Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          y0GyMINRFdREMDy72jlJPHXEl3EnQR7hY8ryXnyagaY=
Subject key identifier:   20:CE:0F:A8:74:C2:70:67:2B:A2:B9:E4:5B:78:08:BC:80:61:BE:F9
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       01987E2F2FD5FAB2768B57789227CE3E0BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 07:01:18 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:18 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:18 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: oQ7DkH+Kxsbdeoc9MBqRqWlBPFurWhlkSvcfdcZ+Jjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:2f:d5:fa:b2:76:8b:57:78:92:27:ce:3e:0b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: Aug  6 07:01:18 2025 GMT
            Not After : Aug  7 07:01:18 2025 GMT
        Subject: CN=20ce0fa874c270672ba2b9e45b7808bc8061bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:69:7d:a1:fe:97:8f:08:6d:c8:6c:92:af:
                    ee:12:a5:94:5b:11:bb:da:4c:e1:24:4f:98:21:95:
                    34:65:5d:ce:33:38:ea:c9:c1:be:27:bb:af:cb:cc:
                    25:22:5d:f3:6f:9c:dd:f8:42:9d:17:68:50:b6:79:
                    a3:42:e0:15:ed:1e:44:cd:04:72:de:65:0c:01:87:
                    3e:ea:d9:7d:38:d2:fc:11:8a:72:02:ab:17:c1:c3:
                    e8:3c:a8:19:70:94:67:32:95:5f:01:39:28:b2:dc:
                    82:05:76:0c:09:32:84:dc:2b:ef:23:fb:06:7a:4e:
                    e3:25:a6:d4:81:1c:2e:10:e8:b6:ce:e1:85:6a:d9:
                    dc:27:71:f3:d9:93:37:7f:1f:fb:ca:27:08:a2:eb:
                    d9:47:50:e2:39:9f:23:00:9e:2b:b9:81:bc:41:91:
                    70:35:30:33:86:38:ca:de:0d:48:bb:22:8c:3e:58:
                    26:4c:a8:eb:9a:0d:45:d4:0d:7e:98:99:56:2c:4c:
                    3b:93:b5:25:ad:31:5e:5a:4d:ab:e5:72:2c:2e:8d:
                    64:6b:95:b7:f9:f2:eb:6b:3a:b6:50:81:56:41:ba:
                    91:9e:7a:a2:e7:89:2a:ea:a8:16:83:c3:c5:0f:5d:
                    00:ff:83:e2:82:b0:39:0c:e6:0f:bf:77:fc:43:1d:
                    58:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:0F:A8:74:C2:70:67:2B:A2:B9:E4:5B:78:08:BC:80:61:BE:F9
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ad:0d:5e:e2:ca:f4:d2:f9:4c:84:60:52:6f:3e:56:d7:b2:
         79:a5:b0:97:d1:69:3a:02:ce:e9:a9:d8:a5:b6:a4:61:00:16:
         53:aa:ae:99:98:95:e9:42:dd:ce:85:bc:44:36:2c:57:4d:c4:
         9d:b1:82:66:26:f8:2c:7d:7e:cc:13:7b:01:07:9c:33:b8:17:
         81:c9:78:0b:bd:87:d2:85:46:03:21:e8:7f:70:e2:0e:55:6f:
         6d:33:22:19:33:10:99:c6:42:c8:b6:5d:90:8e:d6:0c:fa:c8:
         21:59:84:e7:69:05:e0:e0:48:7d:6d:96:43:2a:66:4a:d3:d5:
         46:33:f6:7f:00:34:f5:94:e0:b4:8f:51:fc:ea:6d:5a:e6:ed:
         6e:e1:a0:2a:6c:8e:84:2b:82:c2:94:c7:eb:64:49:06:a7:7b:
         96:e9:a9:af:c6:80:71:a9:bb:ff:5b:39:d3:04:49:fc:e1:1d:
         da:ed:1b:be:25:dc:30:ad:f0:4a:5b:3c:1f:86:1a:14:6e:05:
         51:db:16:a3:7c:43:6d:2d:1c:84:16:de:4c:0c:2c:ec:f2:0a:
         89:90:d3:8c:c7:f4:42:b9:87:dc:d9:13:3a:47:5a:93:4f:b7:
         ad:f3:91:9f:5f:c7:8c:79:c7:7a:ba:e0:1b:b8:6a:0e:d5:6e:
         fc:3b:1b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Ly/V+rJ2i1d4kifOPgvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNmYwYWVjOWZjOTFmNGNjNjA0OWNmMmQ5NTQyZWJkODI1
MTVhZWYwHhcNMjUwODA2MDcwMTE4WhcNMjUwODA3MDcwMTE4WjAzMTEwLwYDVQQD
EygyMGNlMGZhODc0YzI3MDY3MmJhMmI5ZTQ1Yjc4MDhiYzgwNjFiZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw5pfaH+l48Ibchskq/uEqWUWxG7
2kzhJE+YIZU0ZV3OMzjqycG+J7uvy8wlIl3zb5zd+EKdF2hQtnmjQuAV7R5EzQRy
3mUMAYc+6tl9ONL8EYpyAqsXwcPoPKgZcJRnMpVfATkostyCBXYMCTKE3CvvI/sG
ek7jJabUgRwuEOi2zuGFatncJ3Hz2ZM3fx/7yicIouvZR1DiOZ8jAJ4ruYG8QZFw
NTAzhjjK3g1IuyKMPlgmTKjrmg1F1A1+mJlWLEw7k7UlrTFeWk2r5XIsLo1ka5W3
+fLrazq2UIFWQbqRnnqi54kq6qgWg8PFD10A/4PigrA5DOYPv3f8Qx1YvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDOD6h0wnBnK6K55Ft4CLyAYb75MB8GA1UdIwQY
MBaAFGBvCuyfyR9MxgSc8tlULr2CUVrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAt
ZDk5NDdhZjJmY2E3LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzZjM2QtNjAxMy00MGI0LTk1NzAtZDk5NDdhZjJmY2E3
LzEvWUc4SzdKX0pIMHpHQkp6eTJWUXV2WUpSV3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk60NXuLK
9NL5TIRgUm8+VteyeaWwl9FpOgLO6anYpbakYQAWU6qumZiV6ULdzoW8RDYsV03E
nbGCZib4LH1+zBN7AQecM7gXgcl4C72H0oVGAyHof3DiDlVvbTMiGTMQmcZCyLZd
kI7WDPrIIVmE52kF4OBIfW2WQypmStPVRjP2fwA09ZTgtI9R/OptWubtbuGgKmyO
hCuCwpTH62RJBqd7lumpr8aAcam7/1s50wRJ/OEd2u0bviXcMK3wSls8H4YaFG4F
UdsWo3xDbS0chBbeTAws7PIKiZDTjMf0QrmH3NkTOkdak0+3rfORn1/HjHnHerrg
G7hqDtVu/Dsbbw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:26 2025 by rpki-client