Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File:                     Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier:          HBnT+VGeSn22BpGtVi2sQG9oPSUpcT0HIyLU5e+d3Zk=
Subject key identifier:   6F:EE:63:73:15:D6:FC:73:CD:1E:F5:21:9D:08:B8:5F:F4:AA:F1:D7
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer:       /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial:       0198D5F1B4AD7E1AC50EB46684C1DA61C8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number:          0E17
Signing time:             Sat 23 Aug 2025 08:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:44 +0000
Files and hashes:         1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=)
                          2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: 8mp1MX3wv7XFv1VaFsJVE9/qVdJ9ZWBPDEt0AEbputY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:b4:ad:7e:1a:c5:0e:b4:66:84:c1:da:61:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
        Validity
            Not Before: Aug 23 08:00:44 2025 GMT
            Not After : Aug 24 08:00:44 2025 GMT
        Subject: CN=6fee637315d6fc73cd1ef5219d08b85ff4aaf1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:08:44:4f:bc:88:e6:44:50:0f:60:0b:c1:
                    0a:5e:bb:21:08:1a:93:14:3d:5f:50:09:a8:c8:82:
                    7b:4c:4c:49:0d:c9:cf:6b:64:81:9b:9d:3a:13:f4:
                    f6:00:a1:50:da:35:dc:d0:9d:ac:b1:7a:c6:2b:1d:
                    32:17:66:3b:f0:8e:ca:1e:63:78:39:a3:e3:ed:2c:
                    da:19:e6:ef:30:7f:5e:98:2d:6c:ad:b8:03:0e:1f:
                    4a:26:8a:3b:10:d5:43:c3:1e:a4:51:d0:16:89:92:
                    69:9f:af:c1:bd:df:a8:28:a2:64:6b:7e:dc:e0:04:
                    76:a1:53:e0:64:15:90:53:c0:e7:ca:dd:54:b7:03:
                    3b:30:82:af:fc:8e:ef:1c:88:39:ef:fc:87:29:e1:
                    6d:bd:ae:33:6c:e9:34:fc:5c:a3:ff:89:57:58:4f:
                    c6:1d:0e:da:75:42:11:6a:42:68:85:77:53:69:f7:
                    44:fa:10:ec:54:a2:5e:09:5b:42:48:e7:e5:36:5e:
                    84:da:38:d5:2d:93:91:16:65:c1:05:c1:34:01:12:
                    e1:86:81:57:11:58:c9:74:b5:9b:6d:cc:b6:59:95:
                    89:bd:50:9f:fe:25:c4:25:6a:b1:f0:cd:b1:48:6e:
                    dd:7e:bb:e9:c9:fc:7e:ba:9a:6a:bf:cc:2d:9d:4c:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EE:63:73:15:D6:FC:73:CD:1E:F5:21:9D:08:B8:5F:F4:AA:F1:D7
            X509v3 Authority Key Identifier:
                keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:05:0d:40:7d:4f:42:e0:c9:bd:c9:3e:07:a2:c3:cf:fa:
         c7:c0:64:53:6f:c6:13:cf:45:a1:fb:25:80:11:55:60:64:02:
         5f:25:53:de:44:a6:66:5e:76:a1:f3:1a:c3:71:7d:01:a3:43:
         52:0c:02:16:7f:7d:9e:8c:0e:97:94:52:86:9f:ae:3c:4c:b9:
         89:5d:60:ee:fe:29:95:06:ac:08:f7:ff:20:27:fc:8e:fd:c5:
         29:3c:1c:4c:e2:0b:11:2c:11:d2:76:6b:1d:0a:fb:f1:22:e0:
         27:0c:5e:de:bd:27:65:00:9d:af:40:1f:32:30:8f:d2:78:48:
         2e:e3:ee:a7:f8:86:61:9b:70:59:55:77:17:8a:d6:26:a0:8e:
         fb:e0:e1:8c:83:65:a5:d8:e9:5a:ca:db:af:bc:5d:ea:5e:b3:
         24:6f:d8:83:31:77:ce:e8:b6:e1:aa:0e:c2:4c:e1:e2:5f:71:
         60:a4:c1:bd:eb:3f:fd:86:16:60:11:99:29:bf:9d:96:5e:a4:
         7e:f5:87:86:88:40:35:80:d7:74:49:2e:f8:3c:b3:21:cd:b6:
         ea:d1:c8:cb:9d:1d:6c:5f:b3:8b:5c:99:c0:73:d4:be:5b:2f:
         39:dd:2a:fb:df:16:71:50:31:bc:97:81:70:0e:13:8c:27:a6:
         cd:01:9d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:52 2025 by rpki-client