Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
File:                     Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft (raw, json)
Hash identifier:          BEUcPjO19z/+mD2Il8KN5hO5clrrAoBGJMS4k9ZzWY4=
Subject key identifier:   00:A1:13:C2:30:E4:86:87:70:08:93:A0:B7:1D:EE:B1:9D:3E:6D:5F
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Certificate issuer:       /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial:       0198D4A800C401591F6A019DD6CFA4905050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
Manifest number:          11A8
Signing time:             Sat 23 Aug 2025 02:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:36 +0000
Files and hashes:         1: 8AEYtyDng2JrczsuFPGKVviyc9s.roa (hash: bu4yeJwv9MMrj8IdBFvelQwTvzrOnjRhUdtSSS/gVBE=)
                          2: Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl (hash: Immxp++BbO4O0MT1gqud1BhQfagET+PeQHaqOSIbdPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:00:c4:01:59:1f:6a:01:9d:d6:cf:a4:90:50:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
        Validity
            Not Before: Aug 23 02:00:36 2025 GMT
            Not After : Aug 24 02:00:36 2025 GMT
        Subject: CN=00a113c230e48687700893a0b71deeb19d3e6d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:62:c4:41:0a:27:56:03:ea:84:b1:65:78:
                    52:6f:39:9f:d3:2a:21:79:a8:52:8d:48:17:d8:69:
                    b5:46:3f:ea:84:8a:e9:25:b3:c3:bb:47:01:59:4c:
                    3b:21:f4:33:0f:62:64:4b:c2:e6:d7:c1:ab:98:4f:
                    a3:92:ae:6b:b8:00:45:4c:43:df:33:c1:b4:63:0f:
                    ee:8e:62:f1:c7:d3:59:ed:89:ae:9b:f1:47:c7:0d:
                    59:f0:4f:48:20:e9:c2:61:71:67:c7:eb:ec:e6:db:
                    3f:a2:4d:8c:5a:f9:45:8a:e1:e6:07:f2:38:8f:02:
                    a5:0c:c7:65:f0:c4:70:c5:4b:5f:9a:a7:e6:35:09:
                    d8:4e:8d:53:0b:96:f8:f0:3c:b9:30:c0:29:08:07:
                    f2:2b:24:91:26:66:1c:e7:76:75:39:8f:ed:49:b9:
                    71:41:82:f9:f8:f0:e4:05:ea:e7:9a:89:69:4c:b6:
                    1a:6c:ba:7b:7d:07:c0:6b:e5:20:a8:84:02:59:07:
                    2e:a1:ea:f0:f7:69:1e:e1:d0:f3:6c:11:b7:11:18:
                    7d:a8:a8:ed:5c:ec:c7:41:d6:f8:01:7c:f1:ce:e7:
                    87:69:6d:b2:8c:1c:5c:e3:6d:92:d6:8c:8e:e7:93:
                    2f:c5:ff:5c:82:a7:60:88:79:d7:5d:b1:b9:a3:a6:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:13:C2:30:E4:86:87:70:08:93:A0:B7:1D:EE:B1:9D:3E:6D:5F
            X509v3 Authority Key Identifier:
                keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:e4:57:fe:0f:51:95:f9:20:b3:25:ee:8f:f5:24:bf:60:
         a8:6d:95:24:b3:f4:73:3b:8f:63:e6:21:e4:dc:65:93:da:0a:
         71:2a:d9:83:51:22:9e:83:af:70:33:6a:d1:d5:2d:08:ad:1e:
         d7:1b:0f:2b:13:3e:7e:f0:37:fd:24:05:70:95:cd:73:a5:6e:
         1b:6e:69:7d:5c:49:4e:48:4d:e4:64:f1:b4:10:e5:5f:1d:a7:
         b4:90:37:44:9d:a4:aa:54:ca:ed:fd:0c:96:fe:34:36:2a:ec:
         66:0c:c6:94:ed:23:eb:ff:d2:8c:c1:3a:42:da:b8:fe:78:3f:
         29:bf:69:17:fb:79:64:9c:79:db:4c:23:1d:82:8f:65:8c:68:
         8e:9e:f5:c1:fd:49:3a:0f:78:c8:36:95:78:58:e4:d2:b7:2d:
         df:9d:4c:f9:a4:e8:72:32:fe:a0:f8:fe:a8:01:78:0a:fc:f7:
         95:a0:fc:3c:b2:7b:20:02:ee:b5:7d:de:0e:88:d5:99:f9:59:
         63:64:17:74:83:40:aa:16:ef:db:82:7f:d0:05:e5:f7:fa:65:
         d1:7a:5c:96:81:96:f0:82:aa:61:f3:5e:c0:d1:97:80:3e:49:
         22:93:16:81:d3:8a:71:f3:ac:b8:86:d5:32:d0:4f:15:df:79:
         57:f4:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:00 2025 by rpki-client