Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          Dhcc3bYOlO0vQcBU98N3HcUpcWB/B+khJ/cHV58kCxw=
Subject key identifier:   E6:21:69:7A:E8:3B:AC:25:FC:1F:2C:B0:11:D5:CD:C1:59:03:F1:98
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       01987E65E182ACB4577B13C8403CF451D5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          0DAB
Signing time:             Wed 06 Aug 2025 08:01:02 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:02 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:02 +0000
Files and hashes:         1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: luD9jHBxlgcJVr/Zs/Xx5FO7No6wu28CkjO4wlf/Fhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:e1:82:ac:b4:57:7b:13:c8:40:3c:f4:51:d5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Aug  6 08:01:02 2025 GMT
            Not After : Aug  7 08:01:02 2025 GMT
        Subject: CN=e621697ae83bac25fc1f2cb011d5cdc15903f198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:c4:ff:de:e7:8e:42:0f:82:86:2a:c3:55:
                    58:e9:23:2d:58:b0:14:00:c2:6c:00:12:11:9c:43:
                    0f:91:df:f3:67:5d:94:9f:35:f4:5c:cd:4b:66:00:
                    9e:d4:39:24:e1:84:d5:84:4f:0f:e1:fa:8d:85:ed:
                    b6:c6:19:56:33:69:10:34:60:9b:94:91:d2:c8:9d:
                    89:d1:3a:67:c1:ef:b1:62:ef:51:fd:3c:22:a6:f8:
                    45:a1:10:ee:b1:c5:6f:22:d3:2e:cb:cc:b8:36:11:
                    ef:4c:45:f1:96:d1:47:a4:72:49:34:e7:10:5a:3f:
                    3b:b9:f4:ea:a6:9b:8f:49:51:b4:4a:db:bd:cf:99:
                    e4:f1:ca:84:0c:38:70:3a:fc:8d:e2:52:20:28:ac:
                    42:20:e4:87:c4:bf:19:d0:da:da:a4:f6:f1:0a:d2:
                    ff:b2:1b:6b:20:83:e6:17:27:e7:85:2b:27:4b:90:
                    ae:54:44:17:c9:24:c3:b1:07:3e:55:4e:45:53:0f:
                    8e:5d:94:12:a6:4c:27:9b:ce:59:bd:73:78:10:a5:
                    ef:8a:8a:43:63:8b:90:9f:5a:66:9d:e5:11:53:86:
                    ad:81:dc:78:dd:b2:c1:86:73:df:9a:fc:3c:5c:cd:
                    cf:8f:01:e0:59:c6:29:ef:f9:9d:2c:7e:1d:49:b8:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:21:69:7A:E8:3B:AC:25:FC:1F:2C:B0:11:D5:CD:C1:59:03:F1:98
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:54:9d:91:93:d5:5f:4f:23:6e:12:96:f1:36:89:06:6c:6c:
         40:70:5e:77:07:27:ad:87:1e:2b:c5:2b:3b:b0:e8:8e:5c:d8:
         2a:1d:57:7d:00:d0:ec:8c:33:df:a9:cb:43:95:af:25:54:45:
         56:0e:61:89:96:b2:f8:8b:6a:52:87:35:e8:47:14:7c:61:bb:
         49:9d:48:ac:e5:42:02:70:ae:d0:05:12:81:94:bc:bc:64:dc:
         2b:61:c6:a7:c8:ea:5a:73:7b:64:be:81:85:88:43:b1:ca:a8:
         1e:38:43:4a:f7:6e:a4:0d:9d:27:84:6a:39:a1:b8:b6:ff:2b:
         37:1f:6e:7a:36:96:44:4b:13:82:53:26:24:a3:f6:b2:12:b6:
         20:09:4f:8f:19:b2:7d:0c:96:66:10:80:95:68:9d:d4:8a:02:
         25:86:17:4a:8e:4c:e0:fd:94:18:a6:b9:e0:7f:39:36:65:62:
         68:60:9f:e0:c1:3e:d4:6a:11:c2:31:7a:11:83:28:3f:17:27:
         7a:a6:95:aa:a6:cf:67:10:df:49:06:8d:a1:a6:eb:d0:93:be:
         23:17:e4:90:d4:dc:9c:0f:e2:d0:e7:40:15:8d:a4:de:a8:5b:
         4c:82:e2:44:77:25:d9:21:83:fc:84:ee:13:62:d7:d0:97:bf:
         21:e9:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:01 2025 by rpki-client