Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
File:                     Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft (raw, json)
Hash identifier:          5yqHSBuPW9DSzDyxKcv50X2iOQmdn/YFHRj4eT8hZII=
Subject key identifier:   AC:2D:B8:1D:4B:22:56:B7:4A:59:3E:00:D4:94:8F:01:1B:61:9B:34
Authority key identifier: 63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9
Certificate issuer:       /CN=6398ec15bc039c5a6042fbe90484456be02da7b9
Certificate serial:       019922FA39A9B1912C7655469970D7FA740D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
Manifest number:          0FA6
Signing time:             Sun 07 Sep 2025 07:00:47 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:47 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:47 +0000
Files and hashes:         1: Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl (hash: sWCRBg3q3I7JKh8bCZsqhE/a0KUIyQyOOsiCYdtet0U=)
                          2: e7A-mRDgO875HCDrxITlnnJ3Ki0.roa (hash: 7vWhmuACkkydDfcxmeEEUNVhiR5m0fscFivB+SuNzME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:39:a9:b1:91:2c:76:55:46:99:70:d7:fa:74:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6398ec15bc039c5a6042fbe90484456be02da7b9
        Validity
            Not Before: Sep  7 07:00:47 2025 GMT
            Not After : Sep  8 07:00:47 2025 GMT
        Subject: CN=ac2db81d4b2256b74a593e00d4948f011b619b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:41:13:e1:01:5e:69:85:99:58:c5:64:29:
                    d5:42:28:8f:18:da:f7:2a:3f:fe:b9:f8:80:23:5b:
                    9c:6c:7c:f5:12:df:ff:7d:13:a7:92:a5:1c:50:10:
                    c6:2b:16:b8:ef:ea:c9:c9:ec:2b:6b:8d:5d:b2:be:
                    ee:b0:f0:f7:24:54:c9:e1:48:04:a7:82:38:9c:2e:
                    0b:ef:4c:27:f0:32:74:18:cc:49:20:69:30:d7:dc:
                    5e:4a:f0:3a:9f:60:43:9a:aa:94:84:38:29:8b:3a:
                    3f:9f:26:43:b4:c2:34:cd:b8:87:53:88:95:9a:e4:
                    22:80:04:a8:17:80:ff:f3:ff:37:e5:69:c1:b6:12:
                    6b:45:f1:6b:20:50:e9:15:0f:50:73:54:54:4b:11:
                    41:06:8b:ba:a6:3d:b5:85:5a:ee:a6:87:cf:d9:d3:
                    46:52:e9:b0:d0:94:47:68:5e:db:f2:c8:2e:61:44:
                    c3:1b:0f:86:c3:fa:58:6e:a1:07:3e:30:17:b4:bc:
                    21:e9:5e:c5:16:bb:67:ff:a8:9d:92:7f:35:1e:72:
                    fd:6c:27:59:57:78:76:d3:0c:6f:06:96:82:63:a3:
                    d6:af:28:a6:93:58:b4:9f:36:c6:a7:7a:b8:54:f8:
                    7e:08:02:cb:d1:d4:04:9f:53:63:08:b1:1f:22:a9:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2D:B8:1D:4B:22:56:B7:4A:59:3E:00:D4:94:8F:01:1B:61:9B:34
            X509v3 Authority Key Identifier:
                keyid:63:98:EC:15:BC:03:9C:5A:60:42:FB:E9:04:84:45:6B:E0:2D:A7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7711d9-7f7c-4edb-a687-d6f04e708454/1/Y5jsFbwDnFpgQvvpBIRFa-Atp7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:38:07:62:06:86:47:84:da:d8:0e:52:2f:2a:c2:a1:4c:
         3f:c0:41:1a:a7:4b:7d:62:ae:a1:80:be:dc:d4:63:73:f6:e0:
         44:4a:79:9b:3c:ab:41:e0:5d:c4:56:55:34:8b:ce:a7:9d:d1:
         d0:0a:c6:84:c6:8b:e5:fc:17:a8:e3:5a:e7:9a:a6:de:3a:c5:
         c4:f2:c9:b2:b9:dd:cf:b5:bf:5e:47:07:82:d0:70:f7:9b:3d:
         5d:18:87:d8:c9:fa:34:92:ae:9c:1f:8d:83:25:cc:3c:c3:fc:
         2c:ae:e7:31:a8:00:ae:32:df:b8:df:41:14:15:51:ed:8c:b2:
         d7:c8:b8:0f:bd:88:be:c6:1a:86:d5:05:b5:d2:31:f7:98:31:
         94:18:51:8d:bf:00:ca:ed:fb:8d:7e:2e:d7:3a:e5:84:4f:09:
         fa:ae:b4:01:59:03:ba:8d:ba:5e:de:b7:c6:85:cd:6b:a6:a1:
         48:b0:15:06:97:3f:86:52:f5:00:fd:66:95:a8:71:87:d8:d7:
         49:dd:93:8c:29:47:75:da:42:98:00:5a:dd:25:0e:be:b1:1a:
         cd:64:34:53:58:f8:62:6c:32:30:20:ba:e2:dc:e8:d0:60:7f:
         dc:b2:da:24:1d:42:20:cc:2f:86:f6:19:fa:08:f2:a0:d0:b3:
         b0:34:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:40 2025 by rpki-client