Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File:                     yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier:          eEoG2d+fipWbYqGzQDOSz82JxUBtBUw3pgiNOCirUGM=
Subject key identifier:   F0:B0:FB:40:B4:9F:CA:AF:59:71:4F:F4:23:08:A6:8F:F6:1E:27:70
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer:       /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial:       019923A014D7C361A403989F6517E2D41514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number:          0B78
Signing time:             Sun 07 Sep 2025 10:01:57 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:57 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:57 +0000
Files and hashes:         1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: CQxExMQnrDC+yXgtXq8z/Jkk1IYlWur+Axs3SWz6OAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:14:d7:c3:61:a4:03:98:9f:65:17:e2:d4:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
        Validity
            Not Before: Sep  7 10:01:57 2025 GMT
            Not After : Sep  8 10:01:57 2025 GMT
        Subject: CN=f0b0fb40b49fcaaf59714ff42308a68ff61e2770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:a3:f4:d4:63:2a:76:16:0f:85:67:f0:f6:
                    35:a0:6a:39:d0:cc:a4:85:95:ea:9c:5d:26:ce:ab:
                    ca:99:cf:97:e5:a9:67:c4:ee:6e:4b:a9:14:a3:48:
                    c3:e8:a5:11:15:22:89:d7:8f:94:8d:63:3e:0a:37:
                    11:51:4b:9e:1b:4c:ae:96:fa:70:93:1d:8c:85:e7:
                    9d:33:9b:87:4d:20:43:ec:c4:69:25:85:a6:83:8a:
                    55:64:25:0f:b1:7c:09:d5:a0:e0:c9:b2:bd:88:eb:
                    6f:21:37:f2:20:20:64:3a:75:b6:5c:0b:56:41:2d:
                    f0:e7:7a:98:1a:2c:81:d9:79:b7:c8:b0:03:e7:75:
                    8b:3a:b1:bc:7c:ce:35:04:6e:7f:59:36:1e:d1:fe:
                    02:26:00:f3:78:d6:d7:03:f3:cb:d6:ba:fc:81:2a:
                    55:82:1e:f9:30:97:27:83:b1:e9:d6:b5:81:75:fd:
                    b1:47:37:c3:6f:ea:8b:9c:9d:aa:ff:d3:30:87:cf:
                    fe:94:f1:10:8b:21:d7:ee:38:d3:e4:62:ad:3b:57:
                    eb:49:a3:d7:4e:3e:eb:57:2f:07:64:3d:96:9c:14:
                    27:0e:4a:d0:c7:36:a7:b7:b6:08:fb:dc:dc:29:3e:
                    bb:16:fd:a6:d8:24:4a:d3:18:25:36:3b:6e:79:72:
                    32:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B0:FB:40:B4:9F:CA:AF:59:71:4F:F4:23:08:A6:8F:F6:1E:27:70
            X509v3 Authority Key Identifier:
                keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c7:e2:a2:d8:d6:c2:c2:0f:72:84:b7:25:ba:73:e5:5d:a7:
         d2:10:0d:0b:41:da:71:da:6d:71:e1:13:63:05:aa:ec:f3:c2:
         b0:28:e0:d1:91:0e:f5:78:31:91:8e:e2:56:7e:9a:40:66:f0:
         09:13:a8:c5:17:f8:f5:bd:a5:4e:5f:2a:8e:3a:74:67:e9:da:
         b2:bd:33:a2:18:de:22:42:89:3b:e8:69:67:68:d7:06:86:d2:
         55:d6:cc:fb:60:63:a7:47:c2:f1:86:9d:5e:c4:08:00:81:7e:
         14:93:06:c4:62:2f:ef:53:17:f4:7e:43:4d:47:73:35:70:72:
         b3:89:a6:f7:6a:e9:e4:ac:e9:76:9d:70:81:87:71:e1:f8:89:
         41:1f:20:ba:a4:6c:8d:6e:1c:9a:6d:70:e5:8d:38:cc:2c:10:
         cb:e7:d7:13:fd:7e:f9:42:05:1e:e3:3f:90:b8:de:e9:dc:2e:
         b8:e5:78:77:9f:2b:ad:93:3d:a3:92:c4:f5:1c:12:b8:f1:10:
         7e:e1:a7:ae:d4:e6:1c:aa:d5:9d:be:ee:6c:68:06:e1:47:93:
         7a:8d:f3:31:77:ac:ff:64:b5:4e:0b:a4:a9:05:d5:16:2a:39:
         f0:de:43:71:b8:a4:dd:6a:95:88:6c:3f:58:18:33:97:9e:6e:
         dc:ab:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:09 2025 by rpki-client