Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
File:                     Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft (raw, json)
Hash identifier:          LSlKpVPs6loyLif+BsfW+LXyu6BTx79yPPcyXr6F1jY=
Subject key identifier:   34:36:08:2A:0C:E9:87:2E:4F:C4:CA:7F:4F:B7:45:03:F1:1D:20:4F
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Certificate issuer:       /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial:       0198D65FF0B89BD0A3BE9F7A52DCF56B411A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
Manifest number:          0B66
Signing time:             Sat 23 Aug 2025 10:01:08 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:08 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:08 +0000
Files and hashes:         1: Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl (hash: pZrGPSu8EidWduo08R/yZX9Lr/xjxe8QI4rMw+X1xbk=)
                          2: mD91GJWTGSKSHSgbgQ6P8S7ubME.roa (hash: rmUWh8AmrxJuI/WhfjCkpLYkhkimbTnBeIi7uD7XWfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f0:b8:9b:d0:a3:be:9f:7a:52:dc:f5:6b:41:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
        Validity
            Not Before: Aug 23 10:01:08 2025 GMT
            Not After : Aug 24 10:01:08 2025 GMT
        Subject: CN=3436082a0ce9872e4fc4ca7f4fb74503f11d204f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2e:0f:25:31:d6:e7:b0:60:d1:31:1b:a3:d1:
                    6d:0c:94:df:1e:34:e3:70:c5:eb:37:3a:8a:fb:78:
                    26:de:32:24:28:07:69:20:0c:7b:13:d2:dd:79:46:
                    d8:46:08:9c:d2:9b:51:8a:56:a6:a6:ed:c7:ed:58:
                    96:eb:66:7e:5d:61:76:da:9e:bf:20:fd:d7:df:8c:
                    c5:f5:8b:fa:04:20:40:b0:68:09:4c:91:43:b5:03:
                    31:9a:8d:22:ba:31:c6:f1:cf:14:46:64:e7:4f:8f:
                    e3:a2:a0:b2:6c:c7:bb:ff:1b:ca:39:08:5f:09:96:
                    8e:50:84:f1:43:8c:38:e2:11:d3:66:0a:1d:6b:de:
                    7c:1d:73:b8:a5:a4:60:7e:d9:df:10:a3:4f:ea:3e:
                    98:30:22:7f:bb:32:f3:9c:90:a3:0f:68:18:2f:fd:
                    03:68:a1:39:3a:4a:02:43:44:10:fa:37:c7:57:2d:
                    fa:34:9f:38:8d:06:77:61:9f:86:cb:c1:1d:c1:8a:
                    7a:b3:da:05:57:3c:86:cf:ab:a9:1e:dd:62:0a:c8:
                    e9:80:bb:ec:c4:b8:99:a5:25:22:9f:aa:33:ac:d4:
                    3a:c0:96:7a:fe:a4:d5:b2:4c:0c:10:4a:04:4e:83:
                    2f:65:d0:86:a7:95:a2:cf:3d:6c:c9:9f:1c:54:50:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:36:08:2A:0C:E9:87:2E:4F:C4:CA:7F:4F:B7:45:03:F1:1D:20:4F
            X509v3 Authority Key Identifier:
                keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3a:14:09:69:88:f8:9f:e9:48:25:48:1e:aa:17:d3:e7:0d:
         ec:d0:d5:2e:9c:2f:de:e8:67:a9:55:84:a2:06:1a:6c:1f:28:
         78:b1:16:1c:84:eb:69:57:48:5f:be:b2:ca:8b:b8:af:a6:d6:
         ad:f1:4a:a0:5e:3a:30:52:1b:eb:f7:d9:23:af:60:0a:41:74:
         77:ac:e4:e9:bc:97:fe:10:1e:f5:60:2a:2d:2f:12:e9:6c:4c:
         1d:aa:b9:c0:0a:48:a8:44:8d:ab:01:da:26:71:87:64:86:60:
         4e:6c:dd:03:1b:19:71:14:9e:ec:8a:75:47:2a:d5:95:11:78:
         96:21:be:ff:77:6e:28:8d:f6:14:6f:80:59:91:78:e5:a4:56:
         db:bc:91:26:01:cb:60:50:2f:6c:7a:41:e3:e0:2d:15:49:f5:
         94:87:9a:df:8f:d9:14:e7:44:d9:6b:e1:46:7b:a4:63:c3:9b:
         df:44:d2:34:e6:6e:08:f0:77:83:83:9a:aa:29:1c:dd:6c:99:
         9f:b4:fa:f5:02:cc:98:a0:f1:ef:16:a2:be:9e:54:4f:13:c0:
         ed:e3:f3:36:17:99:c0:ca:9a:d0:58:08:da:72:4a:b6:23:03:
         23:9f:a7:3a:8c:2c:27:98:bb:a8:ee:6d:3c:b3:03:d5:67:71:
         99:25:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:57 2025 by rpki-client