Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File:                     cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier:          TjZTwAZ4F2kH+9RMMK2X73et+6e5CV8Ibqtffi+cvCU=
Subject key identifier:   EF:06:67:D2:4E:0C:6E:19:ED:D3:BB:FF:CE:BF:53:CD:BA:F0:37:2D
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer:       /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial:       019842507E4CB57220C314C71C4EBB14214F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number:          08C8
Signing time:             Fri 25 Jul 2025 16:00:28 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:28 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:28 +0000
Files and hashes:         1: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: TtTChbHDIB5EOHStjNsW37VpUmUkJZhOb06KmbNCGlU=)
                          2: hyeaa7WHUt2Rcq_9qyU3ynO8FJA.roa (hash: 1lxOMkF/m/0MqdFiTX81zywF3SRcX+JuIQEJSNJChMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:7e:4c:b5:72:20:c3:14:c7:1c:4e:bb:14:21:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
        Validity
            Not Before: Jul 25 16:00:28 2025 GMT
            Not After : Jul 26 16:00:28 2025 GMT
        Subject: CN=ef0667d24e0c6e19edd3bbffcebf53cdbaf0372d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:7d:15:d7:19:e8:e4:5b:59:c2:c0:fb:15:
                    c2:92:d8:68:93:82:11:93:0e:e3:d2:af:d3:2c:4a:
                    6b:e4:61:b0:d6:05:4c:6a:81:d0:c9:19:88:96:c6:
                    47:fb:f2:d5:41:14:b9:97:48:74:b7:fe:77:00:43:
                    9f:02:da:e8:87:32:61:c7:74:da:31:ac:d8:3d:34:
                    57:5f:ec:27:fa:a7:06:21:b5:b8:68:a1:73:35:58:
                    52:a1:b5:3d:45:05:e8:6f:cc:d0:26:fd:3d:1c:24:
                    9a:be:eb:7e:7a:ca:8f:de:f7:9c:03:30:fa:f6:c5:
                    20:29:13:e4:bf:75:4e:97:3a:6e:a8:23:e3:30:de:
                    28:32:e3:5b:e9:69:e5:1f:21:4e:69:92:bd:b5:7d:
                    e5:2f:cf:05:68:56:07:fa:b7:88:b3:7a:a7:a6:20:
                    24:ed:ca:19:6a:84:ce:d4:c2:46:6c:64:3d:3f:31:
                    ea:81:1c:18:ec:89:0d:fe:f6:57:70:9d:82:a6:df:
                    19:02:af:b0:c9:32:2a:ab:11:83:20:4b:73:2b:ff:
                    54:84:da:8a:8c:2e:19:7e:18:25:fc:f9:13:0a:cf:
                    45:59:46:ff:61:4c:a7:89:ce:17:41:47:16:5c:bb:
                    02:62:58:11:58:f9:73:2a:63:e2:e4:7d:84:ba:6e:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:06:67:D2:4E:0C:6E:19:ED:D3:BB:FF:CE:BF:53:CD:BA:F0:37:2D
            X509v3 Authority Key Identifier:
                keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:83:ab:d2:11:b5:b6:da:01:dd:1b:aa:3d:aa:bc:b9:48:
         65:1b:d6:5f:9a:7c:63:2d:8b:fa:4b:28:74:77:1e:d9:3e:e3:
         06:58:06:aa:3c:74:dd:5f:5f:df:6a:fb:78:87:98:76:68:f0:
         9c:2e:9e:2f:ef:9b:91:41:47:cb:2e:4a:06:67:3b:ef:42:fd:
         d4:a9:7f:55:0c:cb:98:5f:8e:d9:6b:9c:7c:3d:97:b5:70:9b:
         56:05:bc:f8:b1:63:ac:8a:10:c2:62:c5:5f:c8:f1:5c:10:b1:
         81:3d:83:d4:48:05:f4:40:c3:94:e7:7f:b2:92:8e:b3:4d:be:
         96:c1:c0:2b:4d:f3:45:5d:a4:29:f8:0c:33:52:b8:3a:47:df:
         82:2b:db:d7:3f:5e:3f:20:7a:e8:c7:9f:b3:ef:16:8e:fb:0f:
         3a:51:5b:f3:41:9e:d9:c0:c2:5b:d4:51:3b:84:09:2d:86:7a:
         c0:f1:6a:4f:7f:c7:dc:d7:f2:dd:cf:05:0c:c1:d5:be:a6:10:
         40:3b:bd:94:58:60:d3:a8:f4:ae:b9:5d:d1:46:22:e5:49:a5:
         67:f5:6d:b9:13:10:03:e3:3d:1e:a3:58:19:f9:b0:5e:a6:41:
         73:eb:c1:db:50:14:b9:77:0a:a2:68:77:3d:d1:80:fa:1a:92:
         7a:fa:e7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:14:27 2025 by rpki-client