Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          cUkQxdBWQRmLPpZafmpUwppliPFbeca/kQ3anCsWqhM=
Subject key identifier:   33:A5:43:5D:93:35:32:2C:12:F1:F0:A8:CA:98:92:DC:67:B8:13:15
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       019826A26864C0C47988FED4C91D8AA18772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          06D5
Signing time:             Sun 20 Jul 2025 07:00:34 +0000
Manifest this update:     Sun 20 Jul 2025 07:00:34 +0000
Manifest next update:     Mon 21 Jul 2025 07:00:34 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: ySqTfDDpXYs3oQMCzIGB8fWT+83Exc5B/iFt3BAufs8=)
                          2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=)
                          3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=)
                          4: HANmGqWDLzD8xzgH1N2qbf2RpVU.roa (hash: w2O64hJj+mcPhVqUkjApVC5JtsigQzHQewLezmoT9do=)
                          5: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a2:68:64:c0:c4:79:88:fe:d4:c9:1d:8a:a1:87:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: Jul 20 07:00:34 2025 GMT
            Not After : Jul 21 07:00:34 2025 GMT
        Subject: CN=33a5435d9335322c12f1f0a8ca9892dc67b81315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:76:de:3c:93:69:d9:7e:9f:3f:cf:84:0d:
                    67:a6:c8:c9:2b:43:cb:f6:6b:97:44:e0:a9:66:c7:
                    17:1f:ce:f1:3a:10:32:74:b4:68:00:ee:71:fe:ea:
                    4d:5d:6b:d4:3f:8f:c4:c2:0c:6e:66:fc:c3:20:45:
                    b2:a1:a4:05:1d:a0:3b:33:85:8b:54:e5:78:a7:bd:
                    c1:a7:2a:cf:50:ae:db:85:77:31:92:2f:b9:b4:cb:
                    dc:d6:e5:38:3b:37:02:10:d2:8a:5c:e0:64:31:74:
                    57:97:59:fa:89:de:2f:5b:79:67:4f:37:05:7c:fb:
                    e8:fd:79:37:67:12:11:79:0b:f8:39:25:d3:0f:9d:
                    6b:8d:62:f4:a1:55:40:dc:b2:36:96:52:f4:1c:c0:
                    95:80:b1:44:2b:a5:48:ea:fe:58:95:8f:10:de:22:
                    51:24:d6:86:6d:31:64:48:33:b5:67:b7:b4:da:0c:
                    a6:87:00:a4:b5:cb:25:5d:c7:5b:19:bc:0b:1c:7b:
                    45:ab:b7:b1:38:51:43:73:78:4d:a0:52:5d:d8:12:
                    5a:bd:88:12:08:37:aa:c4:7b:8b:22:cc:f7:82:a4:
                    2d:0a:7a:2d:00:f5:f7:90:4b:a4:17:d3:1d:b8:57:
                    26:58:a8:c0:9b:8f:a8:b7:04:b8:40:51:67:28:da:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:43:5D:93:35:32:2C:12:F1:F0:A8:CA:98:92:DC:67:B8:13:15
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:dc:5b:6a:f2:3d:11:ff:0e:b3:4c:ef:7c:bc:40:a1:6f:
         d5:fa:45:af:1e:6f:5a:6b:a0:24:54:d7:f1:6f:22:eb:fa:c9:
         f3:59:fb:fe:34:0c:23:2a:26:0e:1b:15:be:e9:30:c2:e4:fe:
         07:35:42:2d:85:12:07:ab:f3:57:53:19:9c:9c:3a:88:ea:31:
         69:74:5d:1f:5f:98:80:23:25:08:d0:da:87:e7:9a:db:26:6c:
         1b:32:5c:48:99:47:36:08:8b:80:27:54:1f:68:d8:29:f0:be:
         f9:b1:8e:c0:1e:11:3c:11:07:49:73:a5:47:22:d6:ce:fc:e0:
         32:b6:b9:a1:e7:88:b5:e6:16:8e:f8:14:dc:99:c9:33:62:3a:
         c0:97:39:69:8b:02:da:77:fc:68:56:60:68:4c:d0:e9:3b:88:
         39:bf:9f:33:0f:50:66:ef:31:62:6f:cc:ce:dd:59:ab:9c:e8:
         25:6d:a8:a7:f8:11:62:ac:8d:67:46:08:32:63:1e:c4:0f:4c:
         39:6e:d0:98:dd:11:bf:f8:8c:fc:fd:f8:73:dc:9f:9c:6a:66:
         f4:63:c6:00:2f:a4:92:43:be:d5:e4:70:50:42:97:5f:4a:cc:
         48:5d:d9:8f:b9:59:db:a1:a6:53:4c:ff:30:97:77:ce:fc:f5:
         de:e3:b6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:26 2025 by rpki-client