Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
File:                     ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft (raw, json)
Hash identifier:          Rjl/5vItYdO65DFTZYJiOI3zyPuQudoUYAxmsQBlkB8=
Subject key identifier:   2C:27:A1:5F:15:42:F6:78:36:9B:BC:C2:73:1D:23:B9:F8:94:14:39
Authority key identifier: CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61
Certificate issuer:       /CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
Certificate serial:       0198816869961C0DC42733B040149136CBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
Manifest number:          96
Signing time:             Wed 06 Aug 2025 22:02:40 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:40 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:40 +0000
Files and hashes:         1: Blt---jsIFQZ1r2IAxC-z0fx3gA.roa (hash: WMXyefoTuj2dAlvEBS8JjIjWNUd09eEAuE+gYKf1VT4=)
                          2: ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl (hash: KSs1ZFIiByrYq8NpQzBJhqg8sTtyyYqTz/LMg+M8PnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:69:96:1c:0d:c4:27:33:b0:40:14:91:36:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca03268bb666b1bd423079e5df2bd5a54e1e9861
        Validity
            Not Before: Aug  6 22:02:40 2025 GMT
            Not After : Aug  7 22:02:40 2025 GMT
        Subject: CN=2c27a15f1542f678369bbcc2731d23b9f8941439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:89:03:aa:e9:d9:19:34:b7:05:68:4c:d1:
                    e7:81:71:ff:28:ed:1a:9e:bb:d8:7e:c6:22:13:dc:
                    57:1f:42:1e:f5:fa:c6:4d:d2:97:9e:a6:df:9d:e5:
                    77:b2:cb:be:5e:fc:72:30:5b:0d:9f:60:bd:d7:72:
                    60:4c:b1:65:4a:22:ca:db:03:f6:c4:ad:55:ca:3e:
                    fe:50:ea:5d:f8:f7:c2:f6:f9:52:d7:b9:ab:c2:da:
                    1a:e7:b6:6f:a5:3f:87:03:85:7a:d9:13:d1:39:cb:
                    b2:95:4d:9c:b2:bb:06:4c:05:7a:44:64:5a:5f:92:
                    95:33:7f:84:15:1c:8b:c2:c9:68:b0:40:31:75:01:
                    e9:d9:7c:d7:d8:42:7f:23:c4:d1:bf:be:3e:15:be:
                    d2:13:95:90:b0:c3:7b:9f:5e:1e:97:c2:61:0a:3e:
                    1b:15:63:4b:d0:d7:33:d6:50:79:23:5e:23:95:aa:
                    29:ad:8f:20:27:32:be:79:10:b5:2e:00:ff:eb:dc:
                    41:2d:0f:32:ed:b1:bd:df:de:98:cb:0d:03:15:1e:
                    be:09:52:94:b7:b4:c4:06:98:5a:ad:95:c0:33:f1:
                    53:a5:8a:de:cd:03:15:b7:e9:a3:fe:3d:25:0c:90:
                    24:9b:0c:08:e8:71:4e:1c:2a:c9:62:d1:82:02:09:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:A1:5F:15:42:F6:78:36:9B:BC:C2:73:1D:23:B9:F8:94:14:39
            X509v3 Authority Key Identifier:
                keyid:CA:03:26:8B:B6:66:B1:BD:42:30:79:E5:DF:2B:D5:A5:4E:1E:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygMmi7Zmsb1CMHnl3yvVpU4emGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b39a59-b424-413b-a693-39d4b3f5710f/1/ygMmi7Zmsb1CMHnl3yvVpU4emGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:85:74:1a:29:b0:bf:3a:79:be:ef:f8:6f:39:5b:e6:7e:52:
         66:36:55:0d:c3:16:de:d5:4e:2b:fc:2c:e0:ad:ec:4d:a4:a7:
         f1:9a:23:b0:c4:29:0e:c7:c8:6d:0a:c2:82:74:c9:4d:52:19:
         ba:26:35:0f:c7:ec:b2:87:aa:04:75:9e:00:1e:e1:f6:82:75:
         c9:32:31:0d:c8:52:cd:96:21:f9:4d:7b:f5:b1:fd:d3:6f:0e:
         5b:76:e8:3b:7c:31:37:98:02:60:2f:b6:bb:af:73:4f:b3:85:
         72:3b:31:c2:88:7f:e3:a8:ba:3d:98:15:ff:ea:ab:80:77:f0:
         39:fe:c8:bc:4a:87:39:04:38:9e:23:eb:e6:4d:97:dd:d3:e2:
         f2:e3:6e:9d:b9:40:f3:14:07:c5:47:47:9d:f9:c7:e8:2a:e9:
         60:ca:25:81:30:17:9e:aa:d2:a3:04:f4:a4:50:54:5d:dc:5a:
         ff:5c:81:90:51:4d:4b:4d:38:4f:0a:43:d2:0a:63:50:b7:e5:
         5a:22:aa:00:fe:f6:f3:1d:52:c3:c3:38:3e:56:37:65:82:23:
         af:bc:56:ca:b0:b1:12:5d:bc:7d:62:d4:0e:c2:26:9a:2c:30:
         ec:23:b5:4d:21:5e:1d:14:50:e2:27:8b:e3:56:6f:6d:f5:81:
         c2:a9:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:43 2025 by rpki-client