Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          rGifeon4dD7HdVAcO2I67UwZsNbD2P5jt/uUUsndGjA=
Subject key identifier:   06:0F:20:9E:BB:B7:25:37:60:12:A4:3E:F8:44:F7:11:25:09:59:33
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       0198D54E1468F27E4717A00083BB9D3FD206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          0E13
Signing time:             Sat 23 Aug 2025 05:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:00 +0000
Files and hashes:         1: VWwybFqWy2MXRW4GlH3TydNfWoU.roa (hash: AWURtsDjcCoYL2cv7BnBoU4GwDRl+uRuBqffs+8EChU=)
                          2: VsWH0dh23uHGDE4kVE5VRVWnLr0.roa (hash: hOVkpMTlrRKsdZ/dZuqLj9eHRUgLLpUyv0shzANzums=)
                          3: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: hrcxLLOCo+MkfmwPlPN1ygGARGD9IoZBvBY8/HfNJPo=)
                          4: gUlf15cCFOrr7zCpeZmrXHzHdJI.roa (hash: BZcCVc7umSblQi+mV0dsvmWzWVZejT4EU9eRPoEWNCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:14:68:f2:7e:47:17:a0:00:83:bb:9d:3f:d2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Aug 23 05:02:00 2025 GMT
            Not After : Aug 24 05:02:00 2025 GMT
        Subject: CN=060f209ebbb725376012a43ef844f71125095933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:30:54:19:c3:12:2a:24:af:06:75:32:fe:
                    1d:9d:b5:e7:74:b9:bb:c8:f7:3d:ce:e4:41:d0:df:
                    4c:d4:58:14:71:ba:4d:84:e3:09:4f:d1:da:bc:d4:
                    05:e0:e1:8c:c1:63:08:b8:e2:88:c3:d3:ce:1e:b8:
                    0f:33:25:ee:31:a3:5e:10:f9:82:e7:36:68:df:fb:
                    72:d7:c4:3c:97:e2:6d:ae:0b:f7:2f:14:46:fb:55:
                    e5:ba:25:80:73:c7:3d:05:da:b8:85:58:a1:cd:07:
                    56:e8:82:d9:31:15:c3:9a:15:e0:56:d8:b1:e4:b2:
                    19:bf:d4:e8:42:2f:1d:27:fc:df:33:b1:81:a8:cc:
                    5f:4f:5e:a4:7a:78:23:b2:1e:e1:54:73:c9:05:74:
                    3f:c8:29:61:56:9d:ed:3d:32:eb:24:25:93:48:b8:
                    84:ff:06:1f:75:8b:d1:60:56:78:c5:5d:6c:d5:2f:
                    28:56:64:13:67:ff:72:cc:93:29:13:09:8a:5f:55:
                    36:70:0d:e5:ba:b0:fc:e1:f9:d7:66:7b:7a:4f:e1:
                    ca:9e:79:25:ed:fe:48:65:ad:7b:99:69:5c:4e:f0:
                    16:d6:2f:82:00:18:45:71:af:92:cf:dc:8d:4c:6f:
                    72:f2:19:e7:6f:12:6d:bf:85:9c:22:bd:a8:03:f6:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:20:9E:BB:B7:25:37:60:12:A4:3E:F8:44:F7:11:25:09:59:33
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:17:1e:b5:34:e8:af:33:e0:55:d4:32:e0:f7:54:ed:13:
         b0:89:8d:f3:bb:2b:c8:34:95:21:81:eb:c9:d9:07:24:8f:dc:
         dd:91:87:56:9c:68:45:95:3e:02:4e:33:79:2b:96:1b:d4:a7:
         50:da:12:ca:d1:8c:7a:9f:c0:84:24:df:31:fa:b9:9e:c3:92:
         7e:3c:75:bf:0f:03:3c:e2:43:1d:cd:55:fc:3c:a4:59:dc:8a:
         47:9a:17:49:41:4c:96:eb:19:3d:2e:0e:04:69:e1:ef:2f:8c:
         c9:ca:2b:fd:30:a4:87:c0:4f:da:03:3c:c2:fd:e8:31:d2:e1:
         22:9c:7c:02:39:b3:f1:d7:c7:19:29:9d:fb:42:5d:f4:76:a2:
         1c:48:52:a2:7c:e7:24:b1:3e:f8:60:32:31:64:50:d8:90:2c:
         33:3d:05:5f:21:25:dc:3c:9d:55:78:dd:2c:e2:df:d8:2e:61:
         59:10:fa:29:54:05:9c:df:be:4a:d5:74:46:18:94:3f:66:b4:
         6b:ab:0b:a8:96:fb:bc:9e:d7:56:16:74:7b:a6:96:10:3f:44:
         53:2a:58:ee:9e:a6:f6:37:04:0d:8c:cf:89:56:16:2e:b6:01:
         5c:46:5d:9b:90:da:f4:a7:c7:dc:0c:a9:8c:7d:4d:39:72:77:
         ae:2f:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:44 2025 by rpki-client