Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File:                     dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier:          UADlzYqVf0zxcN5ZznayrPUXbOqHrBGtVSNT80qb8/Q=
Subject key identifier:   8B:9A:79:C3:24:54:EC:D1:AC:F6:2E:B1:FE:65:EC:FD:A6:E9:13:CB
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer:       /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial:       01988166A1BD5B20ED859ABE78D9B79C7C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number:          05D6
Signing time:             Wed 06 Aug 2025 22:00:43 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:43 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:43 +0000
Files and hashes:         1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: CXunefETOXiv4564ojxXT4CIvKCYCu2KNjichlJUsNc=)
                          2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:a1:bd:5b:20:ed:85:9a:be:78:d9:b7:9c:7c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
        Validity
            Not Before: Aug  6 22:00:43 2025 GMT
            Not After : Aug  7 22:00:43 2025 GMT
        Subject: CN=8b9a79c32454ecd1acf62eb1fe65ecfda6e913cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ba:28:98:38:ce:58:3e:ff:74:a2:de:b5:77:
                    ab:50:7b:68:22:20:0c:be:3d:bb:33:49:a5:54:e4:
                    98:f6:99:2e:19:7c:86:35:e5:2c:10:52:34:92:cc:
                    20:ab:6f:60:29:19:f6:13:4f:31:39:89:91:e6:48:
                    c3:8a:bc:8c:b7:d1:31:c6:f2:e7:bf:57:ff:84:97:
                    48:38:87:66:46:a4:26:8d:e2:9a:87:18:fe:a1:55:
                    23:4e:df:a3:2a:9a:e7:0b:0d:9e:82:43:53:b4:05:
                    34:41:44:89:87:de:ed:7f:9a:ff:c9:37:b0:13:9f:
                    1e:f6:14:ab:2c:6e:ee:b5:af:e4:54:72:52:5b:f6:
                    c5:65:e5:14:68:74:13:dd:3f:ca:85:de:ed:d9:01:
                    12:61:93:6b:08:45:38:26:c8:bc:98:50:84:44:eb:
                    e5:76:df:45:ab:de:fc:10:bd:82:ec:83:9e:60:ff:
                    84:66:13:1f:e9:e7:17:2e:9e:e0:1f:1c:b4:6f:0a:
                    c1:fc:25:63:d8:49:3b:1d:b9:c1:63:fa:0a:94:11:
                    9e:67:3d:0c:f5:9f:62:f8:5b:a4:d5:14:b3:3e:d8:
                    30:9e:63:ed:1c:0d:61:c8:ea:89:59:94:0d:8d:10:
                    13:05:1c:cd:07:7e:01:5c:ef:58:5f:c7:e4:29:78:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9A:79:C3:24:54:EC:D1:AC:F6:2E:B1:FE:65:EC:FD:A6:E9:13:CB
            X509v3 Authority Key Identifier:
                keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:04:59:45:7a:7b:3e:80:ee:9d:51:44:7d:60:f2:92:48:bc:
         00:69:cd:d9:6f:a5:32:a3:63:de:ea:5a:53:ff:25:c6:d7:a6:
         f7:cf:03:fa:9d:cb:80:d2:bf:74:47:d7:ed:f6:3f:04:1b:2e:
         bb:2b:94:5a:a2:79:da:18:83:c6:0d:ae:92:e3:3a:b6:d6:32:
         00:8a:55:29:58:07:63:b8:b6:7b:3c:e0:c2:a4:47:11:ca:d2:
         10:b9:60:de:bc:af:a4:91:40:1b:c4:50:9c:d9:9a:19:1c:21:
         c5:83:a3:ca:ef:59:ce:d8:58:0b:7e:f7:06:cd:bf:ab:0d:50:
         eb:77:ed:11:4f:52:85:d8:9a:dd:6c:ea:6a:a4:26:56:1b:28:
         8c:48:54:c1:5d:71:f5:7b:16:b8:b4:79:cc:4f:86:4c:1e:b0:
         70:76:37:3d:f6:54:a2:b5:a0:a8:4f:6f:d1:56:63:cd:82:5c:
         76:2a:3d:17:ba:fb:bf:2d:c3:b9:ae:72:33:64:7a:c9:47:b7:
         4c:c5:8b:29:aa:43:8a:eb:cc:3d:e6:9a:eb:53:de:99:d3:ca:
         c5:63:c6:01:ba:17:22:e5:c6:a5:ca:0c:dd:fe:0c:00:7b:a8:
         ca:fd:a4:b1:2f:3e:31:d1:57:1a:9b:fb:95:f7:e2:4d:c7:8f:
         61:04:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:07 2025 by rpki-client