Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File:                     jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier:          xdo+h0vOq7pgBTICPETUh6coz1njSJNuKGAUufNEZ6c=
Subject key identifier:   B9:1C:C4:1D:E5:75:C1:AC:43:B7:71:48:47:37:4D:40:63:01:A5:41
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer:       /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial:       0198462D4B3B5DA696A40C71E1B126A1DD37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number:          FD
Signing time:             Sat 26 Jul 2025 10:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:30 +0000
Files and hashes:         1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=)
                          2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: QE21mSCOkl7GFA/5sq5gxy25QMLTa0bf26A6mq1GlwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:4b:3b:5d:a6:96:a4:0c:71:e1:b1:26:a1:dd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
        Validity
            Not Before: Jul 26 10:00:30 2025 GMT
            Not After : Jul 27 10:00:30 2025 GMT
        Subject: CN=b91cc41de575c1ac43b7714847374d406301a541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:1c:c8:9c:4e:51:ba:8f:5e:ba:9c:c5:16:
                    fa:69:2e:c8:35:7b:fb:5a:9f:55:58:15:88:12:13:
                    6b:38:9e:96:c6:03:0b:01:70:de:04:9f:dd:4e:03:
                    75:a4:a6:e9:d0:2a:f5:79:22:53:9c:02:fe:db:de:
                    0b:a6:c6:56:1c:08:e7:d6:b2:8b:50:f1:fe:a3:f8:
                    b1:d0:02:f9:84:5a:15:ad:d8:f0:55:d2:fd:53:25:
                    b5:36:3e:53:cf:dc:cd:e1:91:fe:13:8f:06:f5:17:
                    c5:d2:a0:9a:85:44:64:bd:1b:ac:3a:02:d2:e8:52:
                    90:3b:de:a7:4c:30:09:7f:64:ea:93:ad:8f:3c:73:
                    06:30:77:d3:74:16:ab:5a:da:95:5c:02:7f:f8:5f:
                    60:16:34:c6:de:1c:e5:64:ed:c3:7d:d9:04:4c:18:
                    f3:fc:7b:12:b8:a1:2c:93:89:97:73:6e:16:6e:53:
                    23:83:72:38:2d:05:4f:6b:c8:92:23:24:f2:e8:a9:
                    3d:30:53:ab:62:2a:2f:2a:31:45:08:e7:f2:93:74:
                    90:c5:87:66:22:3b:6c:07:29:db:43:28:1a:f6:36:
                    bd:91:e6:1e:b6:dd:49:b4:2a:49:7f:55:16:a5:23:
                    8c:a6:5f:bd:6b:e9:67:f9:5d:36:9d:e6:77:44:f5:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:C4:1D:E5:75:C1:AC:43:B7:71:48:47:37:4D:40:63:01:A5:41
            X509v3 Authority Key Identifier:
                keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:68:c6:c0:97:38:8c:95:78:31:1e:44:71:a6:10:4e:a7:
         6e:93:7b:d3:00:eb:48:46:30:94:63:62:46:bc:99:2e:fa:d8:
         dd:67:55:83:f6:dc:6e:7f:c1:6c:19:a5:28:a7:96:df:7e:a0:
         9a:a4:c5:23:3a:75:04:4d:f9:c2:b5:c9:0a:fd:7a:a5:5c:d0:
         9c:d3:c9:c2:e5:60:74:e7:b4:ac:bd:fc:39:a5:f8:42:c6:47:
         2f:f5:ea:f8:de:3b:cc:76:c0:d6:64:07:c2:70:76:cb:7b:50:
         25:f4:3b:a3:02:e6:1c:e6:a2:b8:34:a7:bf:7c:a7:67:4f:33:
         a1:a2:37:6d:24:41:aa:fe:e0:2c:92:d9:04:bf:f8:c0:1b:45:
         21:0a:18:b5:f7:1a:6d:5c:f7:c2:56:9e:33:44:a5:92:dd:13:
         98:13:f7:0f:b9:d3:c4:f6:83:9d:e2:4b:66:db:38:e5:b1:b5:
         d1:5d:ae:aa:f0:c3:6c:3f:0a:00:e2:c9:76:47:27:82:b8:fc:
         a7:64:a8:d4:7f:ee:2e:84:eb:40:3f:85:96:98:d7:19:c1:79:
         d7:2c:70:58:3c:35:8a:1e:8a:45:cb:d5:54:27:ec:4b:63:c4:
         45:64:42:96:5d:2e:e1:67:9d:66:22:6d:99:ee:55:93:f8:08:
         c9:c8:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:48:31 2025 by rpki-client