Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File:                     YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier:          8L8U9Q8I4ITlvgK10htN0KauAfN7bxV9DgMDx9j1a2M=
Subject key identifier:   32:7E:2A:19:12:2E:AA:D4:F8:D1:2C:BA:05:26:D5:B4:25:C2:48:82
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       0199239EE0B2529F00FBB6F3937F25AECB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number:          035F
Signing time:             Sun 07 Sep 2025 10:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:38 +0000
Files and hashes:         1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: S+jxAUaxSvp+NCKMWVISKlfz+SinbTbuAfHF1ef/Y5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:e0:b2:52:9f:00:fb:b6:f3:93:7f:25:ae:cb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: Sep  7 10:00:38 2025 GMT
            Not After : Sep  8 10:00:38 2025 GMT
        Subject: CN=327e2a19122eaad4f8d12cba0526d5b425c24882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:7e:45:02:a3:05:6b:95:99:48:f4:e2:2c:
                    31:94:16:19:65:33:1f:d2:25:7a:50:7b:83:7d:40:
                    97:14:6b:a6:7f:a9:62:5b:db:56:e2:9d:30:53:61:
                    12:6b:09:da:2b:17:c6:4b:54:99:f1:08:8f:ab:6d:
                    46:9a:36:bd:6a:0c:1d:08:80:f2:6a:05:9d:9b:7e:
                    26:54:e1:1e:7e:df:6f:21:65:e2:4c:a0:12:a9:9c:
                    b8:8f:fa:b3:6a:49:04:a3:70:39:86:40:9e:74:86:
                    1b:7e:70:9c:00:ea:65:4f:6d:12:5e:22:05:dd:4d:
                    fb:92:5c:75:a3:b4:59:e3:9b:13:87:f5:35:ea:45:
                    bd:c8:01:e6:20:cf:91:60:a2:57:f0:c4:51:4b:9f:
                    0f:e6:20:ad:bd:02:f9:ad:20:84:f5:41:fc:c2:56:
                    90:9c:90:7f:f4:e1:d7:dd:0e:fb:96:73:85:c1:a4:
                    e4:23:85:bc:24:5c:a7:38:b8:5e:48:af:0d:24:e5:
                    87:84:f1:42:5e:d9:a0:d8:fb:64:91:cf:c4:cf:e2:
                    9d:00:aa:8a:9f:76:58:1b:e0:4c:37:e5:81:e3:60:
                    1a:a5:29:16:5c:92:de:a0:b9:bb:12:3c:08:10:4d:
                    ba:42:b1:e6:8f:6e:66:2a:d5:03:66:30:c4:98:a0:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:2A:19:12:2E:AA:D4:F8:D1:2C:BA:05:26:D5:B4:25:C2:48:82
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:eb:18:ef:38:d3:99:5a:f7:b5:3f:78:c9:60:de:ee:fe:
         88:90:1d:20:7a:33:2e:90:46:7b:10:c7:f1:87:fe:91:9a:a2:
         c1:80:84:30:5c:cb:9f:d7:5b:e6:2f:eb:7e:ff:33:16:27:78:
         36:7b:16:2e:c2:c8:ba:88:50:ec:d2:e0:a0:dd:a4:2f:b7:ab:
         21:c5:c8:81:92:79:b2:4d:32:d6:a4:53:29:3e:0f:d6:80:4f:
         96:83:0c:e3:66:d8:f4:c8:3b:fa:92:b5:f0:32:da:8f:78:c7:
         1c:04:81:a2:c9:57:d6:75:fd:d5:6a:2d:82:83:61:f1:1b:44:
         0d:12:e0:de:ff:8b:5e:10:30:2a:5b:a8:36:83:98:6c:8b:c2:
         37:94:34:c9:95:e8:2c:d2:f0:49:93:0e:24:c7:2d:5e:2c:8d:
         43:a2:1b:00:57:cf:ac:2f:09:cd:0b:b3:72:64:36:31:33:47:
         76:54:7d:86:ef:69:79:d8:b6:be:ea:4c:a2:0c:ff:c8:68:d3:
         1d:3c:df:ac:8c:3e:12:88:83:69:cb:3f:47:0a:c3:ee:d0:97:
         75:d4:4f:94:fa:fa:cd:82:36:73:f8:a0:c5:6e:09:4f:f7:f7:
         88:f0:7a:28:d3:d9:98:7d:cf:65:92:93:c9:0b:d6:4b:ba:e1:
         12:87:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:07 2025 by rpki-client