Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
File:                     Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft (raw, json)
Hash identifier:          IlUEEr8wBKo6poiteRdKq8J3FLQnghoYKAkZJGRi5YI=
Subject key identifier:   31:B4:7A:19:AF:2A:3D:A6:E2:50:A2:8A:D5:38:2D:D1:8D:66:3D:B5
Authority key identifier: 62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9
Certificate issuer:       /CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
Certificate serial:       0198D473E6BD3731F8FE6A1EBA70AFB08FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
Manifest number:          0731
Signing time:             Sat 23 Aug 2025 01:03:42 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:42 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:42 +0000
Files and hashes:         1: RwKWDh9I_VhT28gEF3k9tJ9hdSk.roa (hash: CWqw/aMDA6ZuqW+g16a2LFyjcXoDj/1ZGqdzZueDSNs=)
                          2: Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl (hash: olzTNB9j1W5GtAx/ryEWIkynTdfTTO8bDXuUs8dL9qY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e6:bd:37:31:f8:fe:6a:1e:ba:70:af:b0:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623d8f99dfa3092d1f6757efacb49f9e00e6d4b9
        Validity
            Not Before: Aug 23 01:03:42 2025 GMT
            Not After : Aug 24 01:03:42 2025 GMT
        Subject: CN=31b47a19af2a3da6e250a28ad5382dd18d663db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:6f:5a:2c:81:cf:f8:29:b1:b0:74:74:4c:
                    91:f2:df:ad:dd:38:d0:a1:86:bc:60:dd:d1:d4:f0:
                    fb:7b:cc:15:01:6f:d0:7b:b2:d4:ef:ac:54:5c:b0:
                    49:91:8d:9b:34:76:6b:02:3c:e3:8b:48:3b:88:0e:
                    d9:00:6b:5d:b6:a2:d7:76:66:78:d8:d2:2d:b2:e0:
                    80:46:e0:1c:e0:7e:bf:09:d7:f6:3c:66:89:f3:be:
                    6e:f0:54:6c:d8:8a:31:bf:93:4b:e4:ac:54:85:f1:
                    35:01:ae:e7:a7:03:cf:8b:f0:13:20:31:ce:82:06:
                    ec:61:ff:12:9f:78:22:28:3b:d7:33:2e:e3:a9:0c:
                    01:0b:a8:d8:7c:a1:f1:88:a4:9e:95:73:f7:00:81:
                    9a:7a:32:78:b5:28:29:f5:ef:a5:74:99:e3:54:2b:
                    22:05:31:27:73:c0:01:a3:33:6f:a1:98:af:c1:1d:
                    54:57:7d:b7:76:a0:4f:a5:d4:09:a1:f4:fd:c5:a7:
                    97:f0:2a:69:ba:c1:7a:6f:f4:cc:bd:67:00:d1:73:
                    40:3a:45:29:1f:12:2e:c6:9a:b9:10:50:75:98:d6:
                    41:d6:0c:32:c9:05:87:7f:2c:8e:27:ac:ad:2c:c9:
                    2c:be:77:bf:ee:c0:ca:e6:15:86:28:d4:d5:fa:1f:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:7A:19:AF:2A:3D:A6:E2:50:A2:8A:D5:38:2D:D1:8D:66:3D:B5
            X509v3 Authority Key Identifier:
                keyid:62:3D:8F:99:DF:A3:09:2D:1F:67:57:EF:AC:B4:9F:9E:00:E6:D4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/9e36b2-3f2d-444f-9d3a-40bcb74e4c28/1/Yj2Pmd-jCS0fZ1fvrLSfngDm1Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:e4:45:5a:65:52:ad:42:0d:ee:2f:a0:e6:c3:a4:99:5e:
         23:01:8f:2f:5f:7e:0c:d7:e5:05:1e:a4:40:31:d2:ef:4a:93:
         ee:18:38:59:2d:d3:e6:bc:f9:54:e4:9f:60:11:36:38:85:c6:
         5e:4f:dd:91:32:60:ba:63:75:6f:72:2e:d9:38:83:b4:16:38:
         64:a3:36:64:c2:cd:b3:c7:c7:67:9b:55:b6:10:cc:51:6e:46:
         89:7b:d2:e7:1a:96:5e:2b:7c:b9:d9:60:c3:02:49:7c:3e:e7:
         9e:93:d4:e6:ad:73:e6:f5:fb:18:cd:9b:99:3e:7a:b7:f4:59:
         97:bf:4f:52:d8:77:55:c3:d9:3f:d3:d2:d8:9a:cb:a3:d8:0a:
         91:6f:9a:d4:39:87:b5:9c:a5:b4:ce:31:a6:63:a0:d9:05:66:
         ff:46:81:9f:dd:4b:a3:5d:c1:61:3a:7a:27:c1:65:82:56:cb:
         76:a8:96:e6:8a:fd:41:03:4e:04:86:7a:80:9d:dc:4f:7b:7d:
         88:d1:18:fd:86:24:e3:0b:37:9f:e8:03:89:3e:25:8d:0c:71:
         50:9f:35:bd:dc:83:71:5c:03:3c:4c:9b:80:ad:08:c9:2e:60:
         da:95:58:16:b4:0c:66:ea:ba:cb:e7:e8:ff:a2:0b:48:0e:c9:
         11:f2:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:25 2025 by rpki-client