Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
File:                     Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft (raw, json)
Hash identifier:          wHG9i4C5BaJSN8bODn3W+gw6BvwGqiKAH1cI9Qi0zbw=
Subject key identifier:   D6:B9:86:18:09:06:BD:1E:96:05:08:31:C7:89:4C:BD:77:39:22:58
Authority key identifier: 63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED
Certificate issuer:       /CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
Certificate serial:       0198D5F17EEC770B59CA6F9871009E35088C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
Manifest number:          10AF
Signing time:             Sat 23 Aug 2025 08:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:30 +0000
Files and hashes:         1: Je7r8p2i15SExZL77Clbe_3pLIU.roa (hash: q5RkBfa8EqGTkb+E8fZ8KT2+q7JMLCFvRnhSE6vnDeU=)
                          2: Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl (hash: iNC+cgbBrSWbD7Rt4vgjl/un8cjDNxiIBhOse1wtTdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:7e:ec:77:0b:59:ca:6f:98:71:00:9e:35:08:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63be08da1ab31e3f98f554fa01373f94cc9011ed
        Validity
            Not Before: Aug 23 08:00:30 2025 GMT
            Not After : Aug 24 08:00:30 2025 GMT
        Subject: CN=d6b986180906bd1e96050831c7894cbd77392258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:fe:97:56:5f:44:f6:8d:96:a2:39:c7:62:
                    0d:0e:71:02:14:6b:32:a4:97:ef:01:64:ae:9c:ae:
                    f7:02:d6:95:0c:f3:40:25:27:6f:da:3f:eb:b7:64:
                    54:4d:23:1e:a7:4f:23:b7:90:6a:37:96:3b:b2:8d:
                    94:50:75:17:bb:a8:0c:99:b7:83:b1:62:05:b9:72:
                    61:53:aa:8c:26:47:df:0c:b0:75:7f:00:4a:f4:bb:
                    ce:92:4c:75:90:1d:3d:20:a6:0e:99:b6:b4:c6:8e:
                    b3:86:bb:c2:d6:0c:b2:46:39:f8:0c:88:d5:45:dd:
                    b3:aa:95:33:78:81:db:a3:1b:00:1c:e9:b5:39:55:
                    4e:ea:19:e1:b3:ed:37:87:3d:4e:31:f5:d3:9c:d7:
                    06:de:87:d7:29:f1:1c:ca:bf:9c:af:2b:95:66:94:
                    f5:8d:b4:67:30:0b:b7:81:e9:27:20:26:67:00:85:
                    61:73:8c:06:e1:7e:55:fd:9b:c1:e9:7b:92:00:12:
                    92:44:63:17:05:5c:41:aa:3f:15:25:41:6c:6c:79:
                    1e:d9:b8:a4:81:51:30:18:b6:0a:1c:17:5a:9b:dd:
                    85:1d:2b:ef:37:16:f0:8a:38:5c:fc:ca:b6:ac:4d:
                    fc:76:92:8f:88:a0:2e:b4:c1:03:db:0b:63:4c:09:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B9:86:18:09:06:BD:1E:96:05:08:31:C7:89:4C:BD:77:39:22:58
            X509v3 Authority Key Identifier:
                keyid:63:BE:08:DA:1A:B3:1E:3F:98:F5:54:FA:01:37:3F:94:CC:90:11:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/99cbcf-7d4f-4b12-a577-cc8054a51d66/1/Y74I2hqzHj-Y9VT6ATc_lMyQEe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:28:2f:d7:8d:f1:b1:80:50:6d:5d:a5:5d:e0:48:b7:6d:
         bf:a3:5e:26:0a:ad:3a:82:a7:f1:b9:a9:dc:0a:ef:c9:46:4f:
         00:05:4c:2c:9f:d3:59:07:5e:38:98:82:2e:a9:e0:d9:02:5a:
         90:14:05:0d:ab:e7:ed:2b:02:5e:ef:bc:dd:17:41:d0:8a:65:
         c8:14:9f:76:d0:7d:fe:f8:fd:0f:96:98:bf:c6:0e:35:6a:5a:
         3f:1c:63:35:35:57:e4:e9:d4:6a:63:39:bf:82:8f:49:c5:2a:
         3d:4b:8b:b3:f0:87:e5:37:8b:07:00:7c:a8:f9:51:b2:77:ad:
         e3:1b:23:ec:cc:43:03:62:95:a0:88:5e:80:d5:18:a7:43:02:
         38:49:48:4c:6d:fd:01:de:51:0e:3d:0f:2c:aa:74:b8:96:cd:
         e1:3a:c3:95:06:6c:19:d8:6f:f1:0b:1f:3b:1d:ae:f4:db:9a:
         1d:c7:bd:5e:17:e9:b6:96:c5:1c:ab:c7:b1:08:ff:40:48:d2:
         be:a8:e0:f9:dc:cb:2e:6f:01:b6:95:be:ca:11:bd:0c:78:b0:
         2a:9f:9a:b7:3c:59:27:3b:bb:36:9d:c3:f5:51:d8:d6:e2:2f:
         d2:83:05:0c:4e:33:1e:68:a4:d9:5f:e9:9f:f2:27:6b:b3:d1:
         40:1f:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:27 2025 by rpki-client