Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          yZwPpBNx6dbUG5uQvtXbUd6iBjOP3osGjU6bHuDyr2k=
Subject key identifier:   76:C4:9C:7A:92:A2:36:93:FA:FE:CA:6A:C7:7A:F7:16:6C:BA:4E:5D
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       01987306C03EE3DFF34A30A3BFBC93044A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          11D9
Signing time:             Mon 04 Aug 2025 03:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:18 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: sgXjsuY5Ls/VDN+4RD1kHqcbeFTWIPhqSBDeS7WWxi8=)
                          2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:c0:3e:e3:df:f3:4a:30:a3:bf:bc:93:04:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Aug  4 03:01:18 2025 GMT
            Not After : Aug  5 03:01:18 2025 GMT
        Subject: CN=76c49c7a92a23693fafeca6ac77af7166cba4e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d1:63:a6:46:9b:61:ff:fd:e8:67:58:79:3d:
                    84:9c:61:8f:81:e6:d0:73:cd:23:25:bb:65:e3:7a:
                    01:bd:31:47:27:4d:e2:6c:3f:41:89:0f:f4:e8:27:
                    39:42:19:3a:80:6e:9d:84:4b:b0:7e:0e:c4:91:82:
                    73:0f:7e:db:97:f9:52:f3:40:02:5f:69:c9:9a:b1:
                    fd:58:eb:6a:0a:78:b0:42:9e:92:26:36:17:ae:4a:
                    c0:8a:30:e3:4c:26:7f:6c:46:f4:2b:8f:9f:b2:42:
                    79:5e:e9:3f:84:a5:99:f8:ff:0e:e4:48:4f:9a:20:
                    34:dd:59:cd:c7:f6:42:d6:48:23:4b:9e:28:6a:84:
                    26:ac:92:6d:84:a2:15:47:7e:cb:e4:ba:5f:2d:b6:
                    4c:78:34:2d:34:6b:ee:0d:34:ea:03:8b:b6:85:82:
                    50:a2:ee:1b:d2:d3:98:4b:33:6c:2d:05:45:54:cb:
                    e6:f6:8e:a1:50:ad:0a:02:4a:d4:68:49:c3:37:ce:
                    a8:5b:5e:3b:fb:d6:cf:65:90:12:25:05:d0:2d:01:
                    57:69:5d:72:24:ed:d8:a9:2b:6f:d5:dd:1f:18:6b:
                    2c:48:53:a8:7b:c0:b8:a4:2a:51:f5:d1:33:03:f9:
                    20:ca:ad:c7:8b:62:fe:2b:30:81:83:28:72:68:ca:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:9C:7A:92:A2:36:93:FA:FE:CA:6A:C7:7A:F7:16:6C:BA:4E:5D
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:2a:24:f5:e6:92:1f:94:f0:d0:57:13:3f:59:b2:26:2d:
         7e:d5:d1:c6:7a:f9:99:d6:e8:c4:3c:82:85:1e:f1:95:26:0a:
         55:0c:40:03:69:5a:bd:7b:9d:c6:12:95:02:48:93:00:94:fa:
         0d:b7:86:3b:d0:d8:37:36:c6:d5:63:3b:85:58:55:e8:28:79:
         6c:80:b0:17:1b:29:ea:ac:d8:57:41:a3:e8:d2:83:e4:12:e9:
         80:16:8d:74:0e:61:0e:6c:0d:5d:92:2c:7a:07:1c:bf:10:4b:
         5f:19:2b:0d:78:73:2a:26:2e:da:e7:0c:c2:b5:a6:dc:ec:f2:
         9e:93:cd:d0:bb:e7:e0:da:03:08:a1:1f:d4:19:07:0a:f3:35:
         4a:f0:98:96:b7:5a:b5:d1:24:e1:1d:a4:b7:22:7b:47:2b:16:
         cb:38:4c:9c:37:8f:c1:69:61:98:cc:3a:a9:1b:ef:bb:97:a9:
         bf:98:a8:d8:f1:40:f1:21:a2:b9:84:c6:13:66:12:1c:1b:3d:
         fe:df:f5:bd:06:3b:a5:ca:bc:d6:56:d9:2f:43:e9:e8:25:27:
         bc:b7:e7:48:87:77:8f:7f:d8:21:fc:a2:5e:ce:08:23:21:26:
         1e:38:98:b8:34:9b:a4:2a:52:27:f1:da:64:f4:ef:39:94:1f:
         29:36:ad:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client