Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File:                     Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier:          XbtqtNL+9HReDbuDf1RldBOU9b03AP6bVcYTEb/L2iM=
Subject key identifier:   EE:D2:DF:A5:B1:DE:0A:A8:4B:DA:41:BA:DC:DA:E3:4F:A3:E8:45:31
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer:       /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial:       0198733D8391204D16B0546C05E95F69EFA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number:          13B6
Signing time:             Mon 04 Aug 2025 04:01:07 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:07 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:07 +0000
Files and hashes:         1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: WGwyiIC33ysanARFEKdOdqKcpkyvFPxnQNFZ9jaB/I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:83:91:20:4d:16:b0:54:6c:05:e9:5f:69:ef:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
        Validity
            Not Before: Aug  4 04:01:07 2025 GMT
            Not After : Aug  5 04:01:07 2025 GMT
        Subject: CN=eed2dfa5b1de0aa84bda41badcdae34fa3e84531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f3:0a:dc:96:45:63:a5:73:5e:6b:0e:f1:f9:
                    80:22:b1:73:45:10:53:a6:4c:9d:19:c4:3a:75:3f:
                    c1:59:94:f8:5f:d6:15:3b:82:12:ba:eb:67:06:c5:
                    3b:07:aa:b3:dc:e5:96:95:be:22:8d:0c:c1:35:41:
                    63:22:f4:15:a2:7e:1a:0e:49:df:c0:71:7b:24:a4:
                    b3:68:f2:79:bc:44:f2:aa:63:1e:40:62:8b:24:c7:
                    c2:7f:85:9d:d0:cb:cc:2c:42:67:e3:1c:25:30:d2:
                    58:0f:d7:df:d6:ab:6a:86:91:ef:af:a6:a3:10:13:
                    86:0c:53:bf:01:26:d0:9f:5a:6f:93:40:65:40:59:
                    d0:42:93:52:49:33:2a:d3:d6:e4:a6:45:f0:a5:af:
                    4f:52:58:6d:45:af:89:08:b9:6f:25:b2:38:00:58:
                    1a:8e:96:f8:95:3e:bd:1d:19:b9:4d:d1:52:f8:02:
                    8c:60:34:f1:47:09:4d:c0:8a:c5:47:74:51:c4:40:
                    c8:24:9d:73:a9:07:c4:c4:fd:d4:60:c0:8e:fe:22:
                    f0:2a:fb:c6:ec:d6:98:93:19:db:c8:c1:56:c1:f3:
                    57:27:20:63:54:1f:a7:02:b7:32:d8:fe:96:20:2e:
                    24:56:75:5f:98:3b:7d:15:64:d3:cf:74:48:73:c8:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:DF:A5:B1:DE:0A:A8:4B:DA:41:BA:DC:DA:E3:4F:A3:E8:45:31
            X509v3 Authority Key Identifier:
                keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:a6:74:46:e9:8d:2a:b5:55:ff:00:a8:88:19:69:3d:09:
         94:24:9c:b4:29:20:20:19:ec:a4:27:85:b9:76:60:f2:1e:ff:
         25:b5:ec:f4:b4:e6:df:1c:2a:56:4e:e4:ad:9c:c2:db:b6:fa:
         4f:b1:88:1c:75:65:78:8c:7d:b5:e2:3e:36:bc:99:e9:fd:9f:
         61:56:11:0a:48:19:a5:14:ac:e8:48:44:d3:26:1e:10:c1:1d:
         e5:3f:a8:a8:49:21:34:e6:f7:e2:c8:50:a5:2e:98:ed:5c:b7:
         f5:4d:0f:25:db:02:a3:27:a1:05:40:67:0e:2a:3d:b7:08:b9:
         a2:e2:9c:4c:f1:63:e0:77:cf:7b:90:17:99:98:2b:37:b3:22:
         ff:53:83:30:2f:4a:a5:38:fd:f1:87:bc:76:85:69:0a:b1:53:
         5e:8d:29:5e:30:bf:e4:1b:5e:19:a7:d6:70:8e:ac:f9:a1:69:
         30:68:72:68:41:76:30:42:f8:b0:18:3c:23:76:3c:da:87:10:
         c1:01:4e:4c:cc:3f:d8:a5:a2:f1:3e:21:80:5a:a6:e6:fa:3e:
         e5:47:6d:22:4d:62:3a:2b:79:51:f1:ff:8a:8f:20:da:6f:bc:
         00:37:00:0a:69:99:b4:c8:01:c9:0d:08:d7:5e:99:0a:6b:e3:
         be:2a:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:52 2025 by rpki-client