Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File:                     yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier:          HNdbjPuO4pL4oty8EZhQcAzd0yTloEiXbKpuKrKXRLk=
Subject key identifier:   60:0D:78:8C:A0:6A:7B:30:8F:1A:4C:54:0A:A6:A6:3A:6E:58:60:9A
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer:       /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial:       0199228C6F9F3507EEBDB35E553F3910D5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number:          0667
Signing time:             Sun 07 Sep 2025 05:00:52 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:52 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:52 +0000
Files and hashes:         1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
                          2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: uEZhUx3GZMpxEhqlVa/mCCA3oDvvs+wEmE7IRCAz1qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:6f:9f:35:07:ee:bd:b3:5e:55:3f:39:10:d5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
        Validity
            Not Before: Sep  7 05:00:52 2025 GMT
            Not After : Sep  8 05:00:52 2025 GMT
        Subject: CN=600d788ca06a7b308f1a4c540aa6a63a6e58609a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:2c:6c:63:cb:13:cc:75:9c:be:0b:bc:18:
                    43:c1:79:cd:a9:04:60:b2:4e:c3:d5:06:c2:e1:3a:
                    81:98:18:bf:68:0b:b5:69:bf:91:87:b2:51:48:e3:
                    4b:af:a6:7c:9b:68:16:81:aa:db:98:84:57:d3:06:
                    32:c4:eb:00:24:71:df:30:31:f1:47:21:48:c9:da:
                    8d:0a:f0:d4:23:00:a1:33:eb:af:58:0e:fc:e6:b2:
                    4e:99:70:a7:5b:68:a9:e2:4e:16:c5:ba:8a:cd:87:
                    6c:95:57:23:5a:69:94:ea:6f:03:53:ed:32:c6:75:
                    c4:e9:cc:67:1b:76:ed:fd:00:5b:4c:a5:6e:22:f0:
                    79:98:61:0b:23:a1:8a:15:91:c8:2c:8d:fb:44:74:
                    fc:d3:84:bf:52:7b:cd:06:a9:f9:d6:8a:94:80:f8:
                    69:3f:bf:cc:16:17:6d:c6:6c:c8:21:7e:ef:0a:e8:
                    4b:28:29:a5:1a:0c:16:e0:0e:07:55:26:78:0e:2c:
                    ca:7d:cb:1b:71:9d:75:da:15:47:92:4e:bc:fa:ee:
                    c4:c9:2e:9e:6a:66:77:40:b9:aa:9a:21:29:e8:83:
                    6e:1f:aa:07:6b:e8:4d:c1:6f:92:50:55:81:b6:95:
                    82:98:06:19:52:97:a6:d4:b0:70:2c:0a:45:79:07:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0D:78:8C:A0:6A:7B:30:8F:1A:4C:54:0A:A6:A6:3A:6E:58:60:9A
            X509v3 Authority Key Identifier:
                keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:cd:da:e2:69:d4:01:d5:52:84:55:03:5c:86:e6:3f:d5:
         51:c0:e9:75:6f:5c:10:78:b6:a7:fa:d0:a3:0c:d6:7b:de:ea:
         fc:56:5c:cb:51:ff:59:dc:da:db:59:31:3f:61:bd:d1:31:cd:
         86:3e:b1:53:83:ec:02:42:c5:25:26:31:9e:ec:76:11:fa:68:
         d5:e0:3f:e4:8f:cd:f1:0a:7a:0e:79:4b:13:b9:7a:95:38:87:
         e8:6d:96:d2:66:80:1d:fd:f8:72:c0:e8:ea:4d:f6:6b:34:e5:
         ae:76:b1:62:7c:fe:6e:8e:ad:09:47:6f:65:0b:6e:cd:12:1a:
         3c:07:47:9e:7e:cb:b0:a1:bd:d4:bd:5c:36:32:10:42:fc:6a:
         54:4a:23:bd:c0:92:5a:37:9b:c9:87:2f:ad:de:7c:7c:4c:5e:
         8b:69:24:e5:87:fc:39:38:d9:73:db:2a:79:4d:ee:4f:9c:12:
         ab:49:79:5b:f5:8b:2f:eb:1d:45:e2:b0:18:f0:74:db:04:d0:
         8b:10:67:96:1a:47:bd:2d:86:fa:a7:bf:96:d7:9e:94:2e:8c:
         45:9a:77:23:6d:b7:b6:70:e2:ce:9e:61:71:b2:89:11:b3:0c:
         c8:4b:49:6a:43:99:ed:46:74:79:37:bb:a2:04:4c:0e:60:82:
         aa:73:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:12 2025 by rpki-client