Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          ilTUmgrlHuP5cU65ybn82AS+zNyRrWN8i7cIBpftSek=
Subject key identifier:   92:AB:2B:F1:87:B4:FE:BE:3A:AD:3D:A2:95:E9:BC:F4:D3:88:CE:7F
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       0198D4E057A6B3CEFA2009163C0ACBFB5A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          1579
Signing time:             Sat 23 Aug 2025 03:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:08 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: qCOXbFyhwCDNfl/jjGeZGDTO09CoQWduGMpCjY2A37Q=)
                          2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:57:a6:b3:ce:fa:20:09:16:3c:0a:cb:fb:5a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Aug 23 03:02:08 2025 GMT
            Not After : Aug 24 03:02:08 2025 GMT
        Subject: CN=92ab2bf187b4febe3aad3da295e9bcf4d388ce7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:80:11:90:35:8d:c3:55:0a:30:50:5c:32:
                    fa:26:3a:cf:14:30:f0:b9:3d:60:3d:96:33:70:11:
                    2d:39:06:56:8e:d4:f7:52:8f:2b:5f:a9:fa:52:6e:
                    01:55:a7:03:93:8a:8d:f8:40:7e:51:51:66:6c:67:
                    e5:b7:46:8f:fb:21:53:ff:00:74:83:41:2c:49:6c:
                    4d:27:40:5a:15:df:76:7e:25:aa:c0:8e:97:9b:70:
                    a6:51:5d:cd:90:17:ba:ed:cb:7b:a4:01:08:75:ea:
                    fc:c4:12:99:4d:24:3d:a0:f6:47:57:55:3a:fa:58:
                    f1:cb:4e:a1:99:56:9b:41:20:9d:ee:27:83:6e:b0:
                    9d:8b:e0:25:10:92:d6:32:94:0f:6f:41:ab:18:80:
                    87:2c:37:a1:74:53:df:97:fd:5b:a8:c0:9b:41:e4:
                    fa:0f:29:70:d5:6b:ad:fb:76:4a:fc:7d:f9:bf:53:
                    72:26:0e:bf:b8:0b:5f:08:2a:f6:b6:52:e4:6e:45:
                    b9:c6:1b:20:1f:48:44:1c:06:ba:36:2e:3c:3f:47:
                    65:06:55:9e:f6:34:4b:89:11:40:2c:ce:70:4c:51:
                    b3:58:98:9c:5a:7c:37:4e:5a:0e:f9:f6:dc:31:ee:
                    c4:02:cb:f1:8b:9f:f1:bd:76:60:07:73:a2:da:7a:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:2B:F1:87:B4:FE:BE:3A:AD:3D:A2:95:E9:BC:F4:D3:88:CE:7F
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:27:c2:a0:e1:a9:b4:75:b9:3d:17:af:19:28:61:c6:61:b3:
         64:37:c0:01:0e:b2:6f:21:1a:8b:5b:e9:39:d8:bd:e0:bc:87:
         e5:8e:b1:37:74:02:b2:72:b7:a1:ff:9a:13:63:b3:65:f8:ac:
         9d:ff:13:55:04:9c:3c:2b:19:21:6d:a8:82:6a:3b:33:4b:3f:
         02:f9:fa:3d:80:44:a0:77:44:76:d6:7d:d9:d0:7f:59:b0:dc:
         b6:e2:98:3c:ca:9e:9f:d7:d4:02:c4:24:30:30:d4:10:2f:a3:
         8d:d2:5b:7b:0e:e5:59:42:97:1c:6f:5e:a1:ee:14:74:ee:30:
         9f:37:a6:70:cb:93:da:1e:73:cb:9a:a0:8f:b5:d5:ea:14:35:
         e2:f5:6e:79:47:d7:0d:67:76:50:98:02:59:87:06:8a:dd:55:
         de:55:dc:8a:da:0a:aa:f2:11:e1:fb:a5:c6:4a:2f:71:a7:0d:
         18:7a:c8:60:f4:ed:a4:8d:fa:8c:9a:f1:60:f9:d0:f9:4c:f3:
         ad:e9:ef:68:a3:57:34:ac:06:e9:ed:3c:33:69:43:2e:2e:6f:
         1a:87:ae:2a:95:a0:0d:1c:f5:bf:ce:7f:56:37:2d:55:e4:c8:
         6f:c5:3e:14:62:15:24:bf:37:0f:e8:49:ea:5e:13:a9:51:4f:
         06:e6:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:00 2025 by rpki-client