Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File:                     MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier:          JjP/Uo6V8CcwzT91Tm0t2ra7jJ4TTEhxvAUBe3VtJAU=
Subject key identifier:   DE:C6:C7:39:91:48:22:25:DD:92:7A:9A:EA:2C:91:D2:E1:33:06:FC
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer:       /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial:       0197B632A7A99914800AE608FAAAC94435B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number:          0809
Signing time:             Sat 28 Jun 2025 11:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:02 +0000
Files and hashes:         1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: J/JSOeUw2aZqH/uBJ2acfplucKOkEYL+bf2ypD4xMiQ=)
                          2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a7:a9:99:14:80:0a:e6:08:fa:aa:c9:44:35:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
        Validity
            Not Before: Jun 28 11:01:02 2025 GMT
            Not After : Jun 29 11:01:02 2025 GMT
        Subject: CN=dec6c73991482225dd927a9aea2c91d2e13306fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:fc:1e:dc:d7:3e:3f:20:b7:c5:86:3e:35:
                    26:9f:39:af:88:bc:a2:e4:a0:14:a8:e9:05:e7:57:
                    f3:60:d0:d7:ce:e0:c2:48:4e:3b:6f:a2:0f:05:a4:
                    e4:5e:85:1a:4c:28:35:9d:3e:d3:1c:77:4d:db:5b:
                    d5:09:18:0c:1a:90:fd:35:3d:d2:10:e1:f3:26:e5:
                    87:df:82:af:6e:29:96:87:94:cf:db:98:78:de:b5:
                    58:2a:fd:7d:93:85:73:e2:54:67:de:d9:d2:0a:76:
                    9e:f6:89:f0:90:57:05:24:58:60:7e:12:ba:eb:49:
                    5f:4d:57:13:cf:2a:d0:a6:81:18:13:f9:b0:06:06:
                    ac:e9:b5:75:9f:21:27:48:a2:b8:f0:c2:9e:4c:bd:
                    2d:22:d0:4c:13:4d:00:71:13:a5:d3:a0:e3:47:00:
                    9c:32:30:2d:ac:2e:ff:37:6e:22:5b:00:f1:9c:25:
                    75:da:d7:44:cd:64:48:f2:2c:1a:c7:9b:6c:22:e9:
                    13:5a:5a:2f:c7:c7:79:cc:2b:ed:e5:3c:46:cf:f6:
                    6f:fd:94:49:e0:6a:90:05:ed:14:7b:92:62:8b:e4:
                    0b:13:cf:b0:69:30:d3:e8:36:75:c7:d5:fb:e0:62:
                    ce:34:24:58:1a:a7:9b:91:ce:db:e5:fc:7b:76:db:
                    88:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:C7:39:91:48:22:25:DD:92:7A:9A:EA:2C:91:D2:E1:33:06:FC
            X509v3 Authority Key Identifier:
                keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a6:d7:85:c9:d7:20:02:d1:e8:44:7f:54:3f:a6:9f:42:80:
         79:40:ef:4b:b1:6a:74:5d:08:a7:58:6d:54:f1:e1:a4:3e:af:
         aa:8c:0c:0d:29:2c:2a:f8:69:09:63:ff:05:0b:08:5c:b0:d8:
         3b:d4:7c:02:40:9c:2c:c0:64:a4:96:a9:dd:4c:97:37:55:40:
         a9:c3:65:c7:2f:97:45:c5:09:2b:93:b5:d2:88:7f:3c:44:d3:
         ba:7c:c4:fa:a9:61:55:5f:2b:86:68:d2:54:ad:9a:d4:03:41:
         db:a7:ac:c3:18:9b:8c:e0:b6:06:9e:f6:bd:d7:65:17:d6:50:
         80:37:8f:28:1b:b2:2b:11:2e:5b:c0:56:43:75:9d:a5:72:9a:
         ef:55:06:08:1b:db:44:35:8c:fa:c2:c4:7e:87:41:45:f5:15:
         76:60:a1:9e:50:0d:46:76:af:fc:d8:12:24:fd:06:44:0a:b6:
         5d:98:2a:d6:e4:98:9c:9f:7d:27:dc:65:f7:67:71:10:95:38:
         d0:8a:98:f9:01:ce:29:4e:45:4f:01:4c:b0:b9:af:8d:c6:b6:
         01:e8:62:7c:2b:d2:c2:d9:4b:b0:e0:33:4f:67:f4:b9:75:48:
         5c:b8:a5:ea:8c:89:37:ed:5b:ac:52:61:3e:ff:08:75:57:df:
         8e:42:ae:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:51 2025 by rpki-client