Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          P8DqjGhwzCvR/hund1VzFyqqOUWWu87h/FmXWPPwtgs=
Subject key identifier:   7E:08:BF:60:EB:32:7E:D1:8C:EC:EC:82:FB:A0:35:98:71:3B:E6:0A
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       019874BE6C722863876ED956C287FC776C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0AC9
Signing time:             Mon 04 Aug 2025 11:01:33 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:33 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:33 +0000
Files and hashes:         1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: /a7/4xcdScyTHbEeqR6rM0ZujLjl/P3s1kqXTOOGovs=)
                          2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:6c:72:28:63:87:6e:d9:56:c2:87:fc:77:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Aug  4 11:01:33 2025 GMT
            Not After : Aug  5 11:01:33 2025 GMT
        Subject: CN=7e08bf60eb327ed18cecec82fba03598713be60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:00:70:0a:f0:ef:8f:16:f7:73:9a:5d:5f:
                    60:38:44:ef:1b:9c:25:61:f4:11:7c:28:40:52:4a:
                    8e:14:c6:d5:55:bf:07:23:57:0e:66:36:3d:90:27:
                    e9:67:9b:c9:4c:a0:e3:87:a5:c3:e8:d6:5f:e8:6d:
                    e5:87:bc:a2:11:ef:94:c0:52:41:e4:8b:45:5a:c0:
                    7e:6b:85:e3:fd:26:35:b3:26:98:46:dd:c2:2f:cf:
                    6f:c6:e9:11:fc:08:31:7e:f9:1b:f4:69:e3:38:61:
                    7f:52:f3:81:7a:d5:9a:8e:0c:38:75:62:dd:f0:26:
                    00:1b:db:73:ea:2a:83:04:c2:bc:49:50:87:69:dd:
                    32:c4:58:4c:98:41:0c:31:d8:8e:e9:7a:7f:4b:91:
                    a8:e4:c6:35:08:5c:5e:3e:55:93:a2:fb:db:ff:79:
                    2f:7c:37:bd:f1:34:e3:eb:eb:50:03:69:89:78:aa:
                    97:bf:2d:30:00:e9:e8:d0:01:4d:39:bb:84:20:88:
                    5e:ee:38:21:54:85:f3:04:52:ea:9b:43:96:b2:c1:
                    27:0a:be:1c:f3:6f:c5:30:1e:71:38:73:ab:10:64:
                    33:c6:4b:89:b8:5e:f8:f1:8b:21:6a:d6:23:11:09:
                    b9:b0:45:7b:bf:61:16:2d:13:b1:8e:32:12:88:73:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:08:BF:60:EB:32:7E:D1:8C:EC:EC:82:FB:A0:35:98:71:3B:E6:0A
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d6:3a:72:f9:39:48:9c:f3:92:9a:08:1f:ba:35:0d:9c:e3:
         b7:f0:c8:69:04:ef:04:c0:32:50:d4:92:05:6a:95:d1:0e:75:
         b0:60:01:a7:fa:99:bd:36:c6:86:12:c7:85:e4:9c:24:b3:37:
         4f:28:3a:ca:e1:db:4d:1a:fb:53:96:a9:0f:22:e2:f3:c0:8f:
         d4:11:94:19:a6:99:3c:60:fc:e0:ae:11:45:42:3a:a3:24:85:
         fa:33:22:39:21:55:7c:f3:e9:99:f5:e0:c8:4e:72:b8:a5:f7:
         e0:ea:dc:24:1d:74:dd:df:66:5e:05:4e:4c:94:1d:55:50:64:
         8f:33:c8:ca:5d:8b:bf:b1:a8:49:f2:aa:9e:32:04:7d:3b:4b:
         0c:79:91:97:63:52:b9:18:4d:0a:d1:57:48:fe:d7:06:16:63:
         0e:be:75:58:c9:95:e6:d1:86:48:71:b7:8c:9a:db:d1:65:b0:
         ae:52:1c:96:47:96:90:85:2c:43:1c:dc:30:3c:0c:c8:40:9e:
         f7:25:a1:87:d8:78:40:a2:bd:b1:f1:33:89:79:fc:5f:e3:07:
         2c:04:51:12:64:61:f9:76:ab:69:03:57:40:50:a9:ea:bd:c2:
         07:81:4c:88:b3:20:6c:d6:cf:d8:f9:15:8b:39:f2:49:fe:e7:
         be:d2:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:24 2025 by rpki-client