Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File:                     2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier:          v3O1oO9K8b8MlTUEFO7snh+mIwuJ7PPWbhPD8wVRe+s=
Subject key identifier:   67:FF:0F:35:F3:F2:9B:08:0A:C1:1D:D0:79:49:7A:88:DB:56:5B:3F
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer:       /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial:       0198466468BB7D2EEAFED475028B090F580C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number:          01E8
Signing time:             Sat 26 Jul 2025 11:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:42 +0000
Files and hashes:         1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: SxElgUhBv752DeAbemvPEollc4jNF53aMmPyBi3xnXg=)
                          2: nTuk9GI5GZL6GaqD8YI_VNHNwd0.roa (hash: rxSabvmVUQAupTJLHZRfhiqBX7/10LGXXrYJdZo74MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:68:bb:7d:2e:ea:fe:d4:75:02:8b:09:0f:58:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
        Validity
            Not Before: Jul 26 11:00:42 2025 GMT
            Not After : Jul 27 11:00:42 2025 GMT
        Subject: CN=67ff0f35f3f29b080ac11dd079497a88db565b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:b8:a2:42:38:0a:ab:66:90:6f:08:03:7e:
                    58:61:36:4a:7a:70:41:36:21:62:e0:d6:c2:a2:db:
                    10:e7:96:ff:f4:f7:55:c4:5c:d1:74:f0:e8:22:e9:
                    df:57:b9:22:d9:08:7b:62:7a:65:24:32:76:ef:54:
                    5b:1f:c7:f1:9d:60:bd:6f:82:6f:e6:fc:4a:3b:0e:
                    c6:de:46:78:a7:9b:c8:64:14:d2:d1:47:99:5f:5b:
                    dc:d1:4c:80:4e:36:e4:a5:2c:d2:1a:c6:81:af:fe:
                    c5:5f:e3:97:07:1e:52:4f:d0:20:dd:a9:47:54:67:
                    08:a0:87:dc:f9:5a:48:31:bc:14:2f:53:c9:8f:da:
                    9f:5a:7e:3e:34:a0:a9:95:81:6e:1c:f2:8d:a5:6d:
                    97:a0:bd:0f:bb:22:f7:7f:df:94:d1:4c:74:1d:a0:
                    88:90:6b:98:c0:bd:8a:ef:27:d5:d0:27:ae:58:20:
                    48:d1:f1:f1:1e:a7:eb:85:a0:91:13:89:d8:18:ec:
                    b4:be:da:9e:29:d5:82:78:dc:a9:ab:9a:f7:7b:d9:
                    41:f3:c0:43:d6:31:e9:a4:6d:5a:87:8b:9f:52:20:
                    2d:1c:4c:2a:cd:c3:86:80:fd:4b:ab:22:85:38:e5:
                    00:54:0c:fd:52:c3:ed:2e:05:ff:ae:7a:1f:cb:a1:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:0F:35:F3:F2:9B:08:0A:C1:1D:D0:79:49:7A:88:DB:56:5B:3F
            X509v3 Authority Key Identifier:
                keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cc:c5:f3:39:8f:a5:b2:2f:0b:c8:45:89:70:5c:ac:5a:00:
         bd:90:1d:cb:2c:83:da:f8:23:af:bc:38:56:50:ed:eb:89:53:
         fb:5a:15:6d:fc:5f:35:e0:3d:6b:db:44:44:08:0a:ff:8b:71:
         16:65:cf:37:ef:a9:c8:46:00:bc:69:6c:a8:cd:83:6f:4a:da:
         6d:55:a2:a1:9b:82:23:1d:2c:28:ff:45:df:e7:cc:d1:c5:10:
         76:eb:fb:9f:32:4b:34:49:41:a3:f6:fd:e0:a2:ba:8b:6d:07:
         27:c3:98:8a:95:07:cf:b9:c8:46:18:3a:24:87:0d:69:9e:24:
         44:33:99:ac:0f:08:e9:c5:06:fa:30:b2:eb:70:1e:63:9a:88:
         da:82:bc:0d:4c:88:ff:2e:b1:a3:f6:f1:a7:65:83:9a:ff:da:
         3c:09:35:6a:f9:8c:0c:9f:2e:e5:17:e5:90:ea:e8:43:f0:89:
         08:14:55:fd:6e:db:70:8c:80:02:c4:7f:38:dc:43:ee:c4:f0:
         23:d0:2c:92:7c:11:15:7e:3f:72:9d:51:fc:7b:e8:b9:63:da:
         65:a1:30:38:5d:12:c7:0a:ca:89:6b:2c:95:54:4e:5e:c6:fe:
         b1:7f:df:3c:f0:f3:97:25:1a:6c:8e:91:62:ce:d9:98:d9:19:
         2b:da:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:57 2025 by rpki-client