Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          P+nONe8uTICDHsMu01WcIeehINWA5kv3mpqeWp56Ug4=
Subject key identifier:   F8:23:24:CF:B6:B4:A4:3C:7A:86:FB:99:89:BD:C4:02:CE:59:48:AF
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       019922FAB254224A8A82F4AE793C416E1F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          1605
Signing time:             Sun 07 Sep 2025 07:01:18 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:18 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:18 +0000
Files and hashes:         1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: QThJxdIvldUZnt9do7vfcUvpmy611cLwAVf09wbqEnE=)
                          2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:b2:54:22:4a:8a:82:f4:ae:79:3c:41:6e:1f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Sep  7 07:01:18 2025 GMT
            Not After : Sep  8 07:01:18 2025 GMT
        Subject: CN=f82324cfb6b4a43c7a86fb9989bdc402ce5948af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:dc:3d:1d:d2:09:92:b0:b6:13:19:2c:20:
                    bc:fb:6d:d4:bf:54:49:b2:41:c9:ea:38:7a:06:97:
                    72:15:42:eb:c1:a3:2a:4c:a8:88:77:dd:53:50:7a:
                    cf:ab:2b:39:33:d3:d4:f9:de:e2:62:70:00:c5:e6:
                    40:4b:cf:59:2f:cc:2b:6b:8f:40:5c:db:82:bc:6d:
                    55:81:12:b8:74:98:14:d8:3d:82:f3:bb:38:a6:d1:
                    6d:09:4a:9a:a9:9d:9a:cc:00:79:d9:07:d0:3b:a4:
                    31:3f:85:d4:38:6c:3a:3d:db:3f:f9:6b:f9:40:10:
                    c1:b7:fc:44:51:1a:f1:da:0c:14:f5:93:c4:70:ec:
                    ff:43:0e:d7:cc:fe:95:54:ac:e6:d7:eb:6a:29:4d:
                    69:ae:43:e8:30:f4:08:d0:38:5d:e0:66:0f:eb:9c:
                    10:1e:b9:1a:c8:40:8c:8c:b6:fc:cb:f6:9c:90:6b:
                    a7:a2:9a:bc:46:00:4e:b7:b5:f4:28:08:b9:e8:0a:
                    ef:51:d7:ca:73:ae:d4:c9:b3:91:f5:09:8b:1b:58:
                    63:4f:61:aa:20:dd:4e:61:06:4a:2c:b0:88:9b:e8:
                    8c:76:65:db:d1:cf:ee:5f:e6:13:9f:55:67:e5:be:
                    be:c4:30:28:ca:83:e7:e8:ac:15:2f:f6:9d:46:e9:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:23:24:CF:B6:B4:A4:3C:7A:86:FB:99:89:BD:C4:02:CE:59:48:AF
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:26:27:c4:54:3b:71:b4:d1:f9:58:82:a0:65:2a:f0:41:
         4e:81:7d:2c:70:06:b7:f3:0a:da:4d:78:84:49:cb:65:bd:22:
         c2:93:d7:45:bc:39:ee:7a:f9:a9:91:61:4e:04:fe:a5:98:3a:
         14:22:43:62:71:1a:1b:e1:27:79:6c:7f:6d:32:26:8d:e9:f4:
         c9:4c:21:93:a2:a7:a4:bd:f2:f3:e7:2c:c7:a7:17:99:03:3c:
         d4:21:a1:b6:d5:db:ef:e6:b7:11:72:8c:5b:f7:78:bd:6b:c4:
         25:bb:6d:da:c8:5b:98:64:6a:32:69:23:3c:46:50:2a:22:cd:
         10:55:db:47:5f:6a:d2:40:13:cf:a5:d1:df:ea:41:fd:17:94:
         fc:72:f3:fe:d6:f2:db:c5:41:84:46:0f:d0:de:d4:15:12:70:
         b2:bb:34:af:5f:bf:e3:fe:cd:e9:16:f9:64:cc:94:87:75:64:
         cd:b1:8e:69:f3:3b:78:99:9a:b8:69:51:39:d0:ec:a7:33:7d:
         b2:1a:98:79:00:3f:33:fc:4c:5a:28:df:e5:47:ea:1d:db:78:
         0e:99:7f:9d:e0:75:18:3b:b6:f9:b6:e1:a7:41:d3:1f:a5:13:
         8e:6a:9a:90:83:4b:de:ca:e3:f0:5a:c4:85:9f:f0:49:24:31:
         99:4e:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:22 2025 by rpki-client