Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          aNXQlyelpy2KrdrxzvabuJlWlRrayYoNOFJGer3dA0k=
Subject key identifier:   C8:DD:1D:85:16:BE:E6:EA:13:69:B9:BF:0C:E8:53:25:58:88:BD:FF
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       019889FC8E3CE621C3F80460C4D30F57B6C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          133D
Signing time:             Fri 08 Aug 2025 14:01:26 +0000
Manifest this update:     Fri 08 Aug 2025 14:01:26 +0000
Manifest next update:     Sat 09 Aug 2025 14:01:26 +0000
Files and hashes:         1: QgMdlf1ORmMjO3p07bMNw0KtDT8.roa (hash: lUvtRAtiQocAdClmm634qLmiwHU9zHgeeS2TA8kr2JQ=)
                          2: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: r74PW8dKDRR0ErH2F+/xrtVMlcsmgq6lSviPiCHYXdw=)
                          3: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
                          4: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:fc:8e:3c:e6:21:c3:f8:04:60:c4:d3:0f:57:b6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Aug  8 14:01:26 2025 GMT
            Not After : Aug  9 14:01:26 2025 GMT
        Subject: CN=c8dd1d8516bee6ea1369b9bf0ce853255888bdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:d6:0b:88:55:de:4b:3b:0d:dc:35:8b:b9:
                    2e:0f:5e:3f:04:0d:ef:da:0b:b0:04:bd:ef:a9:05:
                    a9:ee:6e:4b:24:d5:4f:ff:64:a4:78:59:51:23:d7:
                    8a:0a:c0:90:a4:cd:1e:bb:ae:25:ba:09:f0:ff:ff:
                    73:5d:ca:b9:4c:cb:68:dd:20:45:1a:14:2a:78:c5:
                    f7:7f:93:ee:77:13:b7:c3:c5:81:b7:64:63:d4:d2:
                    08:15:0f:10:cd:07:b9:cf:1f:f1:71:5f:74:b2:17:
                    17:14:b4:87:2b:68:c5:0d:e6:ba:34:bd:8e:27:4a:
                    ed:82:54:7c:65:14:e2:f8:e5:5b:b2:81:b6:52:47:
                    77:d4:d7:7f:08:d8:2c:86:8a:5a:c8:d0:cb:ee:96:
                    0d:f7:22:bb:61:2f:08:60:0f:40:53:fa:62:e2:27:
                    f8:5c:4f:d0:69:15:c3:57:de:b9:01:2c:a7:8b:09:
                    16:e4:9f:74:b0:f2:38:6b:94:6c:3d:f3:13:dd:59:
                    43:3d:b4:e2:25:69:18:62:53:91:48:44:43:07:ea:
                    80:53:89:75:22:69:a5:8a:44:7f:0d:52:5b:8d:b2:
                    e8:a1:e5:d9:12:e2:74:ee:a6:a9:c8:94:c3:eb:a5:
                    39:c0:fc:be:dd:d8:b6:3b:cd:1f:df:3d:8a:49:fb:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:1D:85:16:BE:E6:EA:13:69:B9:BF:0C:E8:53:25:58:88:BD:FF
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:a0:23:11:c0:42:dc:25:fc:b9:16:fb:bc:24:ff:cd:b8:
         1f:8e:9b:75:48:1f:f5:d2:91:6c:b1:ca:fa:59:a2:c1:eb:c2:
         04:e3:10:b8:d9:9b:ce:f6:af:ea:02:10:25:fd:d3:e8:6e:80:
         2f:d3:e5:81:34:61:7f:3b:b4:b1:73:b7:f0:56:80:82:23:29:
         5a:d4:d3:7b:9e:7b:1b:71:90:1c:ab:4c:c8:7f:73:c5:42:f7:
         e7:16:9a:c8:22:60:c2:ed:53:d0:c4:b4:27:e3:d2:5e:c6:4c:
         e6:05:8a:33:ed:70:75:49:2d:4f:c6:3b:05:18:9b:08:96:9f:
         d1:80:ff:78:55:44:e0:90:e1:9c:8f:c4:4b:73:25:1a:65:ae:
         50:ae:c9:70:6b:a4:3b:e1:74:18:0b:f5:7d:57:81:8e:e3:9d:
         92:9d:8a:6d:87:56:86:ae:3e:10:cd:f2:55:06:42:b6:de:2a:
         48:0d:80:3e:26:42:41:0a:b4:02:39:53:7c:f4:4c:78:44:a8:
         0e:74:c8:2e:1b:2c:7b:22:bc:98:6c:28:a0:ae:56:dd:c5:f1:
         5d:8c:53:5c:4b:13:c2:d8:21:21:97:02:aa:af:31:00:4f:79:
         0e:30:5c:08:1e:b9:6b:1f:26:4f:a9:12:e3:61:04:6d:5d:0a:
         f4:0e:36:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:13 2025 by rpki-client