Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
File:                     YjqxggzkjFedpAxm2FJl8cLPy04.mft (raw, json)
Hash identifier:          fKaqkwtmKDU12UVLWNVIbia5YLYENfkYxM3aBRqUAmo=
Subject key identifier:   E7:28:02:CF:64:82:DB:97:31:E8:B8:94:21:84:33:FB:BC:3B:6C:EE
Authority key identifier: 62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E
Certificate issuer:       /CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
Certificate serial:       01987C77DA27E7699686FCF6355BB0426113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
Manifest number:          06A0
Signing time:             Tue 05 Aug 2025 23:01:25 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:25 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:25 +0000
Files and hashes:         1: YjqxggzkjFedpAxm2FJl8cLPy04.crl (hash: ZBXWfLf/w4KU4JtnnDLZr1n6bPpjgFWg4ZKbPJyGTgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:da:27:e7:69:96:86:fc:f6:35:5b:b0:42:61:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623ab1820ce48c579da40c66d85265f1c2cfcb4e
        Validity
            Not Before: Aug  5 23:01:25 2025 GMT
            Not After : Aug  6 23:01:25 2025 GMT
        Subject: CN=e72802cf6482db9731e8b894218433fbbc3b6cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:66:41:ce:3b:ce:aa:7a:76:65:ab:a2:8d:
                    75:b2:c5:93:6b:93:e8:fc:0a:db:fb:cd:a9:d2:08:
                    e5:0a:43:ad:ae:ef:4d:16:97:c1:58:fd:14:fd:48:
                    1b:a1:e6:4a:e6:7d:fa:43:18:21:73:2b:52:dc:7c:
                    24:aa:33:93:29:af:6e:5e:7c:0a:9d:a6:80:9e:5c:
                    de:34:9e:d2:fb:0d:e7:e7:65:ff:4c:2a:55:98:0e:
                    fe:8d:3c:1d:f0:f4:52:5d:98:86:46:34:a9:af:87:
                    7c:9a:5b:28:6a:32:74:7e:f1:74:59:c6:22:27:f2:
                    73:04:5f:17:1e:a8:af:60:17:f8:1e:3d:e9:91:86:
                    91:6c:3a:78:ac:61:40:64:62:4e:ff:14:ae:7f:d9:
                    ba:07:65:d3:7a:f9:00:90:d7:58:37:8e:61:85:81:
                    36:92:13:38:c5:68:7e:94:95:a9:ec:26:2d:36:d6:
                    ae:09:33:be:17:1f:4b:b3:6f:23:0b:40:0e:f3:53:
                    0e:b2:ee:76:e4:90:39:b9:d9:44:88:8b:65:f4:f0:
                    40:f2:ac:45:a3:d3:1d:c7:33:d2:5b:77:f7:84:60:
                    4f:d0:66:37:16:cf:87:f5:53:ce:68:04:20:65:1c:
                    35:e0:d2:c9:8f:19:de:b9:58:7e:89:44:8b:fd:59:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:28:02:CF:64:82:DB:97:31:E8:B8:94:21:84:33:FB:BC:3B:6C:EE
            X509v3 Authority Key Identifier:
                keyid:62:3A:B1:82:0C:E4:8C:57:9D:A4:0C:66:D8:52:65:F1:C2:CF:CB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjqxggzkjFedpAxm2FJl8cLPy04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c9d5-e27f-44bf-ba42-6c3d11d40d78/1/YjqxggzkjFedpAxm2FJl8cLPy04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:96:5f:73:9f:da:38:4b:a0:e9:89:c2:fa:9d:48:7d:6c:
         07:6c:8f:56:93:e6:1f:69:15:15:c8:e1:f3:9f:44:a5:a2:fe:
         6f:df:45:a7:e8:71:90:47:b5:0c:94:5e:9f:3c:a7:7a:cc:da:
         fc:04:ac:84:35:32:f6:14:12:27:03:b9:2c:54:75:d1:fe:e0:
         7c:27:82:84:4e:95:db:71:64:5c:c5:70:87:a7:4c:00:62:d1:
         af:6a:3e:b1:55:ae:e9:57:93:5a:e4:d5:de:9a:2b:93:76:1f:
         2d:86:8b:f9:e1:d7:53:dc:d5:ef:a4:45:3f:f3:88:4a:1f:9e:
         15:92:cd:59:d9:75:83:f1:a5:5a:99:37:cc:f3:1a:ab:b0:13:
         86:04:9b:cc:0b:4a:67:07:48:81:aa:4f:fc:56:a3:78:3b:cc:
         c4:59:c7:6e:4f:bf:a0:a7:85:4f:b8:9a:e5:75:3a:24:b7:08:
         94:f8:59:23:a9:57:4f:e4:d6:34:f0:d6:e8:51:3d:5c:7d:29:
         ea:aa:df:cd:e7:5a:dc:93:6a:92:67:f2:1d:dc:c0:37:3b:c9:
         c5:21:ae:d0:f5:7e:b0:db:65:cd:e8:8f:04:54:78:ae:c2:8e:
         99:4a:6e:d0:93:45:20:af:52:3e:78:5d:91:47:a3:c6:b9:5e:
         8c:2c:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:54:34 2025 by rpki-client