Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
File:                     yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft (raw, json)
Hash identifier:          Ii7r3ZsYUW9n9mxfjuuGTPGp2yc/+v2S/htWl67ZY0M=
Subject key identifier:   9C:8A:6E:D8:3F:EA:32:23:70:21:38:29:FA:B2:0F:DE:9C:7A:ED:BF
Authority key identifier: C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5
Certificate issuer:       /CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
Certificate serial:       01987AF6883C3432B328EDE35EA0EA5D1040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
Manifest number:          0336
Signing time:             Tue 05 Aug 2025 16:00:33 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:33 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:33 +0000
Files and hashes:         1: yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl (hash: CaNaPRWFhuJSd3T2NjdgiigZMIvJaLMd6C5dEdj+3Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:88:3c:34:32:b3:28:ed:e3:5e:a0:ea:5d:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84503367e01c6c0c4cf0957a0fc1c36be0d2bc5
        Validity
            Not Before: Aug  5 16:00:33 2025 GMT
            Not After : Aug  6 16:00:33 2025 GMT
        Subject: CN=9c8a6ed83fea322370213829fab20fde9c7aedbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:e1:3a:ba:cb:a3:72:d5:46:3b:66:8a:4e:
                    da:c4:c4:90:87:76:91:b4:05:9c:51:5d:0d:6b:66:
                    30:9d:bf:af:eb:92:06:46:ef:10:ce:f3:4a:19:d6:
                    f3:9e:33:7d:3b:a1:f6:bb:19:ac:72:c0:03:38:59:
                    c9:93:2b:9b:a3:ad:5d:ab:a6:19:fb:a3:99:bb:34:
                    39:93:7a:12:33:75:d6:0b:cc:ca:42:77:e2:44:fd:
                    fe:b7:65:80:9c:0d:32:69:43:b8:87:76:de:f3:01:
                    da:ea:95:64:1f:ec:9f:98:c5:90:69:bf:4c:aa:77:
                    8a:1d:54:a7:5c:95:fb:7a:05:3b:c3:35:a1:7a:fa:
                    25:ee:fe:b5:00:3e:f1:f1:b8:5a:6e:df:83:15:bc:
                    d0:07:b8:a4:04:84:bb:a6:20:94:8d:3c:54:aa:80:
                    89:25:9a:3e:a3:bf:e5:d6:96:bb:69:93:18:b4:7d:
                    73:58:38:ac:84:55:63:ca:6e:d1:bc:7f:89:5c:fe:
                    b4:69:a2:bc:24:90:ad:76:e1:cb:b5:21:eb:72:8b:
                    db:ff:05:ba:a7:b3:e1:b3:4e:bc:e2:37:fc:c1:dc:
                    cc:d7:4b:1a:18:b9:35:eb:5e:4a:c6:f1:57:8d:f5:
                    91:86:c6:23:3d:ef:a4:52:57:f1:86:50:80:a5:74:
                    4d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8A:6E:D8:3F:EA:32:23:70:21:38:29:FA:B2:0F:DE:9C:7A:ED:BF
            X509v3 Authority Key Identifier:
                keyid:C8:45:03:36:7E:01:C6:C0:C4:CF:09:57:A0:FC:1C:36:BE:0D:2B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUDNn4BxsDEzwlXoPwcNr4NK8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ddb921-2c0f-404e-aabd-e35928b0a97a/1/yEUDNn4BxsDEzwlXoPwcNr4NK8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:be:35:0a:1d:67:3f:61:68:d3:fa:b3:66:61:46:e4:d8:16:
         6e:10:ea:e8:80:03:ca:44:32:ea:0b:24:93:df:b1:f5:d3:c2:
         60:87:1f:17:cc:ad:7f:05:de:10:03:7b:b2:6f:82:29:eb:db:
         ec:72:6f:70:80:5b:54:c0:64:6e:2a:f0:e6:80:63:24:b9:8f:
         d0:e2:e0:4f:4c:56:92:91:c6:41:a0:c1:99:48:25:af:80:1c:
         ab:c6:dc:76:db:06:da:86:8a:b5:a2:fa:35:e2:7f:77:11:1e:
         33:ef:2e:e4:4c:e1:61:f7:39:ef:c1:e4:fd:f5:33:19:be:e1:
         91:b1:79:6b:d1:ca:d8:21:6a:c1:78:da:d1:a0:ce:e0:48:bc:
         d4:21:05:6e:49:08:6c:d8:45:5f:0f:6a:ef:fc:4f:79:c1:f0:
         f3:eb:5f:66:79:c5:e4:93:0d:91:3f:ea:ab:84:6d:a6:bf:d6:
         0f:66:56:09:db:20:a8:f3:9b:db:81:58:35:30:fe:f2:0f:17:
         df:93:8d:3d:17:97:f4:2a:bc:a8:39:e8:d8:99:1a:2e:a2:03:
         76:af:01:50:c9:4d:cb:46:40:27:f8:d0:8e:d6:77:2f:00:e3:
         38:f3:9c:31:a4:fb:c3:cf:44:8b:a5:20:39:13:b9:33:a1:c2:
         75:ff:d4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:58:43 2025 by rpki-client