Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File:                     y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier:          Im/ehSfrugyh3t9Lm7nbikQsgCYtXA/yRUh5wXLScYU=
Subject key identifier:   A6:5E:78:EA:54:C4:65:7F:D9:39:F2:F8:DD:EC:D2:D1:45:CA:73:91
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer:       /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial:       01987C093E2B8B934CE404EBAC426A08021A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number:          082A
Signing time:             Tue 05 Aug 2025 21:00:37 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:37 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:37 +0000
Files and hashes:         1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
                          2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: wdf2Dr6aNsLyjfcqNYkEyCGwv0rQyEUHc9CnVTAKXlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:3e:2b:8b:93:4c:e4:04:eb:ac:42:6a:08:02:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
        Validity
            Not Before: Aug  5 21:00:37 2025 GMT
            Not After : Aug  6 21:00:37 2025 GMT
        Subject: CN=a65e78ea54c4657fd939f2f8ddecd2d145ca7391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:17:f2:84:ff:1b:24:b5:fe:bf:86:9d:23:
                    c3:da:3f:0a:4c:02:b1:d8:70:c3:4b:5b:e7:f2:93:
                    73:1e:0a:3b:8d:b5:18:ac:49:ca:70:a5:8e:be:a6:
                    ed:f1:fa:4d:05:5d:94:0e:a2:9a:c2:05:32:04:a1:
                    5c:a2:51:af:02:d9:71:e5:e0:30:b1:d7:c4:ba:eb:
                    fc:7f:96:b4:99:92:74:e2:e9:62:53:cb:4b:71:d6:
                    f1:65:9e:17:27:23:20:7f:05:e1:2a:8a:60:b1:d4:
                    30:d4:d2:a3:5f:09:5f:2d:2b:10:82:e7:4e:33:e9:
                    59:f9:68:34:11:5e:6d:76:0b:20:ad:12:1a:e7:7a:
                    0c:29:07:3b:4b:88:57:a1:8e:0a:9e:e6:77:c9:72:
                    46:ce:54:ef:87:dc:e6:3d:d8:d0:d7:83:26:c9:bd:
                    74:b9:dc:e3:36:42:90:44:f4:ec:49:75:58:03:b5:
                    64:62:3c:5c:ef:51:c7:93:06:30:2b:15:ff:5f:76:
                    3c:1b:d8:38:f6:bf:28:df:8d:cc:49:54:45:e2:2e:
                    72:17:23:35:6f:c0:50:d0:75:61:78:ea:c8:b7:76:
                    87:43:a3:18:3d:eb:34:08:09:7f:56:e3:93:e2:7d:
                    99:ce:58:52:a9:a9:65:18:94:c2:27:2f:98:ad:23:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:78:EA:54:C4:65:7F:D9:39:F2:F8:DD:EC:D2:D1:45:CA:73:91
            X509v3 Authority Key Identifier:
                keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:35:3f:59:25:53:2b:20:3a:bb:79:56:96:35:07:b6:bb:d7:
         ea:bc:72:fd:47:70:a3:27:e4:24:96:6a:25:cb:d6:53:b6:f6:
         a4:0c:82:77:14:a6:79:77:4d:54:04:5c:c2:54:59:5e:e0:9a:
         33:6f:39:df:02:e6:33:75:0d:83:9c:f3:aa:0e:ca:4f:a1:4b:
         d2:03:e8:04:5f:0b:8e:c1:71:2c:40:04:53:de:56:dd:e7:fe:
         c6:60:1e:13:fb:6b:20:bb:c6:77:0a:91:5f:3f:11:4a:9c:51:
         f6:1b:4f:6a:f2:e5:c7:03:89:d3:8e:15:37:e6:45:39:24:4a:
         91:c5:8a:ed:6e:8d:6b:5d:3c:a3:83:49:d8:6f:3a:7f:43:9a:
         a7:51:9e:68:6a:1d:21:a9:9d:50:da:58:41:90:43:8c:28:bc:
         2c:46:30:a8:3c:a7:89:42:19:5d:12:e5:01:d7:89:a1:83:59:
         fe:09:00:69:35:2b:6e:10:86:e9:8d:73:1d:79:3a:2b:36:6b:
         56:12:51:16:d2:24:9c:33:35:99:33:19:f7:05:f1:5f:27:87:
         e2:4e:13:e5:a7:0f:4e:0b:dd:09:54:1a:92:76:6f:0a:a9:ab:
         97:a0:13:ce:fb:36:67:34:dc:89:ce:1f:a7:ef:ee:c7:53:2d:
         36:57:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:23 2025 by rpki-client