Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
File:                     yydiBw8SVD8bCscZgqxxAlgQ_18.mft (raw, json)
Hash identifier:          zNHLP/Eu3wBI1AYqwl08JRq2BdrXOD1cO32ikgO9zU0=
Subject key identifier:   EF:61:DA:67:23:C3:7C:C3:30:27:D7:6F:D4:BA:96:A8:44:D2:FD:80
Authority key identifier: CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F
Certificate issuer:       /CN=cb2762070f12543f1b0ac71982ac71025810ff5f
Certificate serial:       01989D4C7D2FD00F9C254F75E8CFA97F9734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
Manifest number:          0848
Signing time:             Tue 12 Aug 2025 08:01:32 +0000
Manifest this update:     Tue 12 Aug 2025 08:01:32 +0000
Manifest next update:     Wed 13 Aug 2025 08:01:32 +0000
Files and hashes:         1: rnkd3aH7pF24TCTJAylZcN41MhA.roa (hash: 1F1EwEJKOPyNW/NE+25aYXPL5wdqrlw2U+Z2MniW564=)
                          2: yydiBw8SVD8bCscZgqxxAlgQ_18.crl (hash: s/X6OXjVW4Q58a5ltici/dU3Wy21+/J15jEcPwCzq8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:4c:7d:2f:d0:0f:9c:25:4f:75:e8:cf:a9:7f:97:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2762070f12543f1b0ac71982ac71025810ff5f
        Validity
            Not Before: Aug 12 08:01:32 2025 GMT
            Not After : Aug 13 08:01:32 2025 GMT
        Subject: CN=ef61da6723c37cc33027d76fd4ba96a844d2fd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:7f:59:71:e1:0f:04:f7:33:8f:b1:bf:3a:
                    c5:6c:e8:ed:ab:08:bc:cf:50:4f:15:95:e7:ce:4b:
                    b8:5f:86:c8:a6:6e:22:e9:46:d4:94:d8:a8:c1:fc:
                    01:ed:cc:23:18:d5:2f:c1:4e:76:39:03:d7:91:b7:
                    69:d9:a0:ea:89:61:5c:e5:10:ce:26:3f:49:32:02:
                    8d:43:04:d8:40:1d:83:14:e1:79:e9:6d:b7:c9:91:
                    b3:e8:8f:cf:27:a3:b0:37:07:f1:32:98:11:40:25:
                    6c:22:ef:fc:8d:bf:47:4b:b0:70:5e:d0:b8:ee:89:
                    de:85:56:e0:59:75:55:ea:7d:e9:d2:c4:a6:51:1b:
                    bf:b1:13:8e:52:bf:0c:47:2b:9f:8b:85:ba:fe:1d:
                    b3:30:01:3d:53:aa:65:04:c6:22:2d:3e:33:18:96:
                    b3:74:50:c6:a9:d3:78:27:08:ca:b4:dd:ab:d9:41:
                    f9:0f:7c:66:a1:26:9d:78:f4:8d:3f:81:e5:af:23:
                    7d:12:37:fe:cc:61:07:ab:3e:80:82:18:5d:ba:4a:
                    d9:c0:17:47:cc:18:64:f9:3d:d0:c1:a2:16:d7:16:
                    70:61:53:af:f1:15:b8:05:cd:75:10:ed:08:0b:b3:
                    c7:9d:68:51:5c:89:af:89:cf:9a:80:49:dd:97:b8:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:61:DA:67:23:C3:7C:C3:30:27:D7:6F:D4:BA:96:A8:44:D2:FD:80
            X509v3 Authority Key Identifier:
                keyid:CB:27:62:07:0F:12:54:3F:1B:0A:C7:19:82:AC:71:02:58:10:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yydiBw8SVD8bCscZgqxxAlgQ_18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ae6e3a-9cea-47c7-ab13-ef4cda5f52cf/1/yydiBw8SVD8bCscZgqxxAlgQ_18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:bf:52:3d:7e:c1:0a:96:70:6f:2a:6c:80:9e:19:17:b3:
         a2:bc:18:32:c0:6c:2c:84:81:d0:77:3b:83:0a:af:b1:94:50:
         bf:eb:00:8f:2b:fb:17:bc:ed:bc:05:04:1a:50:57:c5:44:e8:
         dc:6a:38:7b:98:7f:41:c2:e4:24:b5:be:18:b1:46:0b:02:11:
         21:7e:09:f4:82:b9:13:7b:4e:27:29:c3:f4:53:5c:3e:fd:a5:
         fc:77:9e:a3:1b:01:3d:da:1b:4e:ed:73:d7:87:55:7d:a1:7a:
         cd:73:db:23:b1:22:98:cc:10:4c:b1:97:2c:89:76:8f:10:79:
         61:ec:17:5d:27:0c:71:a2:ec:ad:f4:da:06:28:ef:23:04:ab:
         a1:25:d8:65:50:94:14:7f:be:af:35:34:bd:0b:4f:0d:52:19:
         76:69:64:29:a9:ac:99:78:29:83:22:0f:67:08:1c:b0:a6:d0:
         0e:7c:cf:93:02:90:08:a0:c7:f8:65:8f:70:eb:7f:d7:a5:95:
         4e:59:b6:a2:97:e1:d6:bc:74:bb:98:5e:19:4d:59:67:70:ba:
         02:83:9c:0a:21:33:be:b2:1a:e8:65:94:47:2d:c2:d0:fd:0a:
         ca:30:f1:15:69:e9:d6:ba:20:5b:6b:1a:c9:68:ec:f9:0a:20:
         8a:7e:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:57 2025 by rpki-client