Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          Lw+fr7dmTUphmJKeW+ZWtIq0/VYc00RkKj35s4aSlF4=
Subject key identifier:   D8:FD:F2:0A:74:55:DA:49:2C:FF:66:E7:DA:26:7F:41:F7:37:B8:E4
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01987CE564A5C48BFB9496132E7A133312EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          122B
Signing time:             Wed 06 Aug 2025 01:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:04 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
                          3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
                          4: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          5: gu6tT7UFC6FmYiSvKO6wxYLbsHc.roa (hash: 33W9F+bpX2oF1GIOeMA/5dpyW1er0qfORrvZ4OzY3Zc=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: jhSCXgMPFpjNtG/0n0TF1jX1yBB/Mjz463ic8PSpwvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:64:a5:c4:8b:fb:94:96:13:2e:7a:13:33:12:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Aug  6 01:01:04 2025 GMT
            Not After : Aug  7 01:01:04 2025 GMT
        Subject: CN=d8fdf20a7455da492cff66e7da267f41f737b8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:a7:45:c7:77:0c:a6:30:b6:b1:47:bc:c2:
                    93:8d:16:ca:d9:85:43:cb:b8:c7:70:17:0e:b9:00:
                    56:15:9f:4a:1a:00:79:e2:cc:a6:06:3f:2d:9f:28:
                    3e:77:a6:24:a8:17:ab:ae:20:14:27:4a:88:69:75:
                    e2:95:f2:00:d2:14:d9:18:58:63:23:10:ed:3e:1a:
                    72:e6:5f:eb:80:dd:55:ba:56:50:33:67:74:40:5c:
                    72:d7:2c:3e:7a:44:55:68:19:be:ba:50:04:44:9c:
                    52:4e:2b:78:01:01:0d:ea:f4:90:97:10:33:02:72:
                    4a:26:d2:34:eb:6f:58:2d:e5:e7:9c:b3:98:6d:dd:
                    88:6f:11:87:33:78:35:27:34:21:52:f6:fb:7f:eb:
                    68:ca:10:0a:5f:80:71:99:e8:2c:cc:e6:18:0f:d4:
                    9e:d1:2e:d0:1b:38:0e:42:e8:ad:14:b0:12:40:58:
                    28:79:ee:37:8c:ec:62:a2:99:d1:25:d9:49:46:20:
                    54:9c:8b:45:a1:7f:cc:6b:2a:6c:a5:00:9c:d5:ad:
                    f0:ba:91:3a:13:80:a1:f2:73:81:f6:ab:a6:0f:56:
                    4e:b2:32:a1:c5:42:e7:e7:7f:44:ca:fa:9a:a8:8e:
                    d5:7c:57:77:42:d1:8e:08:56:50:ae:8c:a2:8e:24:
                    c5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:F2:0A:74:55:DA:49:2C:FF:66:E7:DA:26:7F:41:F7:37:B8:E4
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8d:3e:45:44:cc:92:65:c7:44:06:7f:af:57:79:ee:05:73:
         70:0c:21:63:1f:76:f0:8e:04:26:c6:e6:1b:94:7c:c7:0a:0d:
         4d:b1:3e:e2:ff:74:22:dc:d6:2d:62:58:4e:67:7a:8c:6d:c2:
         ce:bc:c4:34:82:d6:f1:34:18:1f:5a:d0:e2:89:42:ca:dd:ea:
         37:27:88:ba:b2:10:d1:1b:11:36:90:cb:18:14:06:59:57:ab:
         db:c4:45:fc:fa:a2:22:87:d9:08:5e:49:88:5b:9b:bc:a0:e1:
         f4:92:78:f2:52:9a:c7:f0:a9:03:32:36:69:07:51:c8:e7:28:
         cf:c7:84:f4:ab:d6:15:c0:0d:9b:7b:30:5c:56:dc:35:d3:99:
         22:0b:28:03:c6:a6:6d:2a:20:f8:64:9f:97:78:42:e6:c0:24:
         68:96:57:c0:2c:18:be:14:d5:4b:e8:50:88:c5:30:57:6f:e5:
         00:96:51:be:dd:05:6e:14:7a:00:26:0b:f9:66:97:79:ef:62:
         b1:d0:12:72:c3:65:79:81:d1:d6:41:a7:f0:cb:2f:ac:58:87:
         ef:40:17:d4:00:ef:9e:3f:9f:2f:dd:cb:2b:42:2e:15:3b:14:
         e3:b5:1a:10:91:f3:bd:10:4f:ae:ea:3e:c2:99:01:97:84:68:
         27:af:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:37 2025 by rpki-client