Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          inKBODdjr7NFgK0b/nWM/Wtx8cU8/MV5BZdavBCMvuc=
Subject key identifier:   4B:84:C4:27:59:BB:E8:86:4F:0F:A4:77:44:A1:F7:F2:FA:68:01:6E
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       01987562B804D18E0C3A1E1A24E9D5857AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          05E5
Signing time:             Mon 04 Aug 2025 14:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 14:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 14:01:00 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: 315QBcGKPNaYqd3xOiiZsBGa26ZRj+sI+xzRwg3rLQM=)
                          2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:b8:04:d1:8e:0c:3a:1e:1a:24:e9:d5:85:7a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: Aug  4 14:01:00 2025 GMT
            Not After : Aug  5 14:01:00 2025 GMT
        Subject: CN=4b84c42759bbe8864f0fa47744a1f7f2fa68016e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:b9:e6:22:92:ff:af:2b:2a:b9:dd:31:ad:
                    c0:35:c6:b0:a8:bd:2f:2f:03:82:c2:6c:58:cb:07:
                    6c:11:2b:af:dd:09:60:29:87:78:05:33:6c:dc:a2:
                    dc:e2:d3:59:25:0f:17:b9:a6:d3:a0:c2:d6:c7:5d:
                    1c:51:8c:a6:10:c4:f3:93:ef:24:55:d7:95:3e:ac:
                    92:dd:4c:5d:1c:f0:e9:3a:3a:f2:10:d2:c3:6b:21:
                    03:09:c5:35:13:ab:1c:14:c8:49:c1:e2:2d:72:f1:
                    e2:2a:85:00:51:8d:7b:bb:7e:ca:0b:cf:eb:30:1b:
                    dd:39:b8:31:ae:74:4d:84:66:01:48:fe:96:4b:06:
                    63:5b:21:e3:78:d1:d2:d4:2e:5d:81:5b:30:cc:9d:
                    b6:0d:02:7e:a6:fb:35:75:25:79:5a:75:24:08:ac:
                    f4:76:51:74:b8:69:24:64:52:cf:49:ba:b3:f4:8d:
                    f3:46:1b:0f:b9:3b:89:df:b8:09:1a:7c:6b:b2:ea:
                    58:a3:58:a1:ed:85:68:14:9c:a7:db:a0:0e:5e:d2:
                    ca:bc:8e:87:14:dc:d0:ad:18:ee:77:55:d6:5d:b2:
                    e0:90:3f:f0:96:7a:4b:da:95:af:88:ed:82:c4:67:
                    40:16:a9:e1:30:23:9e:cb:e9:30:7f:7c:f2:e4:18:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:84:C4:27:59:BB:E8:86:4F:0F:A4:77:44:A1:F7:F2:FA:68:01:6E
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:07:f3:e6:47:c2:3d:e7:e8:dd:d5:e1:c7:b9:8f:6c:f1:
         f4:68:4b:9c:89:be:98:c0:41:a2:be:7a:cd:c9:e0:97:cf:dd:
         e8:fe:52:5a:65:d5:a5:e3:cd:e7:a3:68:7e:98:79:d9:50:1d:
         69:23:04:e9:16:78:ef:f8:d1:da:c0:55:cb:a5:24:6d:55:68:
         75:2d:73:dc:fb:be:74:41:55:1b:76:f7:e2:7a:23:77:88:13:
         bf:e8:a2:d1:2d:b9:80:ad:1e:b8:b6:69:01:b3:51:50:36:f1:
         4b:e8:5e:a4:2c:22:f4:8e:8e:41:94:c8:d4:ba:64:65:87:5b:
         96:cd:d9:2b:3c:0f:e2:c9:dc:47:34:72:fa:39:05:9a:20:e9:
         6a:71:e9:5c:d1:34:ef:98:c1:10:a6:1d:82:eb:f7:98:4f:f5:
         f9:45:8a:64:b5:43:e4:33:69:47:36:ba:22:15:65:cd:0a:84:
         8e:15:34:eb:f6:23:a8:d7:a7:43:55:76:aa:a0:00:9f:51:56:
         bc:bf:e8:65:da:c9:2c:86:29:6e:8e:77:fc:57:82:97:23:3e:
         bf:75:49:cb:c5:29:db:85:bb:fd:60:65:77:be:26:9b:89:e5:
         31:54:8b:da:85:7e:1b:86:95:cb:51:d0:03:89:4f:f5:41:c6:
         30:17:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:35 2025 by rpki-client