Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File:                     yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier:          KhOqtfTf4FG1vxCy1kyYlrL/R3wvoMnQkGZJq+NO1mg=
Subject key identifier:   73:6D:04:0A:C2:AA:F4:4C:67:7A:A5:20:C6:0E:96:74:20:CF:2A:35
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer:       /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial:       0198D54E909514635EA27777DC0D8AD2AC22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number:          063F
Signing time:             Sat 23 Aug 2025 05:02:32 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:32 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:32 +0000
Files and hashes:         1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
                          2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: 0bcRobH+Kbr+BU6OKqRbC6jGfaJ6X2asbm73OX9LLB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:90:95:14:63:5e:a2:77:77:dc:0d:8a:d2:ac:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
        Validity
            Not Before: Aug 23 05:02:32 2025 GMT
            Not After : Aug 24 05:02:32 2025 GMT
        Subject: CN=736d040ac2aaf44c677aa520c60e967420cf2a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:e8:73:b0:ad:46:82:c0:a8:68:70:38:5b:
                    95:7f:13:69:46:2e:c8:6b:8c:b7:35:01:f9:f2:b8:
                    b1:29:28:cf:d7:53:0d:87:36:2b:d1:08:13:03:59:
                    16:68:13:1f:65:fc:00:b5:6a:d4:20:81:24:3d:00:
                    3d:e5:71:d4:a7:0d:26:81:e7:cc:f4:e1:e7:71:9e:
                    72:8d:80:4a:25:ba:bd:20:74:79:bf:c8:a2:4a:e1:
                    96:4d:ad:6f:73:0a:e6:e2:3a:c1:49:69:35:06:f2:
                    87:27:af:84:2f:83:68:81:bd:3d:67:c5:b1:41:32:
                    da:7b:c3:c5:b4:97:04:fb:f2:90:d5:07:a1:03:44:
                    d6:b0:a6:b6:98:4f:e4:45:b3:bd:3f:2d:34:d5:e7:
                    8a:9b:5f:e0:98:8d:ab:c4:e6:35:a7:80:b0:ca:80:
                    24:c3:a1:68:2c:14:de:9a:71:8a:37:60:6b:60:c4:
                    72:d4:1e:25:25:02:bd:13:10:40:d2:dd:d5:8a:a5:
                    e2:73:48:2c:43:2c:9d:e7:2a:1b:3c:08:e3:75:58:
                    18:31:4b:10:3e:19:e7:ce:23:a8:c8:14:4e:a6:99:
                    7a:9a:41:ca:2d:0e:60:3b:12:80:ec:83:fe:4e:6a:
                    e5:53:65:07:e7:31:95:c4:bc:cb:bd:f2:92:a5:60:
                    7c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6D:04:0A:C2:AA:F4:4C:67:7A:A5:20:C6:0E:96:74:20:CF:2A:35
            X509v3 Authority Key Identifier:
                keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7f:5e:de:b8:d8:37:da:61:08:23:cb:f6:52:4d:dc:7c:1d:
         ab:8e:66:62:b9:01:1b:a5:21:5b:59:93:68:eb:60:b5:b9:d8:
         eb:1c:bf:78:2e:be:41:d8:58:23:e9:1b:d8:51:3e:a6:59:5c:
         bd:12:0e:ff:a6:6b:d9:78:a7:d6:ac:ca:19:ff:cd:c9:46:7b:
         18:1b:a7:9a:36:41:ff:d2:ad:99:25:af:d4:05:06:6b:d4:a7:
         d9:77:20:e2:ea:ce:6b:9b:73:a0:7c:a1:95:09:c1:67:5d:be:
         02:2d:9d:40:0f:0c:2f:81:28:ad:8e:a9:54:6f:62:dc:1a:f4:
         07:99:73:19:e9:66:6e:91:47:a7:65:40:cc:72:3e:2e:80:48:
         0f:d6:e0:f2:7b:34:40:66:13:d3:82:1c:39:e4:8f:ed:0c:ba:
         a8:8c:19:68:97:19:c2:19:90:b4:d5:84:fb:a7:f5:95:ea:b3:
         38:d9:a5:a4:0f:e2:38:79:d8:fc:eb:7e:56:83:de:f8:1f:c7:
         2e:30:4b:f9:75:3a:b9:73:23:1c:23:62:1e:6e:30:5c:26:12:
         e4:02:41:fc:25:60:04:90:8a:9f:be:ee:98:cd:47:55:a1:55:
         c9:43:f4:a1:1c:dc:93:c7:43:99:5e:0a:b1:b1:d9:40:8a:7f:
         21:77:36:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:54 2025 by rpki-client