Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File:                     yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier:          UYMohPWBd3AwHT/kHly5H8BiJG6M2nUaxD5X8MtqMwo=
Subject key identifier:   C2:0F:B0:60:E2:6C:56:5B:96:5E:37:E4:94:E2:35:A3:0C:CA:30:9B
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer:       /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial:       01987CAEAC2CF8460B7C66E41329F5FA3C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number:          015F
Signing time:             Wed 06 Aug 2025 00:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 00:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 00:01:18 +0000
Files and hashes:         1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
                          2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: OKeLPosoRWJoefBQSByRnnu0s4oHh1w68ZONj3ZJGzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:ac:2c:f8:46:0b:7c:66:e4:13:29:f5:fa:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
        Validity
            Not Before: Aug  6 00:01:18 2025 GMT
            Not After : Aug  7 00:01:18 2025 GMT
        Subject: CN=c20fb060e26c565b965e37e494e235a30cca309b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:55:cc:50:b2:1a:ae:30:22:33:f5:8a:10:
                    20:f3:28:c9:c0:fa:70:d7:f0:58:4a:3a:a5:f3:88:
                    31:b1:88:e0:2b:3f:2d:cb:66:ee:dc:e7:03:10:7a:
                    77:7f:72:de:ac:7b:68:0c:67:b5:ea:f7:3a:2e:c5:
                    13:f2:7f:3e:d6:b5:da:d3:05:be:25:46:ce:18:67:
                    13:b0:cf:20:7f:5e:1a:c1:fa:c2:3b:09:1e:99:e8:
                    5a:82:6b:f0:2e:db:73:4a:20:ce:f2:4a:04:5f:65:
                    8c:d5:09:32:ad:b1:bd:94:9a:cf:31:ed:34:46:03:
                    57:48:63:f0:43:fd:3a:67:ba:63:c8:69:ad:34:95:
                    db:bd:67:17:e3:d5:66:68:52:ee:df:5b:36:3e:d6:
                    ae:8b:90:26:08:d1:59:01:9c:ce:1f:29:f3:57:38:
                    35:1c:18:14:5c:44:07:79:87:7f:85:13:c3:1d:5f:
                    9b:47:6e:16:9d:41:58:61:75:3a:b3:3c:69:58:7f:
                    fb:b9:fc:1d:52:c0:93:04:94:33:9e:4e:5c:6f:d0:
                    2f:a8:03:e2:b0:56:a5:d0:2e:42:69:88:10:34:67:
                    f3:36:13:ac:5b:80:b6:e4:e0:6d:69:bc:94:94:13:
                    09:5f:b5:9b:85:1b:1e:f5:80:2c:2d:f2:bc:69:fc:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:B0:60:E2:6C:56:5B:96:5E:37:E4:94:E2:35:A3:0C:CA:30:9B
            X509v3 Authority Key Identifier:
                keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:53:30:6a:a0:5e:d6:43:17:57:b6:02:91:8d:58:9c:0d:dd:
         70:32:3f:ce:3c:83:98:40:a6:b4:4a:a1:4d:5a:b0:0e:20:28:
         a7:3f:11:44:e3:11:99:cd:04:8c:bc:a2:3f:0a:3b:5d:7d:73:
         41:8c:b0:f1:2a:b7:73:f7:e1:12:0a:b0:db:8e:3e:b0:fc:e9:
         b6:b3:a1:15:68:7b:dd:23:55:2e:e5:67:21:47:e2:70:1f:97:
         5a:c8:ea:4c:3c:fc:ff:58:a7:90:46:fe:01:59:f7:1e:d4:de:
         1f:e8:67:8b:09:3b:1f:cd:44:f4:08:f2:a1:47:81:0a:24:62:
         f4:a8:eb:87:84:86:4f:2a:76:79:12:61:ca:0e:47:02:3f:44:
         3f:97:ee:fc:d2:60:db:05:69:fa:85:4e:e6:76:3b:ae:ac:79:
         a7:9f:dd:a0:08:a0:10:6e:57:18:b4:8d:00:85:c1:80:b7:ab:
         9a:d9:dd:ad:ac:4d:71:6a:27:46:3e:d9:ff:ce:c8:2a:09:c6:
         fc:a9:27:f9:0d:16:e9:09:61:ea:77:d0:1f:c1:11:c2:a6:4d:
         bb:32:7a:c3:9c:16:b3:6d:eb:a8:6e:9d:ba:09:36:61:56:04:
         66:93:c5:f6:ff:0b:82:3d:12:61:6d:16:53:f6:94:e0:66:dd:
         b4:43:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:33:59 2025 by rpki-client