Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          sk0BGZ1VxgT1wAWGJt3XBhLvDOxgVG0cnH18a/6SjPo=
Subject key identifier:   FB:56:4A:C8:72:5B:F1:DE:97:84:17:28:C4:73:4E:52:6C:F2:D0:26
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       019874BDEACF5AAB8827AC8C8DC348A404B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          05AA
Signing time:             Mon 04 Aug 2025 11:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:59 +0000
Files and hashes:         1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: o2svQN/U6FgWYNJX5v1i9Cbf1DYHHP4ykqPmvvN6VnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:ea:cf:5a:ab:88:27:ac:8c:8d:c3:48:a4:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Aug  4 11:00:59 2025 GMT
            Not After : Aug  5 11:00:59 2025 GMT
        Subject: CN=fb564ac8725bf1de97841728c4734e526cf2d026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:51:7b:4c:c2:b4:7c:ce:46:86:cf:4d:0e:
                    a4:43:7f:53:c3:46:88:8b:9b:a7:62:41:0b:32:41:
                    81:44:a8:d1:64:04:a0:c5:5e:ff:1b:e4:3f:c1:de:
                    78:c5:93:92:be:50:e6:a2:81:7e:5f:73:d4:df:ac:
                    af:8c:11:db:26:40:4f:cf:80:87:c6:57:7e:eb:98:
                    4c:25:b9:cd:13:bd:d2:41:8b:6d:73:2a:67:0c:37:
                    5f:94:05:03:ec:f3:6d:17:b5:46:69:53:02:27:5a:
                    77:4f:e3:47:66:4e:d9:a1:2c:1e:0f:44:80:82:c4:
                    35:be:55:da:f1:ab:1e:6e:bf:e5:37:e0:f9:01:f4:
                    dd:d6:39:bc:aa:11:c3:54:3f:8c:dc:ab:c9:68:62:
                    3b:c4:e9:7b:ee:11:85:2c:af:d0:0e:88:c4:79:b0:
                    d6:6d:af:91:54:be:a9:5d:f0:36:c7:7a:98:9b:f1:
                    80:d3:90:14:10:46:f9:5b:71:9e:c2:c9:e2:c0:f3:
                    2b:88:33:a4:8a:c2:9e:ef:9b:be:fc:15:57:1e:d0:
                    5b:1d:84:a2:58:c5:8d:50:0c:2a:ea:7a:f0:4d:ca:
                    e6:f5:b0:bf:20:5d:ea:72:12:30:d1:e6:04:c9:56:
                    4a:d3:2c:c7:5d:ff:1c:65:8a:51:28:f2:79:ec:12:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:56:4A:C8:72:5B:F1:DE:97:84:17:28:C4:73:4E:52:6C:F2:D0:26
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:5a:88:77:e2:cf:e7:1d:6c:73:84:f3:a6:76:4e:5f:61:
         80:a1:aa:8d:07:02:19:10:b4:77:d0:ab:46:6c:38:f5:d9:e1:
         c4:ca:61:4a:ad:8d:0e:1f:5d:66:23:c4:e4:c1:72:0e:15:f0:
         a9:3b:3a:c0:7f:d9:f5:a4:cd:c6:46:40:6a:5f:99:e9:53:76:
         a3:40:45:4a:16:d1:0b:3d:0f:36:a1:8d:08:9a:36:01:dc:97:
         29:2d:8d:c0:da:6c:52:1f:90:0a:33:46:6e:80:a3:fc:65:6d:
         ed:51:ce:05:1c:74:d6:a3:63:8c:d6:2e:89:a6:e7:3c:00:93:
         ef:4c:e0:94:c4:41:a6:cf:72:48:2a:9b:88:56:f2:ce:e0:cc:
         5b:c0:dd:06:ed:1b:85:3e:58:61:38:2a:45:71:b5:5b:3f:c0:
         ed:71:99:8a:e9:3b:87:7a:4d:64:ce:89:1f:c8:9e:46:da:f9:
         17:41:15:5f:d3:2f:01:42:9b:6b:ec:9e:5c:19:2e:33:45:dd:
         74:e7:84:e1:e1:10:93:df:31:a4:db:81:f1:0c:ca:28:30:29:
         37:5e:ee:ce:cc:7b:b7:35:0c:da:8b:a7:99:09:0a:69:dc:0e:
         32:d7:5f:7f:27:42:15:69:e2:db:d7:fb:b5:a3:03:40:81:57:
         f9:ba:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:59 2025 by rpki-client