Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File:                     JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier:          7gZs/4xW/W+ks2t4pcWdfAtHKUbuDdv/rZ0fa7kK0vg=
Subject key identifier:   31:D9:6B:96:4A:F5:74:61:DF:09:D5:D3:E1:D1:6B:0B:4A:1B:FD:1E
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer:       /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial:       0198D7A915901EAC0096BA5EF71E8232680E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number:          0741
Signing time:             Sat 23 Aug 2025 16:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:39 +0000
Files and hashes:         1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: r4m+TSZlKwdOQx2YmCv6xWoYZ1uprUETKxjeCfFteSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:15:90:1e:ac:00:96:ba:5e:f7:1e:82:32:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
        Validity
            Not Before: Aug 23 16:00:39 2025 GMT
            Not After : Aug 24 16:00:39 2025 GMT
        Subject: CN=31d96b964af57461df09d5d3e1d16b0b4a1bfd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:24:f7:ea:c3:a2:90:d6:1d:5d:70:45:c8:
                    c6:96:da:5f:fd:cd:c7:a1:cc:84:3a:81:bd:bc:a4:
                    b3:94:c0:0f:1a:65:be:0b:ce:18:8e:78:18:84:55:
                    6e:76:39:f8:d0:c3:88:9e:fd:8f:9a:42:a2:5e:6e:
                    e9:15:2d:e2:0a:05:1c:14:78:d7:23:cc:99:c0:88:
                    c0:9a:a1:1c:93:3c:8b:0b:59:7a:58:41:3f:77:aa:
                    3e:f6:cc:1c:54:dc:12:49:19:72:86:f1:de:c4:fd:
                    c1:e7:4e:34:ee:92:6e:01:b2:83:a6:d4:91:84:40:
                    24:ea:e0:fe:d4:81:3f:e7:f5:a9:4a:1c:51:d8:28:
                    6a:0d:d9:60:b3:61:5c:5e:c4:10:62:a0:30:ae:61:
                    ad:ac:15:54:f3:fc:08:b0:6f:5a:f2:6f:b5:77:b0:
                    62:ea:03:0a:fe:b8:fe:3f:cd:91:bd:0a:23:33:ca:
                    af:62:c6:cd:5f:1d:6a:90:dd:3e:58:99:cc:1e:30:
                    7d:37:bc:2f:a3:98:63:df:1d:03:04:1e:5e:97:55:
                    8e:d4:2b:0e:3f:f1:2f:c7:6d:89:fc:e6:f6:03:60:
                    6f:86:5e:f9:4a:c6:a7:7e:15:97:c2:f4:59:c5:ea:
                    7e:f8:15:fd:89:79:50:d2:1a:65:d2:49:38:1f:50:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D9:6B:96:4A:F5:74:61:DF:09:D5:D3:E1:D1:6B:0B:4A:1B:FD:1E
            X509v3 Authority Key Identifier:
                keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:8d:02:8b:49:61:61:1e:af:9f:03:69:74:28:41:af:bc:
         6f:b9:6b:ca:7c:2d:6d:92:57:a2:8d:8e:27:a7:92:97:09:0e:
         a3:49:13:c7:3b:35:60:81:cc:71:aa:5a:4b:42:33:57:26:3c:
         3f:2f:81:10:e1:f8:21:e0:c3:d4:b2:1c:51:8a:05:12:20:44:
         e3:1a:f9:32:53:58:2c:2b:2e:f7:c9:11:61:45:84:2c:bd:27:
         a0:e0:16:c4:75:97:81:c3:74:19:04:5c:d1:69:36:34:c7:61:
         0d:72:22:10:7b:2f:1a:6e:fd:ce:32:53:5b:5a:ae:86:6b:ec:
         02:08:2d:c2:79:da:56:77:42:b4:cc:61:b8:c3:77:af:1e:b0:
         14:d4:18:b9:36:ca:02:c6:2b:89:96:96:26:c9:78:5d:71:6c:
         8a:ee:3a:16:2f:92:f0:95:be:98:ab:d6:82:2b:f1:7a:22:16:
         b7:34:0f:aa:a6:58:b1:41:dd:29:3f:b2:63:cc:24:3a:70:38:
         8c:8c:c4:ec:c5:aa:24:31:0b:48:cf:82:f1:ee:b2:c8:19:17:
         0a:63:ec:59:78:22:dd:db:f7:5f:b3:8d:6d:76:d3:58:aa:26:
         39:fe:2c:bc:13:32:62:d6:ed:e3:be:91:b9:fb:9d:01:36:84:
         90:53:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:36 2025 by rpki-client