Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File:                     YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier:          kqOpdUuBvQ4paw3CanvVWN78aEw62oZKFyxZDGDETk8=
Subject key identifier:   A0:B5:08:08:A9:17:8A:C8:0A:59:83:CE:9B:5F:1D:44:14:D1:EB:AB
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer:       /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial:       0198835612A9655EDBE87E338A141DD6AE7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number:          0F41
Signing time:             Thu 07 Aug 2025 07:01:52 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:52 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:52 +0000
Files and hashes:         1: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: OJkOsEXSNEvfR+BdlTh1CZoVq4fm5DUq/Zay9GsMo2o=)
                          2: rUnY51YPiwbRbm0um6mPTqnei4E.roa (hash: wFuBlsraqakBJqLWGUkRh8WpK6rLnJF7HWgWqq0rAM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:12:a9:65:5e:db:e8:7e:33:8a:14:1d:d6:ae:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
        Validity
            Not Before: Aug  7 07:01:52 2025 GMT
            Not After : Aug  8 07:01:52 2025 GMT
        Subject: CN=a0b50808a9178ac80a5983ce9b5f1d4414d1ebab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:81:46:cd:7b:92:da:05:74:67:53:13:02:
                    ce:3c:c2:09:bd:ac:99:50:91:38:26:de:e0:11:4f:
                    75:91:58:27:a5:5b:79:44:c6:91:fb:27:82:26:f3:
                    4d:24:13:2f:4c:c1:26:21:dc:fb:43:ec:73:42:bb:
                    33:83:17:90:20:bd:41:2f:eb:31:66:10:e8:55:b3:
                    61:a5:83:fb:3b:18:36:18:d3:18:37:55:88:ab:42:
                    b8:a5:e0:8b:4f:1c:d4:ad:0b:8c:7b:ef:8d:1f:a6:
                    bd:4e:af:b0:15:ee:9f:eb:01:5b:9f:b5:07:e9:35:
                    2b:1f:a7:16:6e:bd:42:b4:16:86:23:f0:3d:1a:38:
                    59:1c:f4:33:c2:56:de:cb:d6:5e:ea:5f:20:14:1f:
                    e3:9b:da:43:fe:92:ca:25:b2:51:3c:38:65:c8:cb:
                    2e:b2:9e:7c:b0:36:ac:5a:32:67:1c:e6:55:34:0d:
                    88:90:7a:f7:be:01:d5:b9:8e:82:b1:45:2c:3b:69:
                    ae:4c:78:0d:ba:6b:8a:06:62:1e:6e:2c:89:fa:fa:
                    ca:de:f8:1d:b5:f8:97:61:81:35:32:95:db:ae:ca:
                    d6:ca:0c:2e:ba:e0:c3:d5:8a:93:e2:b6:70:b6:e3:
                    28:d3:52:d4:dd:2d:81:0a:06:96:89:27:cc:09:31:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B5:08:08:A9:17:8A:C8:0A:59:83:CE:9B:5F:1D:44:14:D1:EB:AB
            X509v3 Authority Key Identifier:
                keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:36:16:b4:1c:bb:f3:2a:b1:92:62:02:16:91:2d:ba:14:74:
         c2:68:89:48:14:22:ea:ca:e0:0b:44:1d:a4:e5:15:1e:e6:f8:
         cd:78:e7:a0:4c:cc:53:12:ee:ef:b1:d3:cf:90:ad:66:67:7a:
         f4:0a:93:74:60:2c:e1:87:2d:e5:86:80:5e:53:2f:2e:21:4b:
         1a:5e:21:7c:b1:c1:79:9b:ce:45:d8:5b:2f:60:10:ce:a5:f9:
         01:91:20:dc:aa:0a:c8:e2:b0:af:8e:91:0b:c9:ad:25:87:75:
         8e:9a:bb:8b:c1:8e:b4:e5:0a:f9:2e:41:61:36:24:96:08:8c:
         54:df:d5:e4:85:52:6c:79:83:03:25:8a:8a:23:70:c0:3d:eb:
         03:e1:30:3d:9e:c8:f9:5c:17:05:bb:a2:33:e1:10:81:92:9c:
         37:d9:0a:b2:d2:77:72:b5:ef:28:fe:39:57:22:85:81:10:dd:
         55:e2:36:8e:7b:8f:a9:41:b4:3b:57:95:d6:59:f2:18:c8:77:
         17:2b:94:b9:60:97:cd:0b:29:17:39:2c:bc:9c:50:76:e0:24:
         18:7f:24:e9:e9:3d:f2:8b:17:e3:fa:dc:e8:4d:7a:cf:9f:ec:
         5a:82:37:9e:11:4e:44:1b:f7:1d:b7:cf:23:2b:a2:46:71:4f:
         7c:29:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:57 2025 by rpki-client