Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File:                     Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier:          77tw/+bTW4ssTvTCiDDJgLT9+29C3D9m/vnG7tQKOl4=
Subject key identifier:   EC:5A:84:95:52:D9:F0:FD:36:61:46:F4:E7:49:06:87:67:0E:7A:4D
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer:       /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial:       0198D515B50FF88EE9F6AB3171D6F9C532DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number:          0FC8
Signing time:             Sat 23 Aug 2025 04:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:26 +0000
Files and hashes:         1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: mTcG7tIwUOT88P1MAcO2UakiOv+C5q0/Epx37Agoe58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b5:0f:f8:8e:e9:f6:ab:31:71:d6:f9:c5:32:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
        Validity
            Not Before: Aug 23 04:00:26 2025 GMT
            Not After : Aug 24 04:00:26 2025 GMT
        Subject: CN=ec5a849552d9f0fd366146f4e7490687670e7a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:25:3d:0e:dc:26:35:2b:14:4a:5c:89:42:
                    4b:e5:ee:00:c4:5c:f1:36:99:f1:cb:b5:fc:8d:5f:
                    7e:f7:8d:aa:ac:b7:3c:03:9b:ac:3e:07:f5:77:a7:
                    8e:f0:f2:5b:ee:ae:b3:43:65:21:7a:55:b1:8d:e3:
                    9f:83:5f:2a:77:93:97:1e:7c:3b:61:74:29:3a:67:
                    41:e4:8e:40:76:de:01:32:0c:2f:6c:f4:ed:7e:5f:
                    48:a3:40:87:84:23:9b:ad:df:7c:fc:f8:c0:40:43:
                    86:19:39:a6:83:f4:3f:43:4c:87:5f:f4:18:56:ce:
                    ec:8c:2e:8c:83:93:ba:a1:b7:e4:d2:21:d8:4d:73:
                    6c:d9:a2:7d:d3:ff:49:c9:9e:d2:62:bc:8a:6d:9b:
                    7e:07:e6:87:ee:fe:c5:81:19:4f:49:f0:eb:0d:0b:
                    12:6d:be:fb:1d:7e:2e:36:3b:28:30:f3:54:5a:4d:
                    9b:99:92:dd:bc:12:0c:6a:79:be:aa:ab:6f:74:19:
                    82:d4:70:81:ff:df:c1:3f:c8:b4:95:3c:61:32:6f:
                    2f:dc:1c:b0:2d:29:f4:5f:c7:8b:8c:28:98:83:f9:
                    fc:3b:ea:53:5c:45:55:5a:68:7e:11:84:ca:11:15:
                    65:9b:ca:74:3c:7c:ce:ef:65:eb:8f:f2:f4:e9:e7:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:84:95:52:D9:F0:FD:36:61:46:F4:E7:49:06:87:67:0E:7A:4D
            X509v3 Authority Key Identifier:
                keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:af:e6:78:da:ce:e5:68:29:a5:ce:a0:ab:ad:f8:4b:4c:7f:
         ae:b5:3e:3a:b7:2a:db:0f:ea:02:10:ec:f7:da:cd:ee:44:78:
         fb:7b:a2:12:09:82:55:a8:49:f7:3e:47:48:98:a9:3e:85:a5:
         58:1b:e1:37:17:6b:d6:1a:bf:8d:0d:ef:60:c3:a7:71:29:14:
         ce:f9:73:60:df:ca:76:18:47:64:61:91:41:f6:26:5e:d3:c6:
         ba:91:09:b1:cd:77:68:05:90:ee:05:01:22:31:74:07:16:17:
         5c:77:89:42:c6:e1:db:21:b3:be:73:93:b6:d5:90:63:50:38:
         2e:b9:aa:3a:9f:84:63:7f:fe:bf:ec:6b:f7:b7:ff:13:2b:b4:
         30:7a:00:0c:d1:e6:d9:75:94:d9:70:4f:fb:a6:b9:e4:b4:68:
         0f:e7:20:a2:52:ca:94:1f:fd:e0:5b:4b:18:4e:42:41:da:2a:
         21:b8:66:23:e2:91:c5:21:f3:83:86:0c:75:75:bb:f2:da:4f:
         64:66:b6:b4:1a:5a:78:68:a2:4d:c0:46:07:82:b5:93:20:fa:
         f3:6a:12:03:b2:78:8d:f0:19:36:3e:57:04:03:13:f9:15:71:
         05:16:1c:d8:8e:8c:78:89:60:63:64:cd:ab:5a:1a:f3:a5:55:
         94:f0:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----