Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          9+wAdvhU3CkcGwjtOWcDUMNE/DBH54laED1WefkkuNk=
Subject key identifier:   23:8F:DF:FF:90:4A:05:D8:43:8F:11:59:E0:A1:26:53:E6:0D:E1:25
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       01983FBE24CFE63FD9E7A64B70354A2308E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          03A1
Signing time:             Fri 25 Jul 2025 04:01:22 +0000
Manifest this update:     Fri 25 Jul 2025 04:01:22 +0000
Manifest next update:     Sat 26 Jul 2025 04:01:22 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: 9Xbw4HdS8y4ly/P+MS/0r3cjNS/lTjpTQfviwLyTKuM=)
                          2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:be:24:cf:e6:3f:d9:e7:a6:4b:70:35:4a:23:08:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Jul 25 04:01:22 2025 GMT
            Not After : Jul 26 04:01:22 2025 GMT
        Subject: CN=238fdfff904a05d8438f1159e0a12653e60de125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:da:b6:3e:85:ea:a2:7c:dd:71:40:ac:70:
                    a6:82:15:84:29:fe:a6:15:01:09:b6:53:97:e2:10:
                    67:6f:28:c7:3b:2c:3b:fe:64:5f:8c:98:98:f2:6d:
                    52:e6:f0:69:b2:25:13:fa:e7:c1:ac:ef:a4:f7:6b:
                    d6:86:18:66:77:c1:cd:ce:c8:ed:66:90:7d:2a:f2:
                    42:01:4f:27:c9:7f:63:30:4c:ec:03:1e:29:95:6b:
                    7a:af:c8:e2:15:34:5a:0f:eb:4b:15:19:ce:8c:4e:
                    ab:7c:1b:cd:6e:a9:6c:7d:a8:a9:0d:93:6c:bb:5d:
                    7f:5e:ce:94:e6:9e:77:97:f7:72:16:51:5f:fa:b0:
                    cc:ff:9a:84:6f:19:48:c1:1d:58:43:de:71:3e:5c:
                    9d:1e:c7:41:03:9a:23:67:ed:79:4f:25:52:fa:86:
                    6b:37:61:b9:e2:8b:fa:3c:51:fb:d7:c9:07:0f:bd:
                    30:e8:27:6a:86:bc:a2:92:16:cb:86:bc:c4:af:3c:
                    52:14:93:9e:59:22:a1:02:5a:32:cc:e0:af:34:e5:
                    db:d0:c4:cb:32:f1:95:b6:72:4a:64:84:e0:b8:cb:
                    4e:f7:82:a7:2c:47:10:49:90:02:f8:8c:71:3d:92:
                    44:9d:79:9b:2e:46:ff:28:0b:44:c6:fe:22:c4:7c:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8F:DF:FF:90:4A:05:D8:43:8F:11:59:E0:A1:26:53:E6:0D:E1:25
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:f0:b3:7d:56:8d:ef:8f:72:dd:e2:9e:32:e3:b7:08:c6:
         f4:57:70:1b:9d:dd:b2:6c:9e:65:cc:05:d4:ff:cc:7d:54:67:
         bb:74:b1:4f:59:f8:af:0e:0b:e7:c9:0f:6b:cd:90:2e:b2:3c:
         2c:3b:fd:8b:34:09:bb:7b:7d:33:50:2c:fb:7b:c8:91:e9:a9:
         c3:a4:43:6c:bf:ce:e3:c3:96:b0:6c:fd:e7:56:10:a9:31:72:
         f0:bd:73:79:6d:53:ad:e5:70:2f:49:33:04:cf:cd:38:78:3f:
         38:d1:30:de:5b:6a:cc:88:29:02:2f:23:b0:c2:52:7d:f5:85:
         9f:af:e3:c1:18:47:e5:fe:da:e5:4f:ac:eb:42:d0:e9:cf:bc:
         70:84:ee:73:d0:9c:6d:e0:22:be:b0:cf:c2:01:de:60:07:09:
         af:2a:e6:75:98:8d:f0:a0:ce:87:68:e6:a8:5c:60:5e:8c:92:
         90:1e:62:08:b7:bf:a9:84:d8:14:3b:2a:91:2c:7b:b0:4a:16:
         fd:70:cb:f4:75:5d:c7:93:a3:53:48:7e:11:50:b7:4a:ba:73:
         8f:8f:6f:e8:3d:57:60:d7:f3:59:9b:03:b6:50:40:64:81:7c:
         7f:f3:7d:c2:15:53:1c:ef:01:9d:2a:34:47:84:99:42:47:99:
         fd:d2:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:39:44 2025 by rpki-client