Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File:                     ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier:          MDRua6X3oyoPV2tkKGZxt1nQHqYmCEVfITBocyovsRA=
Subject key identifier:   6A:E4:9D:1E:B6:62:D9:64:24:54:62:89:52:3C:09:DD:29:40:8E:71
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer:       /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial:       01987B9D53BE239EFD9AD69F7278A9A099D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number:          161E
Signing time:             Tue 05 Aug 2025 19:02:44 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:44 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:44 +0000
Files and hashes:         1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: VQTA/eF0e+/4E9IV+Oo+EEliSLcakA2BUk7CuNCe+qc=)
                          2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:53:be:23:9e:fd:9a:d6:9f:72:78:a9:a0:99:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
        Validity
            Not Before: Aug  5 19:02:44 2025 GMT
            Not After : Aug  6 19:02:44 2025 GMT
        Subject: CN=6ae49d1eb662d96424546289523c09dd29408e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:56:92:c7:7d:af:86:c8:04:bf:c8:5f:d5:
                    b9:e6:29:de:0c:1c:45:20:10:13:5a:33:43:f5:6c:
                    1c:59:b2:d1:2f:73:f3:8b:4e:a0:8c:e6:a4:15:87:
                    c9:cb:d3:b0:99:2a:bd:73:d1:c1:5f:7a:77:73:9d:
                    27:e7:cc:c3:99:2f:49:3d:b7:cf:23:32:11:96:82:
                    6d:8f:28:05:c4:2a:14:b8:53:aa:29:19:03:d2:9b:
                    37:7b:fe:e9:f3:37:7a:55:69:a4:d0:66:bf:f6:0d:
                    b6:15:d7:48:09:2d:36:5b:e7:0e:5b:73:e0:e7:77:
                    19:70:65:35:da:d6:21:19:e0:4b:4b:f8:28:07:53:
                    9b:a9:a9:62:f5:3f:56:ef:a4:65:4d:7c:e0:7b:85:
                    06:18:aa:c2:81:6e:1c:76:69:e7:47:33:df:99:07:
                    2e:6e:f9:f0:46:36:22:96:9f:40:4f:2f:cc:24:c6:
                    14:cb:e3:90:aa:4c:52:bb:10:04:7e:2c:41:a7:41:
                    c3:ec:f6:40:59:1f:de:05:a2:fb:c4:65:55:4b:10:
                    62:40:91:7a:ce:f7:a6:f6:50:12:5e:b1:eb:1d:98:
                    07:e9:09:9f:9a:80:c0:31:3d:2e:3a:b8:22:13:3f:
                    fd:13:f0:53:18:b6:73:1c:c6:9b:af:a2:e4:b5:34:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:9D:1E:B6:62:D9:64:24:54:62:89:52:3C:09:DD:29:40:8E:71
            X509v3 Authority Key Identifier:
                keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:02:b8:11:ff:f7:e8:3f:05:f5:28:22:8a:ba:86:98:75:
         f7:e8:f8:5b:d7:28:c0:62:82:42:ab:9f:00:10:8b:be:21:31:
         cb:a8:fe:6d:c6:63:af:8b:c4:21:d3:fe:cd:29:3b:6b:ab:f4:
         62:11:eb:a6:69:90:a1:90:60:ed:42:db:46:be:89:95:7d:5b:
         67:a7:e4:21:1c:f3:72:ad:88:33:ab:28:b5:09:44:75:18:1f:
         fa:5c:60:04:17:95:71:c8:ff:db:e9:7d:79:cc:40:2d:cd:1a:
         c7:cf:da:ab:83:20:81:93:69:e5:82:41:72:e9:91:c1:e8:13:
         74:27:62:21:25:b9:ff:99:51:18:b4:5c:99:bf:d9:33:1a:86:
         8d:f9:3f:5c:e6:66:d2:ce:fb:eb:67:00:32:2b:cb:68:bf:94:
         f1:28:d7:a2:50:cc:b7:fc:4b:b3:a0:0b:14:31:40:ae:e7:db:
         05:ec:5e:db:77:25:8e:38:62:56:03:b5:3d:cc:0e:5d:21:57:
         e5:8b:03:d6:09:6b:f7:55:d1:e4:a5:eb:a5:f2:41:cd:6e:be:
         12:80:0f:15:28:95:db:b5:fb:ff:20:6c:18:2b:a4:0e:48:87:
         6f:54:ec:13:a0:51:5e:04:59:78:72:f2:0c:ea:8d:56:65:f6:
         8b:c8:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:18 2025 by rpki-client