Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
File:                     YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft (raw, json)
Hash identifier:          XQoshM806eu4TIpX4TzVH3B5ZuvoTERSym1MYwtjGcg=
Subject key identifier:   49:E9:E6:11:86:82:F5:39:30:7E:0D:A5:15:E8:0D:36:F9:FC:36:A1
Authority key identifier: 61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D
Certificate issuer:       /CN=612c1c53f6c1d996236cbb37ba3247670399a62d
Certificate serial:       0198D5BB89FF41A320302AAD7952A21D8524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
Manifest number:          0D6F
Signing time:             Sat 23 Aug 2025 07:01:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:34 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:34 +0000
Files and hashes:         1: YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl (hash: WaTlOjOZvZ35/yiC1tCLy6h2Flw6NLL0p2sRO5txfH4=)
                          2: cmQy3O27JTVMgc0scAWzRQz1k34.roa (hash: JrHBwEb+drqrBDZnlCxDUthDJ1gAVyMOlFCkBCL2cqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:89:ff:41:a3:20:30:2a:ad:79:52:a2:1d:85:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=612c1c53f6c1d996236cbb37ba3247670399a62d
        Validity
            Not Before: Aug 23 07:01:34 2025 GMT
            Not After : Aug 24 07:01:34 2025 GMT
        Subject: CN=49e9e6118682f539307e0da515e80d36f9fc36a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:8c:7d:5c:74:aa:ad:22:45:95:5e:9f:00:
                    82:bc:a8:5e:60:a9:ab:c9:8a:8b:78:ff:c2:03:c9:
                    ee:ea:48:e5:eb:0b:6c:10:16:88:e6:fa:c4:45:8c:
                    22:ec:7a:b4:f3:d0:a3:90:fc:00:62:54:39:84:fa:
                    3a:fd:6c:e2:fd:7c:7d:22:d7:11:02:19:1f:10:29:
                    e8:0a:35:fd:95:c8:68:1e:5f:1a:2a:21:d6:cc:22:
                    02:09:c0:de:fc:ba:08:dc:d9:a4:ec:ce:62:c3:1f:
                    47:c5:1b:8c:73:05:a9:ee:be:da:6f:3d:44:7e:a3:
                    63:d6:c6:71:8f:d0:3c:04:7b:ef:35:9e:ae:84:30:
                    78:ee:36:94:1c:87:2a:b5:4c:bc:4f:19:b6:71:90:
                    fa:ab:7d:6d:46:34:cd:c2:61:96:a3:60:fc:32:4f:
                    7e:c5:56:09:b6:4d:6e:ec:40:54:e3:ba:d3:8d:ba:
                    09:64:23:5f:97:e9:59:47:4a:a2:37:c3:6b:ab:b2:
                    6f:40:f4:48:4a:46:ef:69:dc:53:39:0f:e8:1d:ab:
                    20:9d:01:7d:cf:49:d9:d3:d4:ef:03:5b:27:aa:c5:
                    80:88:7c:57:f2:04:c9:46:e5:9b:3c:aa:56:a3:08:
                    1a:0f:c6:6f:37:1d:b8:44:e5:6e:9e:70:53:bf:0c:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E9:E6:11:86:82:F5:39:30:7E:0D:A5:15:E8:0D:36:F9:FC:36:A1
            X509v3 Authority Key Identifier:
                keyid:61:2C:1C:53:F6:C1:D9:96:23:6C:BB:37:BA:32:47:67:03:99:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f0078e-d0c7-428e-9524-ecaf578a34e3/1/YSwcU_bB2ZYjbLs3ujJHZwOZpi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8b:db:40:f6:36:d8:f8:df:35:f4:9f:1c:04:03:b3:f9:d4:
         9e:d4:62:0d:50:20:b0:df:1a:03:cd:e8:6e:8a:13:ef:36:7c:
         d5:48:96:72:f0:d4:53:75:c5:f7:d5:7a:83:65:b4:d4:7c:d3:
         56:50:70:0a:b1:f0:6b:d1:2e:67:59:3e:42:fc:57:a2:64:95:
         be:e8:35:ea:c6:e4:43:4b:08:f0:74:2e:b8:eb:79:ea:ad:6e:
         99:a9:ba:38:cf:a9:da:cc:e9:ae:8e:8d:16:92:85:68:a6:16:
         8c:1a:c2:41:1a:e5:84:aa:ae:e6:92:95:c3:ff:4e:90:b9:5d:
         2f:f4:6a:49:91:ec:75:9e:0f:74:a4:09:15:e1:ff:64:93:35:
         0b:85:34:38:3d:f8:0d:60:25:a9:28:d1:56:6a:bd:33:4e:38:
         e3:8e:e9:69:1f:f3:03:82:ce:9c:0d:12:14:0d:7d:2f:6e:30:
         4e:58:df:c6:f2:ff:e2:9c:95:3c:cb:fb:4a:f3:7f:a8:ba:66:
         6e:ae:22:b8:f3:bf:bf:82:c0:6e:7a:ef:df:30:86:79:2e:fa:
         c8:aa:fc:6d:22:3d:fe:d3:67:f9:55:ac:b1:96:c9:6e:7d:1c:
         03:28:b2:07:47:09:1c:cb:3f:ad:3a:f1:a8:91:3a:27:64:fd:
         6b:96:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:07 2025 by rpki-client