Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File:                     y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier:          jMklrdky0Z1NN/MUC0TQHvoA9zLorHBKJgCnb1HLz3w=
Subject key identifier:   5D:22:79:DE:F2:6A:3E:9A:D4:02:41:95:4D:4A:90:EF:7B:3C:3A:C6
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer:       /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial:       0198D4E0B60EF5B247EBD8ADFC7F7824B0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number:          37
Signing time:             Sat 23 Aug 2025 03:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:33 +0000
Files and hashes:         1: EXTeJ0xnJWTRkgHDu_AxpeIu9iA.roa (hash: qrWsqJSnf72iIeO/vT24niegliGNcW4B28Wyc7Pg4x4=)
                          2: WmXOt_58syUmTkr0foDjL7xiI4Q.roa (hash: +erBuoZ6Ct32kt0eWK4wbg4Fa+dtktRUNZ/SHpJZIGk=)
                          3: X9W0b9P6Ek_A8a9BpsvnX133VZw.roa (hash: 8NxMp0DgdQySkZvwKlqGylrfX1726nGJj79qXZbDO7M=)
                          4: xs2uXZDt7cVA7jwMLyODUbD1r5A.roa (hash: CK+GsD3c++kM/6BpDz2kJy3N5LQsGAx/QUYH0SzjPAM=)
                          5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: KjTKi91JFauvx1OxEO5YTJdcPphU5MfkLKSW1KthIic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:b6:0e:f5:b2:47:eb:d8:ad:fc:7f:78:24:b0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
        Validity
            Not Before: Aug 23 03:02:33 2025 GMT
            Not After : Aug 24 03:02:33 2025 GMT
        Subject: CN=5d2279def26a3e9ad40241954d4a90ef7b3c3ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:09:7f:81:d9:be:85:89:8f:6d:75:a1:28:
                    49:7e:a3:10:07:f1:5e:63:24:f9:62:03:06:99:24:
                    ce:a0:56:d4:ea:06:63:1a:2a:6b:22:53:2a:1b:65:
                    8f:26:2a:3d:ed:ce:07:e5:29:ce:7b:07:8a:08:6f:
                    91:13:c8:01:dc:b2:8b:81:23:72:b5:1b:a4:45:f3:
                    5b:6c:70:b7:72:63:76:ce:2f:8f:c4:0c:23:ae:f8:
                    56:0c:41:be:ff:e6:48:0c:44:55:cf:d4:58:5f:3a:
                    d1:7f:e7:d9:8c:f9:fd:0d:30:7f:a4:6a:8d:55:42:
                    cb:04:cd:32:fb:66:fc:79:bf:a0:f0:d4:63:e0:ad:
                    cb:0d:c3:11:37:cf:3c:69:41:f7:ee:d9:31:9b:fc:
                    cb:61:7a:7e:75:1e:b6:7f:66:a8:0b:a6:5a:4f:23:
                    2a:f3:d5:4f:ef:84:d7:b8:35:66:a9:8d:8f:c3:6e:
                    8b:c1:d0:70:3d:2e:c4:e1:ad:80:b0:88:56:3d:f8:
                    41:2a:40:a9:a5:d5:ca:b9:c0:06:01:a8:a4:8b:5c:
                    1a:b2:c7:8b:84:d4:45:29:e1:93:a2:2c:aa:74:3d:
                    a0:cf:a1:97:21:af:20:f4:04:0c:00:09:18:dc:e7:
                    2f:be:69:45:d2:3e:d8:89:09:9c:da:0e:ac:c2:b9:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:22:79:DE:F2:6A:3E:9A:D4:02:41:95:4D:4A:90:EF:7B:3C:3A:C6
            X509v3 Authority Key Identifier:
                keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:35:f4:78:65:78:02:0c:61:d8:6c:17:a7:3e:4a:8b:0f:
         e6:7c:1b:9f:08:4c:d3:9b:f5:6b:e8:45:1c:24:d4:37:7b:1f:
         66:a4:d7:d5:1c:e4:78:90:e6:da:6b:87:58:8e:93:56:6e:0d:
         ca:c5:0e:e8:23:5b:dd:1e:48:88:d5:fe:eb:91:d5:d0:23:ed:
         19:ac:8b:a1:e6:94:01:2c:0a:01:83:3c:1f:fc:e6:3d:8b:db:
         a8:00:4f:d6:54:3f:64:6b:45:c0:c5:0d:01:0f:a9:81:1e:2e:
         eb:76:90:7e:a6:89:d3:78:4a:9a:1b:30:34:c8:c8:c3:13:6f:
         5f:ed:76:58:1e:cb:28:db:f5:5e:b8:d7:d2:ca:0c:a5:44:04:
         7d:9d:59:67:4e:48:e9:4e:34:79:3e:a3:53:47:32:e2:25:a0:
         92:1c:8c:03:76:98:26:45:72:5f:83:89:bd:0c:d5:1f:9b:15:
         d4:32:44:3b:93:96:7f:41:e0:56:9d:36:b0:4e:74:cc:03:f2:
         dc:ac:a7:ed:de:91:af:cc:59:3b:0b:96:2b:07:20:da:f7:cd:
         de:da:de:c6:19:7f:8b:c9:43:56:f1:18:1d:fc:ad:b2:0d:ba:
         64:23:2d:2e:05:71:71:a1:ee:37:bb:aa:ee:af:d2:44:3e:34:
         16:3d:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:06 2025 by rpki-client