Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          JXu9Je87xd0lbZh+2sFQG/ZjqUzxUPJBmWtRIMBLJ9E=
Subject key identifier:   6B:92:69:D1:F0:45:17:FB:FE:E4:C2:4C:2E:4B:58:97:18:22:91:2F
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       01984AAEC939ED34EB1E2CE51949448BBE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          0F34
Signing time:             Sun 27 Jul 2025 07:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:25 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: hCC3G2qdgBbo+oWI09tI99h7KFO3oTwhostwXzQUEaE=)
                          2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:c9:39:ed:34:eb:1e:2c:e5:19:49:44:8b:be:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Jul 27 07:00:25 2025 GMT
            Not After : Jul 28 07:00:25 2025 GMT
        Subject: CN=6b9269d1f04517fbfee4c24c2e4b58971822912f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:24:b2:80:2e:d6:2a:13:84:e2:39:d4:4b:
                    98:99:c9:e9:50:4e:72:ba:bd:1f:14:28:70:ef:5e:
                    67:14:36:d7:08:51:38:90:e3:6b:d5:48:84:00:91:
                    74:89:a2:d7:d3:da:a4:41:ef:fe:d4:51:3f:cd:26:
                    d9:9e:8f:89:19:51:59:a6:c3:27:ea:58:da:a4:2b:
                    92:a5:83:8c:b6:d1:30:bd:9d:a9:fc:b8:6b:27:c9:
                    61:3d:32:8d:ed:cb:82:ec:03:38:27:55:7e:22:c6:
                    5c:59:f8:6e:9e:c9:65:ea:a6:15:11:f9:02:57:fa:
                    b9:4c:5f:1b:3b:b0:5e:83:51:b6:53:aa:53:a9:32:
                    5d:33:41:c7:1b:d9:8d:30:19:05:10:4b:d3:84:39:
                    5a:2c:93:84:85:2a:53:12:08:a4:74:c4:54:97:ce:
                    e0:fe:1e:75:fe:0f:59:97:1d:be:75:a8:86:20:04:
                    20:cd:0e:93:e9:96:64:18:a6:ff:5c:6e:ff:23:31:
                    e2:ab:2a:af:e8:dc:4a:c1:0f:05:83:7d:35:d6:cf:
                    f8:58:40:65:8d:43:91:10:76:2b:2a:7c:b8:05:da:
                    c7:ca:bf:85:96:c9:f8:70:33:4f:6e:1e:70:71:6a:
                    ea:61:ae:08:9a:af:b3:5e:99:5c:9e:2b:a6:de:84:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:69:D1:F0:45:17:FB:FE:E4:C2:4C:2E:4B:58:97:18:22:91:2F
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:d3:e1:0b:15:e7:86:34:11:a2:99:25:89:cb:56:a2:ec:
         97:f5:cf:71:2d:f5:7d:a0:dd:9c:cb:30:2d:8e:67:85:c2:04:
         a7:8b:e5:b1:c7:c3:ab:b7:72:03:88:0e:a2:ef:50:a8:49:c4:
         d2:e9:4d:94:96:d9:9e:f2:2b:c4:f4:d3:9f:cc:c4:6d:b6:58:
         f5:10:6f:ad:0d:d4:ad:fc:03:9d:d5:d2:1a:24:37:5c:64:52:
         32:45:db:60:64:8a:90:82:b9:9d:47:02:63:34:ee:29:3d:8f:
         fc:91:48:dc:41:4b:76:00:f9:50:75:b0:0e:4c:aa:23:9e:7c:
         04:ed:d2:c3:a9:48:e8:f1:90:30:99:49:3b:b5:7e:be:da:84:
         3e:55:df:38:14:90:0e:5a:25:3c:90:5f:78:08:4f:0e:6c:1a:
         33:40:04:b8:ab:1e:e1:f6:ad:f6:17:5a:d2:56:8e:38:a6:4c:
         c5:dd:1b:23:9e:1a:dc:f1:f9:4e:59:41:54:a0:75:7b:2e:3a:
         b3:6e:ad:31:0a:5c:1c:79:a0:3f:c5:91:15:b3:91:79:b7:8c:
         6e:80:04:a0:61:8e:99:21:ea:fa:62:0b:ce:ac:12:f2:9e:f0:
         07:99:91:b7:35:5b:f1:f1:9f:f7:5e:3d:d0:fe:8f:31:a8:99:
         62:4d:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:49 2025 by rpki-client