Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          HtZ23xmEgphKN9DhWSjyOaBjmdnyDALxKO3Sfn3zY/g=
Subject key identifier:   8E:D4:69:6C:35:6E:6F:21:A5:7D:1D:6A:3A:C4:A3:CE:33:2B:9E:6B
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       0197B7EA92ABFCC055315ADD781103763D54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          0EE8
Signing time:             Sat 28 Jun 2025 19:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:32 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: jeLYgwL83CHKYOxzzVOEpCW8bEbIg7Iq4WjggGZJlEc=)
                          2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:92:ab:fc:c0:55:31:5a:dd:78:11:03:76:3d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Jun 28 19:01:32 2025 GMT
            Not After : Jun 29 19:01:32 2025 GMT
        Subject: CN=8ed4696c356e6f21a57d1d6a3ac4a3ce332b9e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:89:55:e9:a9:b0:1a:23:11:89:f2:91:c7:
                    43:63:33:f8:06:72:a7:82:02:ed:36:0c:27:a8:78:
                    b2:e7:33:e9:a7:5b:df:6d:44:89:b0:01:33:fb:44:
                    a0:ee:e1:1f:73:bc:54:38:8c:f3:55:df:97:f1:0f:
                    32:31:2c:5d:17:31:37:fd:4d:57:28:76:46:95:18:
                    38:85:df:4e:c5:bf:ee:c9:95:9b:9e:81:32:95:cc:
                    bd:e2:76:c6:79:78:45:00:93:7e:38:ee:4c:3b:6f:
                    d2:82:ad:99:f9:fd:f9:23:c6:33:63:02:fd:92:68:
                    c7:ee:96:de:b6:59:82:cf:9e:cd:88:23:16:fc:57:
                    7d:7c:93:88:72:2f:a9:4f:47:44:a8:03:48:6c:0c:
                    52:55:50:76:9a:69:8f:69:9e:80:ea:6e:ec:90:c3:
                    0a:85:ef:4d:86:dc:24:84:b0:a0:39:33:e6:67:8a:
                    43:89:d4:b6:34:55:28:45:32:4c:fd:7c:f3:d2:e0:
                    a7:83:54:64:59:ae:08:64:8a:97:38:29:8a:c0:53:
                    f5:b6:9e:94:2a:ef:0e:4b:79:07:5b:2e:25:3b:a2:
                    20:fa:27:65:e5:40:5d:b4:ac:ab:e3:af:b8:66:5d:
                    e0:fd:4a:17:7a:b0:f9:07:53:7c:63:5a:37:58:4b:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:69:6C:35:6E:6F:21:A5:7D:1D:6A:3A:C4:A3:CE:33:2B:9E:6B
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:81:d8:9d:20:6a:40:8d:dd:49:32:2b:c8:db:88:86:ee:e5:
         72:e4:35:11:a2:79:e0:52:0a:eb:b8:a7:e5:33:76:c5:11:ec:
         01:e5:98:b0:8f:23:05:dd:cf:9f:34:ce:66:56:63:81:80:56:
         75:62:9a:68:6b:ce:7c:b4:6f:c1:d9:0a:c3:00:4f:0d:50:bc:
         b7:5e:d5:3d:39:6f:8a:3e:d2:c4:db:c7:47:08:14:62:e0:52:
         dd:eb:b9:ae:66:c4:eb:b8:65:af:af:47:1e:a5:9d:ad:3e:9d:
         cc:31:b0:37:33:84:1a:d7:7c:1a:1f:c6:5f:1a:fc:c7:b3:69:
         9f:ab:e4:3b:db:ad:01:8d:b1:a9:f9:0a:e0:62:c2:6c:d4:2a:
         f2:7d:93:41:99:64:c3:9d:98:7e:a8:62:09:f1:37:77:96:f3:
         fb:80:d9:be:d0:ac:6e:e1:12:bc:4c:d2:f2:ff:b8:c9:46:ad:
         a3:88:e8:88:b4:7e:f0:c5:0b:b1:b9:25:87:90:40:24:13:6b:
         22:0b:eb:54:bd:5a:ac:b4:e9:0b:98:35:26:ca:1e:bd:a1:2c:
         2c:0f:c9:f9:2c:74:f8:b2:a4:97:f5:09:99:43:ee:40:02:91:
         ee:31:e9:41:e2:70:62:5a:3f:85:f3:4f:4e:02:ef:43:91:cd:
         23:23:c6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:23 2025 by rpki-client