:a6:
         5a:4e:e3:50:b2:b9:21:4c:c4:f4:ec:d1:a4:b0:57:42:62:d6:
         4a:75:e8:d0:59:11:e0:64:98:65:5d:18:d3:67:19:65:fb:8d:
         03:ae:1b:a6:4a:1c:81:f2:c9:71:d1:27:2e:25:2e:df:b0:09:
         53:28:66:3a:55:40:2a:3b:a3:e8:00:b0:4a:39:b6:0f:ee:86:
         aa:4c:1e:da:88:0d:31:75:6e:37:e7:b9:76:33:25:32:4f:0e:
         8e:3d:24:c0:bb:32:96:6e:d8:48:b7:91:55:aa:dd:4d:a5:5d:
         23:13:41:86:07:20:22:7c:49:19:97:23:f3:a8:8b:bc:a8:e8:
         fe:f7:bb:6f:a0:07:4b:30:16:ea:d9:c6:7e:c9:21:dd:aa:1a:
         5a:91:81:df:17:c9:58:c0:c2:78:13:df:31:75:a3:25:2d:ee:
         69:4a:c5:9b:96:38:a1:61:ac:81:21:9b:67:96:ff:f6:a4:0d:
         0b:0e:48:58:9f:d4:a0:4b:be:cf:ef:33:78:08:c1:e3:28:2d:
         34:f6:a8:14:da:50:8c:ad:41:eb:3f:fa:01:95:2f:4b:27:ad:
         df:e2:8c:97:a7:05:7b:a2:58:96:f8:c4:39:c5:bb:e0:bf:09:
         d0:33:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:21 2025 by rpki-client