Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File:                     Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier:          zvhaQchhsP18SB9WcDS3ny64/64SeJ3cbNuglPLygJ4=
Subject key identifier:   09:7E:8F:CC:5C:37:6C:69:DA:24:D4:2A:2C:D2:F6:39:C6:40:93:CA
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer:       /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial:       019896A585B8C9F7F68D04F7F344F2FF4F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number:          05F2
Signing time:             Mon 11 Aug 2025 01:01:26 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:26 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:26 +0000
Files and hashes:         1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: BDFyJBvahOuG/IS7a7r33yXCn2FDHZJKPFOot00s/mg=)
                          2: YUQVyrq4PHervTbSyhk_DAk9Eqc.roa (hash: awqm1ZtQIXxZlbailLUEsiOtmvaS6joj09FbNkED+tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:85:b8:c9:f7:f6:8d:04:f7:f3:44:f2:ff:4f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
        Validity
            Not Before: Aug 11 01:01:26 2025 GMT
            Not After : Aug 12 01:01:26 2025 GMT
        Subject: CN=097e8fcc5c376c69da24d42a2cd2f639c64093ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:50:80:20:62:b3:97:20:aa:8e:a4:95:60:
                    94:b4:73:09:3e:29:49:30:d5:4c:55:9c:e5:c6:27:
                    02:e8:b5:c8:97:da:cd:3f:46:3b:c2:65:11:e4:a8:
                    ca:1b:52:1d:a3:6b:24:07:22:a3:fe:a0:4e:1a:5f:
                    e9:70:f5:04:97:24:61:bc:89:08:78:51:4a:c5:4e:
                    76:1e:9a:5e:f5:fc:2f:a7:43:37:17:7d:61:8f:49:
                    be:ee:6b:f0:71:b1:fd:e8:8c:ff:31:02:ac:e6:a3:
                    e7:f4:50:12:46:e9:40:23:ee:90:12:2d:21:db:0e:
                    90:df:87:8d:bf:7a:a8:11:10:88:c5:6e:08:d4:27:
                    eb:c5:2b:6b:23:71:d1:77:df:34:dc:64:7c:32:4f:
                    f6:5d:3b:a9:bb:45:89:ae:90:78:e9:16:36:2e:8b:
                    35:01:e6:86:b3:f7:df:e4:a9:d9:b3:21:4d:3e:ad:
                    16:f1:8b:92:f9:ab:1f:fa:78:9d:82:34:06:30:ce:
                    a8:df:5a:e0:21:de:56:2e:4e:98:81:bf:06:39:03:
                    1d:ea:cf:b5:31:6f:37:6f:c2:21:94:7d:f6:0d:ee:
                    53:c5:c8:18:8d:c4:d4:e6:27:9e:ee:9b:e0:bf:2d:
                    b6:ca:e8:23:34:d1:0f:fa:e7:65:08:f5:6f:7b:a9:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:8F:CC:5C:37:6C:69:DA:24:D4:2A:2C:D2:F6:39:C6:40:93:CA
            X509v3 Authority Key Identifier:
                keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:ae:14:2e:3d:da:c3:29:bd:f1:9b:4d:3e:b6:24:d6:a2:
         c1:ed:65:b2:1c:ae:d4:77:e6:98:19:61:f8:45:27:b7:e8:cf:
         c2:88:62:e3:57:a9:4d:1e:9f:a6:84:2a:b5:27:9b:96:0d:5d:
         ce:0c:db:d3:f1:47:77:70:f4:fc:9a:b8:fd:18:dc:a5:0c:2b:
         17:fd:5c:82:04:9e:b8:1a:3d:e7:d9:22:73:9b:ce:dd:5d:15:
         a6:2a:af:52:37:2f:16:87:c2:30:f6:23:41:1c:be:e0:b6:2b:
         fb:06:9a:a6:b3:82:a8:3e:49:0b:8f:99:2e:62:a4:9a:81:40:
         25:2b:ff:b5:6b:21:9f:04:b1:be:ae:67:8b:b9:6b:5e:e9:a2:
         3a:e2:e5:04:c6:28:ae:4f:3f:48:44:58:f1:41:2d:d7:5c:3e:
         fc:6d:fa:ba:90:b5:8c:b9:45:22:ec:b7:82:93:ee:f2:db:13:
         74:c4:3c:fc:f8:63:87:94:a1:b0:97:70:26:ac:85:a5:fa:47:
         ab:c8:e2:42:ee:33:e8:f6:e4:88:9a:d6:93:f6:11:6a:f7:1e:
         bb:47:e7:51:70:30:d6:97:5e:b5:39:db:37:9a:f6:09:ad:ec:
         76:41:97:22:a0:cb:1d:3d:35:46:26:64:d6:74:ca:a4:1f:c0:
         7a:77:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:46 2025 by rpki-client