Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
File:                     Yap9YxOr3CfJLQulSehoP5qPFQ8.mft (raw, json)
Hash identifier:          QWPN7Rt/k4gZSiZG2GInJBT0mNeNNf33xuCiuDkcE2o=
Subject key identifier:   64:CC:76:FC:E4:43:A6:E3:E3:C6:DD:EC:C5:2D:22:CF:20:F1:B0:A1
Authority key identifier: 61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F
Certificate issuer:       /CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
Certificate serial:       0198D5161C605B4BE7F2AD18AF4AC3B10111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
Manifest number:          05B3
Signing time:             Sat 23 Aug 2025 04:00:52 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:52 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:52 +0000
Files and hashes:         1: Yap9YxOr3CfJLQulSehoP5qPFQ8.crl (hash: cjNx2glzjjuceajE+0a/M6qeXB2X8NEu7jfwan/cIXU=)
                          2: b8AVOGW_uWiltgqsOrfUVPuVbhk.roa (hash: g14bBKv/Ezpz+JlzQJs8s4kzh2JITmna3X17wkbp61k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1c:60:5b:4b:e7:f2:ad:18:af:4a:c3:b1:01:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61aa7d6313abdc27c92d0ba549e8683f9a8f150f
        Validity
            Not Before: Aug 23 04:00:52 2025 GMT
            Not After : Aug 24 04:00:52 2025 GMT
        Subject: CN=64cc76fce443a6e3e3c6ddecc52d22cf20f1b0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6e:b3:12:4d:11:e2:11:d3:f3:81:c4:63:20:
                    19:b6:c2:df:4c:d1:81:a3:ae:e1:6c:21:69:89:45:
                    ef:26:a2:f6:76:9d:4f:e8:14:a1:b5:9d:74:5e:4e:
                    fe:cc:8f:6a:c2:49:5e:ed:22:16:29:31:bb:dd:c0:
                    ca:2a:ef:68:bc:42:73:cb:ce:d6:6f:90:28:60:13:
                    25:15:22:70:04:8b:5e:15:c6:51:fd:cc:04:85:42:
                    0c:02:a8:a0:23:c0:69:75:80:e6:b0:0c:2f:27:ff:
                    58:e1:c1:94:38:9f:51:c8:1a:f5:41:e9:ad:7e:55:
                    f2:96:be:a0:29:77:fd:6b:87:2a:f7:c1:8f:6a:28:
                    d7:0b:4f:5c:4f:9a:97:7a:d1:dd:0a:f8:b2:6c:8f:
                    7a:29:38:35:6d:1b:42:d3:27:51:10:0b:18:b4:17:
                    bc:12:05:93:ff:80:3a:8c:df:f3:aa:c8:2d:bf:9e:
                    74:8d:e3:be:8b:62:40:de:6c:56:71:54:1a:5a:84:
                    ab:ee:81:63:ea:52:80:42:bb:14:cf:87:cb:46:40:
                    9b:e9:e8:2e:ee:fc:aa:34:ef:45:27:7e:b2:51:95:
                    10:ff:ef:00:35:9a:ba:6f:cb:f6:c2:40:8c:10:af:
                    18:3a:c8:58:d5:f6:54:ac:54:b9:b5:75:d0:cd:2e:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:76:FC:E4:43:A6:E3:E3:C6:DD:EC:C5:2D:22:CF:20:F1:B0:A1
            X509v3 Authority Key Identifier:
                keyid:61:AA:7D:63:13:AB:DC:27:C9:2D:0B:A5:49:E8:68:3F:9A:8F:15:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yap9YxOr3CfJLQulSehoP5qPFQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d230cf-853f-43b7-9741-dca8da876fe6/1/Yap9YxOr3CfJLQulSehoP5qPFQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:04:34:4b:7f:d1:f2:8d:40:9a:76:ec:5e:00:2d:46:3b:a6:
         60:65:1f:88:d3:08:a1:77:94:26:41:7f:bd:8f:8c:ff:30:de:
         8b:10:43:54:e6:14:c2:4c:2c:4f:a5:3f:50:cb:0d:85:5d:56:
         cd:f8:67:12:b0:5d:86:5f:e6:00:e8:22:c8:29:85:06:88:6f:
         54:f7:45:d9:2e:d2:8f:97:e3:81:c0:42:25:15:db:36:2c:0c:
         09:28:b7:ba:d8:f8:15:d4:6c:63:64:39:25:11:b1:02:c4:da:
         25:d4:ee:2a:b2:8d:71:ac:35:9d:ca:a3:eb:43:32:fb:fd:b9:
         97:ef:dd:3b:65:4d:83:d5:06:e6:1d:25:d9:6d:09:61:9a:fe:
         e3:c8:42:3b:0c:88:10:5a:5b:23:6e:43:d8:a6:ac:bf:22:a1:
         df:2e:67:fd:ea:70:e0:47:1a:6d:45:4d:97:21:9b:78:5c:7e:
         9e:01:69:98:b6:ca:2b:ae:b4:a5:bf:3c:a4:48:7e:29:a6:a3:
         22:c6:de:fe:c9:e3:b2:d0:63:06:3d:70:1c:03:40:4f:bb:df:
         6f:9f:c6:5f:e6:e1:80:a5:3d:8e:46:c7:b0:a6:f1:48:bf:a3:
         56:3e:fc:ca:59:f5:6a:97:0b:32:09:9a:ef:77:4f:4d:d7:cc:
         87:6a:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:47 2025 by rpki-client