Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
File:                     YRXyX81FgRzk-aHvlLmK6C0jyOU.mft (raw, json)
Hash identifier:          VHpyQlTA9Vk7N40VuxdiVI28jJF3N/z74lOgpdCeGFg=
Subject key identifier:   D0:4C:DF:79:59:80:E8:43:FB:B8:95:0F:B8:01:80:FA:08:32:37:2B
Authority key identifier: 61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5
Certificate issuer:       /CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
Certificate serial:       0199168804F03BB4A2ACCB0E3C7FDA9BF6CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
Manifest number:          01C5
Signing time:             Thu 04 Sep 2025 21:00:36 +0000
Manifest this update:     Thu 04 Sep 2025 21:00:36 +0000
Manifest next update:     Fri 05 Sep 2025 21:00:36 +0000
Files and hashes:         1: YRXyX81FgRzk-aHvlLmK6C0jyOU.crl (hash: HJOWcEnhd6QwV/n2prgl6uqDKOTNQq/tHN57XYMQgzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:04:f0:3b:b4:a2:ac:cb:0e:3c:7f:da:9b:f6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6115f25fcd45811ce4f9a1ef94b98ae82d23c8e5
        Validity
            Not Before: Sep  4 21:00:36 2025 GMT
            Not After : Sep  5 21:00:36 2025 GMT
        Subject: CN=d04cdf795980e843fbb8950fb80180fa0832372b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:e6:71:c1:4f:53:47:e2:56:18:6b:7f:7a:
                    54:30:f7:ef:af:df:f4:ab:07:a4:07:8e:a8:3c:ee:
                    8b:d8:66:65:e0:f3:f0:a2:3c:24:24:55:06:47:72:
                    ca:90:ac:8c:a3:8b:77:cd:7a:85:5b:99:f7:4b:11:
                    69:74:47:64:73:44:37:c4:22:56:2c:d5:97:ca:5f:
                    32:74:7f:f6:51:cb:3c:44:04:76:aa:ab:c1:98:06:
                    bc:99:41:99:fd:93:f6:9a:70:eb:fb:86:03:3e:0b:
                    7e:33:26:77:98:0a:cb:eb:aa:b0:64:aa:8a:83:08:
                    1b:b2:20:d4:9b:be:01:64:81:f5:1f:a0:25:4d:e1:
                    24:64:68:a7:5c:db:78:17:b8:a0:e2:eb:c0:6e:cc:
                    98:cc:9a:28:b4:93:fa:e8:32:27:d8:75:c6:b1:89:
                    11:01:c6:b0:e8:be:4f:f1:b9:46:67:ed:06:33:cf:
                    b3:95:ae:0f:96:01:ab:df:66:f1:84:92:d1:64:26:
                    51:67:ee:e0:70:a9:ff:57:96:16:8d:86:a5:2d:d8:
                    88:98:83:fb:6a:c4:bf:5a:da:71:02:15:3d:b0:ef:
                    51:fb:ef:da:51:d8:81:83:14:56:2c:d5:01:b9:9b:
                    6c:51:73:04:9b:0b:c7:e1:6a:3f:a3:33:75:57:e2:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:DF:79:59:80:E8:43:FB:B8:95:0F:B8:01:80:FA:08:32:37:2B
            X509v3 Authority Key Identifier:
                keyid:61:15:F2:5F:CD:45:81:1C:E4:F9:A1:EF:94:B9:8A:E8:2D:23:C8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRXyX81FgRzk-aHvlLmK6C0jyOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7021eb-b037-47fe-8221-e0260fac74b9/1/YRXyX81FgRzk-aHvlLmK6C0jyOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:95:0e:ea:41:d6:43:a7:f7:52:ad:55:3c:53:af:57:4b:32:
         15:3e:b3:05:be:9d:dd:a6:7a:83:ee:96:00:9f:01:10:fd:3c:
         af:ff:67:17:09:ea:3c:a6:fe:f8:81:83:e0:26:3f:8c:6d:7f:
         80:03:5c:35:b8:71:cb:0c:cf:ce:98:f8:26:51:42:73:b2:83:
         c3:59:3a:4f:55:51:b4:93:3d:2a:d4:54:7b:b9:3e:d4:00:4c:
         8e:cd:8d:5f:af:42:f3:6b:e6:19:3f:1d:c5:26:24:91:1a:56:
         33:df:eb:ce:b6:28:e7:f6:d6:88:e6:77:bd:df:1e:f6:c1:6e:
         fa:c8:ea:cd:d7:50:12:87:0f:95:20:b3:b0:ba:ce:92:11:e7:
         a4:9a:27:16:db:ea:84:2a:aa:ed:f2:82:9b:84:9b:07:7b:1f:
         fe:15:13:f4:74:39:9c:62:b1:f1:ff:47:ee:11:d9:e7:35:aa:
         f0:8d:dd:2c:17:5f:17:58:b9:4a:83:78:bd:b1:01:1b:0a:d2:
         63:46:d7:ac:dc:c0:26:ff:3a:62:c2:d1:60:ec:95:be:18:c1:
         03:8a:52:99:3f:11:70:66:62:03:08:c2:27:7d:64:3f:1b:1a:
         36:18:db:25:17:72:b4:69:0f:0c:b8:eb:70:92:b8:68:19:b4:
         6a:15:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:18 2025 by rpki-client