Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
File:                     YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft (raw, json)
Hash identifier:          7UyE1NbTJZBAbcn+S/d+It+tkukrGHK51gr1oRMLZEs=
Subject key identifier:   1D:60:B6:BB:5E:48:63:BC:28:58:3C:84:E9:D0:DA:CE:C0:6A:05:3B
Authority key identifier: 62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC
Certificate issuer:       /CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
Certificate serial:       019829A3C4B95C8CC4A340580044493489D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
Manifest number:          2E
Signing time:             Sun 20 Jul 2025 21:00:55 +0000
Manifest this update:     Sun 20 Jul 2025 21:00:55 +0000
Manifest next update:     Mon 21 Jul 2025 21:00:55 +0000
Files and hashes:         1: JrAu5bZl0zRa9cJcCCAcpIqfIfs.roa (hash: guqkk+K0DVg8iaY3I5TNq7CBhcLqz4LQwKS2ySxE6Yk=)
                          2: YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl (hash: wuzMn6INENc1I6KJ1Nphbu7qG3qY23+JIJe83W9AiTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 16:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:29:a3:c4:b9:5c:8c:c4:a3:40:58:00:44:49:34:89:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6279f0a59fc8c6fd785953701ae72b56de5011ac
        Validity
            Not Before: Jul 20 21:00:55 2025 GMT
            Not After : Jul 21 21:00:55 2025 GMT
        Subject: CN=1d60b6bb5e4863bc28583c84e9d0dacec06a053b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:8e:7b:50:ba:c0:a3:83:e2:21:6e:01:f7:
                    83:ec:48:25:c2:b7:54:2d:63:47:98:cf:72:09:58:
                    3a:fe:30:e0:e4:70:f2:26:51:71:0c:4d:c8:59:cd:
                    e3:4f:0c:fb:0a:39:01:d0:17:6d:2a:30:f1:ad:25:
                    50:4a:a4:ec:bc:a5:d1:af:e0:61:ba:04:72:78:f3:
                    8e:43:0e:9c:19:13:a5:6e:bd:45:7a:44:80:f0:e8:
                    c8:c3:8e:3d:b2:14:b4:32:3d:17:66:80:3b:02:8d:
                    98:e3:4c:da:c7:1b:a6:8a:b3:71:0a:c6:80:a4:4a:
                    53:66:a8:c6:df:f0:02:b1:00:7a:00:69:07:a2:34:
                    40:94:58:50:f6:e8:70:44:71:89:a5:f1:40:78:1e:
                    20:aa:44:fa:ec:3c:52:c6:f7:32:59:8b:d5:9c:65:
                    df:b9:95:42:18:b1:14:22:18:79:72:92:8e:4a:32:
                    af:af:f5:9a:fb:4b:ce:bf:b4:20:a2:43:7d:5f:20:
                    2d:8c:0f:c2:a6:19:39:10:4b:3f:28:59:57:72:b0:
                    0e:15:19:10:c8:87:72:af:ef:27:01:4a:d9:e6:97:
                    94:22:fe:6b:24:e4:bf:7d:20:5d:42:e1:0b:63:d1:
                    fe:ec:0e:27:89:92:56:07:44:f2:47:69:46:a0:4f:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:60:B6:BB:5E:48:63:BC:28:58:3C:84:E9:D0:DA:CE:C0:6A:05:3B
            X509v3 Authority Key Identifier:
                keyid:62:79:F0:A5:9F:C8:C6:FD:78:59:53:70:1A:E7:2B:56:DE:50:11:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnnwpZ_Ixv14WVNwGucrVt5QEaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c8d4bc-f2f1-4ee5-940e-9fc85d02e71a/1/YnnwpZ_Ixv14WVNwGucrVt5QEaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ed:e4:58:cf:37:31:06:a3:39:b3:bf:d5:0c:46:d1:3f:0f:
         94:13:83:88:4c:b2:78:e5:06:c1:5a:57:4c:ee:55:52:df:73:
         30:06:58:7e:0d:ed:51:d3:d9:60:7c:5e:8e:53:f8:19:d1:00:
         9a:af:43:94:ef:04:22:6a:f0:fd:57:dc:6f:4f:06:1d:24:b4:
         3f:91:9c:0f:e2:b4:f9:6f:cf:88:6a:e9:48:6d:a4:3f:fb:ab:
         96:3a:6b:1d:11:7e:ae:f8:21:0e:ce:9c:fa:2a:12:b6:4d:af:
         83:60:b6:46:a4:96:b7:31:60:e7:b1:8f:17:e2:34:cd:49:36:
         e5:cb:f8:c6:84:c2:0c:1b:02:bc:2d:1f:13:a1:91:6a:0f:b8:
         f3:08:56:e7:62:a3:3a:e6:cc:40:85:24:86:a3:28:02:f1:d5:
         be:49:05:b7:4f:f4:c5:c5:06:0e:14:e7:4e:36:40:93:a5:e1:
         d0:d1:6d:95:b8:34:d0:cd:cb:d4:0f:f7:64:3a:20:44:c1:84:
         61:6c:7f:0a:42:ba:82:8a:e4:bd:70:ee:22:aa:7d:33:18:69:
         6d:1f:05:eb:6f:22:ee:df:1c:f9:4c:6d:2b:c8:fa:ee:ff:e4:
         c3:ee:42:9d:c3:55:b0:31:1d:58:45:67:c5:ee:bc:26:d0:cf:
         09:83:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:00:18 2025 by rpki-client