Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
File:                     YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft (raw, json)
Hash identifier:          bjFZJQKfIDfis7ujY9z4sHnoH9qgidRDgZatGT6OkZM=
Subject key identifier:   21:D1:D3:05:94:AA:22:F5:1B:43:A9:42:A4:2B:53:13:FE:89:B8:B6
Authority key identifier: 62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF
Certificate issuer:       /CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
Certificate serial:       0198D85005C9805AC954FF740E66029F855D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
Manifest number:          071F
Signing time:             Sat 23 Aug 2025 19:02:59 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:59 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:59 +0000
Files and hashes:         1: YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl (hash: tTrkN83Ci/xXd7Ze0+QiKyrxdL8JRyRxdsBIJnMPoEM=)
                          2: p0WThpG_MdNvN5PcmLOinicnMKU.roa (hash: mWE6tAtdJrB/Zm93V43/E521MfBc5yD2nOmUvWByQN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:05:c9:80:5a:c9:54:ff:74:0e:66:02:9f:85:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6279db14ac018be3b67d20b67e0d9ba376dbd9bf
        Validity
            Not Before: Aug 23 19:02:59 2025 GMT
            Not After : Aug 24 19:02:59 2025 GMT
        Subject: CN=21d1d30594aa22f51b43a942a42b5313fe89b8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:c4:b0:08:b5:8a:eb:51:10:51:72:10:59:
                    fd:8b:16:57:d3:92:c9:97:41:5f:92:98:99:66:6d:
                    44:4a:36:10:7d:f3:c4:11:d1:a5:14:13:9b:d4:41:
                    79:e6:1a:e2:0b:c0:d3:42:2f:71:35:ed:8c:f5:ab:
                    a0:c3:a3:0d:4a:74:3b:54:67:40:dd:6b:c0:90:ab:
                    3c:04:e6:ea:b4:58:62:93:5f:90:db:e8:b9:e2:ae:
                    40:87:42:6d:d3:45:2f:ac:fd:05:c5:d9:85:8f:08:
                    5f:55:8d:c2:e9:d8:46:4b:50:e5:ed:44:35:76:97:
                    f6:79:16:db:11:47:32:84:73:69:48:a4:d1:8a:65:
                    d2:b7:bf:8f:00:5a:bb:2b:f6:53:93:45:b7:27:7a:
                    c9:bc:53:1c:97:d5:1c:45:d0:83:24:27:53:f1:fd:
                    0c:71:24:1f:5f:d5:67:50:3c:f7:91:9b:48:33:dc:
                    39:a4:56:61:2d:be:20:64:f0:08:f3:f8:9e:8d:9c:
                    cd:bf:9e:c7:96:b6:9f:e3:16:66:b3:d5:a2:0f:1f:
                    18:a5:6f:b0:db:c0:1e:70:1a:57:7b:12:11:37:51:
                    ef:c7:02:07:e0:d3:e7:f6:55:63:88:ca:f1:02:a1:
                    a7:13:7d:f5:af:17:92:11:f8:9c:79:71:31:ee:f4:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D1:D3:05:94:AA:22:F5:1B:43:A9:42:A4:2B:53:13:FE:89:B8:B6
            X509v3 Authority Key Identifier:
                keyid:62:79:DB:14:AC:01:8B:E3:B6:7D:20:B6:7E:0D:9B:A3:76:DB:D9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnbFKwBi-O2fSC2fg2bo3bb2b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2753dd-7444-4b97-b73b-0b34edc418d8/1/YnnbFKwBi-O2fSC2fg2bo3bb2b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:25:15:9e:f6:c5:4c:8d:43:1d:e7:98:a8:22:16:0a:5e:
         43:1d:c0:6e:b8:d7:07:f1:dd:6a:1c:b3:50:38:cc:47:e4:45:
         fd:91:2b:d9:51:cc:60:d9:1c:4b:8d:53:51:71:6a:51:24:6c:
         0b:25:ea:58:13:e6:d3:87:93:fa:42:7e:f4:18:45:9f:b0:18:
         c5:a9:f3:54:44:61:6b:45:95:7c:7c:e6:2e:15:63:78:73:f4:
         8a:09:ee:94:1d:26:ea:95:06:c3:a7:8a:9a:4b:8c:3f:ea:51:
         11:6a:a5:66:d1:6b:53:45:19:cd:1d:d8:ae:0a:95:7f:cc:a0:
         96:7b:db:dc:58:83:33:40:f1:3a:24:9c:ba:77:07:55:ff:f9:
         30:39:72:dc:11:5d:f6:4e:e1:a0:95:cf:f1:9a:03:4e:2b:0d:
         6e:6e:d0:22:14:cb:e0:81:03:91:01:7f:48:d2:82:72:a6:eb:
         13:d5:80:77:55:e6:9b:a8:40:12:75:85:77:82:22:56:5a:23:
         b6:79:85:d5:ee:5e:ee:32:ae:e3:a6:77:03:8b:de:4e:57:87:
         de:81:a4:0a:77:2d:3c:f9:98:1e:09:b1:fc:7e:59:2b:8a:79:
         67:4a:90:0e:b8:a8:94:50:5b:9f:f3:7c:67:fc:0b:cf:ed:80:
         f4:29:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:05:28 2025 by rpki-client