Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier:          UJuFNatW5b+ztM5ogJqbQHNCuCyVyKYlh8mNf4BUaDg=
Subject key identifier:   3A:BB:FF:FA:19:A8:1A:D0:18:71:7D:D7:7F:0C:6D:50:7A:DD:DD:E2
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer:       /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial:       0198744FDBB69DAEB7B9208B9EBF9EA4A46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number:          11E2
Signing time:             Mon 04 Aug 2025 09:00:47 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:47 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:47 +0000
Files and hashes:         1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
                          2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: IHrSYqRWIvU+PNp8yZiMfE7MqfHHjnb7QIopJxgh76s=)
                          3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
                          4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:db:b6:9d:ae:b7:b9:20:8b:9e:bf:9e:a4:a4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Validity
            Not Before: Aug  4 09:00:47 2025 GMT
            Not After : Aug  5 09:00:47 2025 GMT
        Subject: CN=3abbfffa19a81ad018717dd77f0c6d507adddde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:cd:60:f0:1e:76:0f:24:40:c3:a5:fe:f5:
                    1b:05:af:16:ff:42:ce:88:53:04:27:ef:c6:f4:aa:
                    3a:6e:11:b7:9f:a3:9e:ef:d2:2c:7c:85:7a:3b:21:
                    fa:11:75:6a:48:c8:f4:30:db:25:8c:e8:8c:a1:8a:
                    76:fe:1b:57:3a:bd:66:2c:2b:de:6b:f7:c9:a5:ad:
                    f2:80:23:db:f9:e4:97:0c:df:b5:41:ac:26:10:26:
                    80:0d:cf:fa:24:56:21:df:5c:ef:2a:8c:df:1f:d6:
                    ff:92:a7:cc:7f:9c:fa:e1:fa:1f:a0:95:bf:7e:b8:
                    47:7e:ab:86:07:d4:ab:ce:74:f2:e9:fa:27:77:14:
                    b2:6c:fb:48:76:eb:ea:9d:a3:18:f9:89:c5:eb:55:
                    0a:5d:6b:09:ad:cc:53:88:5f:e3:0c:db:f5:e9:74:
                    cd:17:ff:b2:21:6e:3c:68:a0:d4:f7:ab:72:8f:e0:
                    34:15:04:80:e4:d0:32:7d:f6:1d:38:21:fe:6a:90:
                    b8:d0:49:2d:9e:64:3c:8e:ed:f7:c3:53:e9:2d:5f:
                    5b:a3:4b:58:15:23:19:41:13:42:cd:68:16:46:2a:
                    8c:69:6a:b8:e3:ee:b8:60:fb:11:e4:0d:77:c2:86:
                    f1:52:34:dc:7f:30:bd:69:5b:54:55:3b:bc:d9:52:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BB:FF:FA:19:A8:1A:D0:18:71:7D:D7:7F:0C:6D:50:7A:DD:DD:E2
            X509v3 Authority Key Identifier:
                keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0b:8f:5e:5c:67:e3:ce:83:64:31:d7:65:96:8c:2c:3a:0c:
         d4:a1:b5:49:15:60:23:eb:b4:f5:30:b1:68:7a:9e:0e:f2:9c:
         50:f8:9c:db:ea:64:d7:e8:b5:2b:b7:9f:08:bc:e3:76:86:67:
         b1:13:2c:4f:f1:ff:d6:1d:e0:09:6a:04:05:d2:14:d5:54:28:
         d0:fb:f1:a0:2f:24:4c:1e:e3:cb:99:6a:2e:5a:2a:b9:2f:65:
         bd:60:c3:52:47:94:02:58:1b:76:9f:e6:ed:eb:c9:36:52:6a:
         10:d2:1e:dc:c8:d4:a5:95:ce:1d:6f:ea:bb:94:ac:65:6c:a0:
         aa:f8:2d:b6:ec:2f:52:75:0d:fc:8c:09:fc:f8:d8:66:77:32:
         35:25:0e:3c:c0:31:83:08:7d:4d:e9:1f:f2:5a:c4:05:37:1b:
         de:a7:4f:30:97:0e:63:65:db:30:5a:72:58:e3:51:4a:08:e1:
         6a:46:0b:ac:94:78:38:d5:8a:7c:5b:c6:4a:c2:ff:b3:9f:34:
         3f:91:6b:4b:82:62:c6:25:bd:56:9f:23:85:5c:da:c9:dc:4c:
         55:a5:f7:5e:47:6a:c4:c9:62:61:ab:10:33:11:0d:35:3e:48:
         d2:7e:dc:d5:15:a8:84:03:1e:1f:5d:b9:85:e7:27:f6:88:81:
         4f:10:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:36 2025 by rpki-client