Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File:                     yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier:          wYi6WiN/O0ggPDBPj4j28AlJpOOlEL3fizJPVF+VtMg=
Subject key identifier:   9F:3E:A1:14:F6:06:EE:77:98:E4:C4:A0:5A:F9:ED:BB:7A:80:04:95
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer:       /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial:       019873E39A75643FF0896AB9476EA95BD423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number:          15A5
Signing time:             Mon 04 Aug 2025 07:02:32 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:32 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:32 +0000
Files and hashes:         1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: /pOH1Mw4WMpOuhk9p4+kr770nWM1n9SX5IRhlB6PrCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:9a:75:64:3f:f0:89:6a:b9:47:6e:a9:5b:d4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
        Validity
            Not Before: Aug  4 07:02:32 2025 GMT
            Not After : Aug  5 07:02:32 2025 GMT
        Subject: CN=9f3ea114f606ee7798e4c4a05af9edbb7a800495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:3d:8e:81:cb:91:55:93:16:e2:dd:96:88:
                    df:c8:b9:1b:af:58:23:6e:56:d0:b8:93:54:5f:6b:
                    b4:c3:be:7d:6f:e1:32:fd:1a:fa:e2:66:07:1e:c0:
                    92:24:9e:dc:6a:40:5a:c2:5d:b6:f7:65:83:f1:da:
                    24:b1:fa:4e:d9:82:f1:36:1b:d0:a6:39:51:ab:ed:
                    6e:10:08:3e:c1:40:4d:b2:8b:76:63:87:36:a1:1c:
                    ab:cb:ba:99:2d:82:95:e1:a1:25:09:f5:08:b3:e6:
                    52:f8:a8:99:b9:24:88:27:e9:58:c3:bd:f5:f4:d7:
                    f5:c5:33:f4:9b:2f:ab:95:1a:26:70:49:77:d0:ff:
                    82:f9:71:fc:61:ec:d4:5a:0a:32:84:94:fd:8e:87:
                    d1:45:a3:88:d1:2f:80:51:19:84:ef:8e:e9:2e:7f:
                    81:3a:23:03:a6:b5:b5:c6:00:ef:29:61:f6:18:f1:
                    da:ce:9e:81:40:40:0b:4e:97:d0:73:ff:6f:58:e3:
                    05:84:ac:26:d8:3f:f2:f5:12:bb:0c:11:4b:96:92:
                    56:41:aa:01:7d:0b:ed:88:fe:da:97:f0:02:00:0d:
                    97:85:dd:ff:27:94:52:40:33:54:73:e3:71:c6:2c:
                    33:7d:36:08:3a:17:3c:a0:25:2a:a3:6d:b6:66:7a:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:A1:14:F6:06:EE:77:98:E4:C4:A0:5A:F9:ED:BB:7A:80:04:95
            X509v3 Authority Key Identifier:
                keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:69:15:35:6a:1e:4d:11:aa:1f:24:32:48:0d:f3:7b:e2:fa:
         9a:43:58:f8:44:4c:0c:8c:c7:49:9f:11:32:12:f9:a0:07:04:
         40:2a:61:5a:b4:2d:b3:77:4e:1d:5f:1e:64:09:ec:ab:ee:53:
         c3:f0:22:25:bc:ab:a7:a3:f2:88:c2:fd:9e:ba:b3:12:f5:80:
         5d:88:14:9b:64:8f:a9:d1:f1:7d:b3:76:34:59:2d:28:3b:44:
         c9:ea:4c:b0:b2:dd:bb:61:45:6a:93:74:54:b1:7c:f0:56:da:
         05:89:2d:28:55:7e:10:98:66:e4:9b:1e:65:75:f4:3c:7d:b7:
         f8:6a:c3:9d:a9:6f:84:62:71:08:6c:be:df:b0:fa:0b:51:0a:
         b7:b4:7e:0e:6b:c7:8f:c0:23:23:12:0a:c0:70:44:f4:41:d9:
         56:c4:63:64:1d:3c:e0:5b:bb:5f:3b:b2:03:b7:fd:48:a7:66:
         3e:f8:3f:68:e9:6c:7f:5d:0e:75:60:0f:24:fa:bb:dc:2d:02:
         93:f0:53:61:1e:e5:6d:41:f1:61:11:8f:c4:a7:da:58:b1:7c:
         a4:ae:43:c9:97:3b:ac:27:ad:bb:87:82:6d:c5:4b:62:86:c2:
         70:35:11:d5:e4:4d:09:2c:4a:84:5c:df:6e:a0:a8:ee:df:9f:
         e9:91:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:05 2025 by rpki-client