Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          h1pwubmVlJysWZ6RQhqBNa9AXt43jhAj+IfRLa3o5Pw=
Subject key identifier:   00:67:5B:05:BE:07:4D:2F:02:68:80:36:02:E1:53:27:66:0F:0D:96
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       019916BF74299880894FB92F76DFB237F723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          1669
Signing time:             Thu 04 Sep 2025 22:01:09 +0000
Manifest this update:     Thu 04 Sep 2025 22:01:09 +0000
Manifest next update:     Fri 05 Sep 2025 22:01:09 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: Ggf5KGof9fDK8qMgEMbhD+VIC3l2bDllgFJnbPbdQHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:bf:74:29:98:80:89:4f:b9:2f:76:df:b2:37:f7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: Sep  4 22:01:09 2025 GMT
            Not After : Sep  5 22:01:09 2025 GMT
        Subject: CN=00675b05be074d2f0268803602e15327660f0d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:11:8b:43:0d:cd:8d:09:3c:b8:80:3a:89:
                    51:18:37:88:73:99:ac:52:52:cb:60:f4:da:e8:4c:
                    5e:af:e1:ba:84:e0:82:3e:70:b1:30:62:58:75:8f:
                    11:55:bb:61:2a:a9:2c:cd:5e:6c:30:63:7a:39:92:
                    90:a7:ba:46:cf:66:2f:fa:21:19:92:80:49:2e:19:
                    b6:a8:c9:ab:e5:0e:b6:4f:9e:f9:e3:17:8e:bb:ce:
                    35:8b:30:49:4f:fd:0d:f3:84:a6:a4:42:25:a1:4a:
                    79:1c:a5:cf:66:4d:88:38:84:7f:9c:23:cf:90:e7:
                    46:f9:69:f4:bb:f0:54:48:a1:bb:a5:f3:02:bb:02:
                    1b:13:18:df:24:80:ad:0d:5f:7a:38:de:04:d8:06:
                    6b:8a:21:28:50:7a:77:14:52:e6:32:08:c1:f5:4a:
                    38:94:8a:fd:00:47:c7:eb:11:64:be:5a:64:81:29:
                    85:23:ff:3f:b6:18:62:b3:8c:b6:79:6e:48:d9:97:
                    97:df:96:04:16:ff:de:26:fc:69:e5:72:e3:8d:7e:
                    d0:a5:6a:14:0f:57:71:df:86:ab:b5:f9:d2:13:71:
                    a8:a2:1a:8f:f3:32:1e:e8:f4:07:f0:1d:e2:8c:98:
                    88:bb:99:03:d5:20:da:a1:3b:bb:2f:e9:25:5e:2c:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:67:5B:05:BE:07:4D:2F:02:68:80:36:02:E1:53:27:66:0F:0D:96
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:14:b9:7b:05:4a:84:31:d6:01:40:12:ef:72:80:6d:51:bd:
         44:8e:98:4b:19:65:8d:ea:86:3d:c6:04:4f:9f:b9:eb:7c:af:
         ea:23:52:a7:e9:a1:bc:e1:58:7a:50:7a:1c:57:c8:0b:4c:7c:
         10:75:96:cc:3f:70:92:43:31:3d:c0:34:07:c9:33:4a:20:fb:
         c5:58:ed:9b:68:fe:e3:cc:33:e5:1c:00:b8:49:53:91:f8:41:
         be:b0:80:3c:e9:d8:9e:63:9c:0e:91:f5:cf:87:d6:dd:dd:29:
         08:0b:95:a2:f7:4a:46:49:1f:bb:8b:5a:4f:2e:68:73:0b:36:
         b5:0d:8c:6b:7e:a5:28:b5:6f:9b:37:6e:a5:e2:3d:ed:4d:33:
         bb:47:c6:dc:c0:ac:fc:53:8a:a2:3b:3c:35:93:0a:82:0f:cc:
         dc:5c:69:e3:c1:4d:48:c3:f2:85:01:ef:7a:97:03:6e:ac:ba:
         21:98:22:fe:73:0b:b3:18:40:d8:92:da:b4:3b:68:ad:df:f4:
         00:46:f5:03:af:69:7d:3b:96:7d:a9:0b:88:c7:a9:7c:4c:a6:
         f8:67:98:00:3a:fa:ab:77:1e:66:e2:b9:66:9c:92:f3:17:42:
         e6:fb:29:28:e1:fe:6d:dd:37:31:35:b9:66:fa:de:17:b9:e5:
         66:31:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:27:20 2025 by rpki-client