Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
File:                     Ymd-4I9LshmAS2czR8OgtqMy1yI.mft (raw, json)
Hash identifier:          WoM/eTsKSTQKLaHJP/1koybgW/QHz1NM1v7vukvyfyM=
Subject key identifier:   5C:25:80:08:61:BD:CA:57:E8:20:09:59:BD:2F:DD:47:7F:9E:87:F1
Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22
Certificate issuer:       /CN=62677ee08f4bb219804b673347c3a0b6a332d722
Certificate serial:       01987E65AAF96217F3F68B4F1510F09551A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
Manifest number:          05DA
Signing time:             Wed 06 Aug 2025 08:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:48 +0000
Files and hashes:         1: Ymd-4I9LshmAS2czR8OgtqMy1yI.crl (hash: Pvt2SjszbXGklijNq5FOJ+ZlKnfQu7p+oJKtjiqD+p8=)
                          2: gQ1Mk4Ko4bazOy7pZDxAv9B_6qk.roa (hash: FoB5dUGf24mZ9gRXtihHS6AK0Gj+K7gCvGHMZywvDao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:aa:f9:62:17:f3:f6:8b:4f:15:10:f0:95:51:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722
        Validity
            Not Before: Aug  6 08:00:48 2025 GMT
            Not After : Aug  7 08:00:48 2025 GMT
        Subject: CN=5c25800861bdca57e8200959bd2fdd477f9e87f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:11:ea:14:f3:e1:1b:14:62:b7:17:e9:25:
                    2c:1c:4e:46:e8:7a:70:24:cb:3a:b7:10:41:bb:74:
                    30:11:6d:38:94:1f:c7:e6:8e:0b:1d:42:26:4a:3c:
                    c0:96:29:70:3d:f6:e9:b6:92:97:de:bb:e0:13:1f:
                    01:2f:55:80:0c:a5:be:5c:af:37:4f:4c:ce:a2:ed:
                    cf:b1:6e:cb:cf:84:ec:b6:38:56:17:33:a2:bb:ce:
                    3b:75:08:9c:88:a0:a1:17:a2:94:1d:c2:f6:a6:4f:
                    6f:b9:1c:d9:d9:6c:0d:0e:34:b3:ec:78:05:e4:1b:
                    32:1a:45:30:06:6a:ba:76:2f:ae:fc:f2:6c:e5:94:
                    ae:54:0b:cf:d5:0a:ec:9d:90:ae:e5:8d:d9:3f:ea:
                    da:76:65:2c:5e:72:94:14:f8:0f:b9:0c:e7:7d:b6:
                    cb:4e:3d:15:61:af:d3:08:db:f7:bc:59:f4:09:2e:
                    9e:a1:ea:44:e0:7a:e7:90:42:c1:22:cd:b2:dc:2d:
                    72:92:e5:b8:43:19:34:5e:7f:0e:d3:fb:c2:ef:9a:
                    c4:93:b7:85:3f:d1:04:ab:31:8a:73:83:1a:01:5d:
                    c3:8c:e4:4e:bf:da:fb:d2:e4:42:77:db:1e:da:f2:
                    3f:7a:29:6d:5e:11:b9:a9:5d:83:d1:4d:aa:ea:fa:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:80:08:61:BD:CA:57:E8:20:09:59:BD:2F:DD:47:7F:9E:87:F1
            X509v3 Authority Key Identifier:
                keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:37:cd:70:5f:90:3c:05:f2:3c:3b:8a:4d:f5:74:20:78:ca:
         65:55:39:dc:74:19:7d:85:44:c2:a0:16:e8:c0:4b:b9:d9:0d:
         8a:ca:af:80:29:ae:a9:f2:b5:89:0b:7d:b3:0a:52:71:c7:ac:
         4c:27:bf:6e:29:d7:45:9a:8a:b3:90:c6:f8:91:9f:0d:ce:ce:
         e1:9d:51:ff:2b:fe:5c:b7:23:4a:fe:b9:ca:2e:7e:1b:6b:f8:
         93:e3:69:b1:c2:89:8d:b5:6e:8a:d6:2a:9b:9f:50:fd:a0:1a:
         85:ff:9f:f2:06:3f:50:d3:6c:c0:e9:e8:24:fb:b9:86:1e:e6:
         68:0a:de:78:79:ce:e1:08:8e:1f:39:d6:99:dd:8e:21:4a:08:
         87:5a:7b:d0:03:de:94:f7:d5:72:8e:87:66:93:83:a9:a9:98:
         c8:77:b5:0a:1e:d4:d1:50:f3:af:9f:58:07:d8:40:f5:5c:1f:
         e9:2c:b7:47:fb:4c:ef:e6:44:96:61:43:98:89:ef:47:52:e2:
         a7:41:56:cf:7b:db:e4:75:a1:22:cd:d7:da:a1:47:56:cf:61:
         2d:24:bb:67:de:5e:5d:4f:57:2f:5b:ac:8a:1a:b3:1e:08:37:
         f7:2c:0b:b2:4c:e0:ed:89:e1:9a:87:80:65:9f:53:48:81:70:
         d8:91:9b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:27:34 2025 by rpki-client