Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
File:                     YxB3zMSCuRtFmfUslKiJABOSSf8.mft (raw, json)
Hash identifier:          t3qg3KyHYGFSozgcshayu3QoqyUJs+AiJc8E5TGMTu8=
Subject key identifier:   9A:E6:0F:7C:14:41:ED:B8:C3:9C:92:BC:3D:BC:F9:E5:D0:C2:B1:95
Authority key identifier: 63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF
Certificate issuer:       /CN=631077ccc482b91b4599f52c94a88900139249ff
Certificate serial:       01988243435F356DBC8CC750A929FE487628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
Manifest number:          97
Signing time:             Thu 07 Aug 2025 02:01:42 +0000
Manifest this update:     Thu 07 Aug 2025 02:01:42 +0000
Manifest next update:     Fri 08 Aug 2025 02:01:42 +0000
Files and hashes:         1: YxB3zMSCuRtFmfUslKiJABOSSf8.crl (hash: YoWyWcTdS7nspM/8ExniaIHfFR2RXA6s9RHe8uQAvQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:43:43:5f:35:6d:bc:8c:c7:50:a9:29:fe:48:76:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631077ccc482b91b4599f52c94a88900139249ff
        Validity
            Not Before: Aug  7 02:01:42 2025 GMT
            Not After : Aug  8 02:01:42 2025 GMT
        Subject: CN=9ae60f7c1441edb8c39c92bc3dbcf9e5d0c2b195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:20:21:84:6d:57:67:c6:99:6b:c6:3b:1d:
                    bd:5a:0b:8d:36:fa:7e:96:c0:b9:de:63:33:a2:b0:
                    77:d3:d3:2a:94:17:57:93:3b:15:7f:84:ca:e3:fc:
                    4f:98:f3:4b:77:7a:d1:88:50:2b:c7:d7:4d:eb:09:
                    23:b3:3f:32:b4:18:5b:1f:74:12:88:a4:01:f1:a2:
                    80:6d:d7:41:b1:3c:b4:2d:50:c5:b7:35:fa:e1:ce:
                    ee:ae:81:f3:4e:da:34:95:da:33:e8:b2:43:54:eb:
                    4e:9d:bf:4d:70:9f:af:e6:d0:fa:94:e9:fa:47:3e:
                    bd:7a:49:64:3b:d6:21:d3:10:89:f0:c7:b2:b2:2f:
                    df:e1:2c:25:b6:34:e1:ec:1e:67:65:e5:f5:4b:68:
                    85:11:ce:1f:ae:10:54:30:21:b4:82:6e:80:51:70:
                    f2:85:74:03:ca:23:d8:df:21:a2:0d:59:6d:49:8b:
                    1f:eb:6e:d6:4b:61:28:38:35:68:99:18:20:ac:f0:
                    0a:ec:1d:a3:06:a8:d4:be:c7:20:ff:5b:fe:c1:07:
                    31:9b:f9:83:43:fd:d1:24:60:22:0e:56:cc:1a:0e:
                    37:7f:4d:0a:0c:a1:57:f2:bc:5e:37:c6:79:a6:46:
                    72:21:4f:3b:99:f9:d3:0b:e4:0d:8b:ee:c4:27:0e:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E6:0F:7C:14:41:ED:B8:C3:9C:92:BC:3D:BC:F9:E5:D0:C2:B1:95
            X509v3 Authority Key Identifier:
                keyid:63:10:77:CC:C4:82:B9:1B:45:99:F5:2C:94:A8:89:00:13:92:49:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxB3zMSCuRtFmfUslKiJABOSSf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/814253-f21f-4bc8-b768-804b760dd879/1/YxB3zMSCuRtFmfUslKiJABOSSf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8e:10:80:ba:79:b0:92:fb:18:f8:7c:13:0b:01:01:ed:30:
         9f:13:7f:a3:51:c6:16:7c:e1:7c:9c:5a:fd:9d:2c:71:4d:ce:
         68:54:21:e6:7b:85:20:bf:6d:4e:17:2d:73:a0:1a:5d:31:7e:
         67:ef:0c:b0:37:30:dd:b7:ad:e6:d3:11:c0:28:e3:9f:8d:0c:
         ea:b8:82:dc:a0:7e:25:27:78:6e:ca:a7:d7:a4:19:84:89:45:
         2c:75:66:5c:5d:22:01:ae:c7:ad:7b:57:b5:cc:1b:c8:40:78:
         51:33:13:f4:f8:d0:82:57:de:31:5d:d5:b3:17:3d:16:2e:77:
         20:92:c6:07:be:e6:e0:7c:84:3a:7a:c7:0b:5a:4b:b3:12:80:
         30:13:65:dd:8f:1e:bb:ac:b1:69:f3:05:f5:17:20:34:f1:dd:
         77:ee:fb:17:06:c1:00:0b:d8:27:82:e3:ed:32:69:e3:54:9c:
         e5:92:d2:27:72:2b:d6:be:3a:3f:61:67:98:0a:61:22:88:64:
         46:92:2d:c9:45:4b:5b:68:dd:a7:0b:ab:12:a6:9e:54:9e:37:
         4a:d7:54:76:b4:5b:92:4b:dd:bc:a9:c2:8a:1c:cb:55:d7:67:
         8a:6d:13:39:71:61:cf:52:49:35:46:ee:f9:e6:3d:af:4d:fd:
         26:56:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:43 2025 by rpki-client