Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          JQC0dPZ+j82M8/jhggndADsJi4FUlbpCRYozhKpBHuU=
Subject key identifier:   ED:B2:CC:4F:12:47:10:62:4E:6B:EA:C3:8C:C5:50:9F:A5:37:37:8B
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01987B64582644CD25D71229946E2E80D2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          1335
Signing time:             Tue 05 Aug 2025 18:00:30 +0000
Manifest this update:     Tue 05 Aug 2025 18:00:30 +0000
Manifest next update:     Wed 06 Aug 2025 18:00:30 +0000
Files and hashes:         1: VWcNwc3eXiIO-NWFBhke_NsoKuw.roa (hash: f3pDRtjEvKBR2tWq+x+PitOC7Ipx15tKzM82SQ3147w=)
                          2: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
                          3: _99AWFxBbGdkFx08skTKGbVwf1E.roa (hash: wfKfs4N3JkvFebFzqwY761KKN3vThIsFzZUqv3dY+ns=)
                          4: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
                          5: l3ZDT2gNOtZjLuBLuwpE6ZnBm-s.roa (hash: 1+yCgtq5Im5Fg/SSqsuub6MIDinjmkRADHcXtUuHpR8=)
                          6: p6BywI9GGwmeb7zmkwPwYCeFaw0.roa (hash: FmT1evBUP1t9QXDygh7a4PaImArT/MjNy+wH/psOeog=)
                          7: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: CXnY4KjZL1sASUHxBKeoQX53gJ/ME4wXcbXCOmELHwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:64:58:26:44:cd:25:d7:12:29:94:6e:2e:80:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Aug  5 18:00:30 2025 GMT
            Not After : Aug  6 18:00:30 2025 GMT
        Subject: CN=edb2cc4f124710624e6beac38cc5509fa537378b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:d0:a9:7d:d6:d8:84:e6:67:80:3b:67:f6:
                    4b:f0:c2:38:21:2a:80:66:9a:74:de:ed:c7:9a:f7:
                    db:02:82:72:b1:83:fa:3a:8d:85:cc:ef:dc:de:cd:
                    9c:02:4b:56:ff:10:23:d9:a5:7d:c0:f1:74:e6:49:
                    c4:97:9b:79:58:92:1c:90:39:4c:19:ea:0e:31:64:
                    3d:45:fc:b3:6c:e8:7b:45:02:9f:5c:44:91:0c:3c:
                    c8:40:d1:f6:e4:79:88:8e:96:bc:37:a1:14:a9:98:
                    a2:6d:1c:a7:5e:d9:02:6d:3a:ba:65:0d:93:df:ea:
                    ca:56:e0:16:1d:73:33:9b:d4:cf:1f:93:a8:bd:8f:
                    c6:3a:01:68:b5:61:36:89:db:2d:10:97:09:4c:7d:
                    95:6a:66:fb:eb:b6:5b:4e:76:91:b0:04:46:5a:3c:
                    e9:f3:e1:da:02:72:a7:ab:d0:eb:3b:50:fd:55:f4:
                    b1:b8:69:c0:11:89:86:29:7a:02:e4:cc:f0:ee:6b:
                    7e:4a:a5:79:b7:4a:52:f6:93:62:a2:37:d8:cc:d9:
                    8e:3a:de:6d:2a:97:e2:6f:4a:01:e1:6e:d4:5e:85:
                    c8:9b:34:31:3f:c3:2b:01:13:00:7f:9d:d8:fe:de:
                    ee:88:cc:93:49:94:4f:b0:f0:97:76:e0:b5:4a:fb:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:CC:4F:12:47:10:62:4E:6B:EA:C3:8C:C5:50:9F:A5:37:37:8B
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d3:cf:cc:6f:eb:b9:d7:65:9a:2d:23:1c:4e:b9:37:5a:90:
         9c:36:c5:08:a2:be:2d:ed:a7:89:bf:73:dc:3c:50:14:97:fe:
         14:4c:41:ad:06:a9:c1:2f:de:34:ff:f3:92:9f:11:28:9d:43:
         6a:cc:f0:24:77:ae:e8:8b:6b:af:6f:21:3d:41:b3:56:29:9d:
         84:b4:6b:5a:22:69:85:87:98:37:a5:dc:d3:57:b6:cd:5f:85:
         dc:64:1a:bd:03:ea:c9:15:3d:70:78:2b:58:8a:d4:f7:7f:83:
         fc:0a:d4:be:19:cf:5a:fd:61:9e:61:23:a8:d4:57:1c:e9:f7:
         17:a7:6c:a2:c4:33:93:02:de:1a:f6:57:fd:13:ce:51:89:15:
         c2:e8:84:9d:b3:d8:28:30:51:e6:1f:dc:de:d4:64:85:79:6c:
         ee:4a:62:cb:aa:a4:a9:40:0d:bf:e6:df:ab:fb:8e:bb:9e:a6:
         a0:86:52:6d:92:5c:93:db:ff:3d:51:0f:e4:ae:a7:4d:63:a7:
         47:ee:46:61:ce:eb:fe:39:56:44:6a:25:d6:98:93:2d:e6:2a:
         5e:60:4d:6f:85:8f:22:78:70:77:c1:84:4a:cb:42:fe:7e:37:
         ee:8e:3d:5c:4e:57:23:fb:57:e7:b2:96:b5:55:54:9f:54:7e:
         27:93:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:58:31 2025 by rpki-client