Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          5OUTfVqHyqWcMNICW+++k+Uj8mEAsWmJdvCi+TL4RbI=
Subject key identifier:   98:DB:95:22:33:95:2E:2A:8B:F9:91:5F:94:07:10:4F:47:60:7F:8F
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       0198733D149C761A2A812FAED870C2951277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 04:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:39 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: n/5scZlKV1c+qkmYC89Eqrehfpi384KaP7no8t5np/0=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:14:9c:76:1a:2a:81:2f:ae:d8:70:c2:95:12:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Aug  4 04:00:39 2025 GMT
            Not After : Aug  5 04:00:39 2025 GMT
        Subject: CN=98db952233952e2a8bf9915f9407104f47607f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:1f:98:75:a3:df:05:ae:2c:0c:52:2c:ea:
                    99:97:25:64:76:b3:ea:87:30:e6:30:62:fa:9f:59:
                    08:61:9a:a6:db:cf:60:0f:31:98:6b:cd:33:eb:86:
                    d5:10:f4:69:6b:a6:3a:e0:56:c8:e4:ec:e2:da:a3:
                    b3:a5:aa:bf:67:fd:9c:fb:0c:f0:55:a1:13:50:ea:
                    8f:a9:b7:41:fd:5b:91:f5:f1:42:bb:4a:c5:ac:61:
                    22:7c:44:7c:30:83:a0:ac:79:f8:39:cb:f3:66:26:
                    d9:0b:1f:e7:fe:92:93:cf:2c:d8:d7:f5:1e:2e:c2:
                    7d:bb:98:76:d8:52:a3:7c:73:4d:3a:de:d4:14:75:
                    ad:0e:39:3b:58:56:8c:64:68:26:00:bc:8f:8a:38:
                    15:dc:a6:55:b2:a6:8f:48:c8:1c:7d:36:f4:b3:ce:
                    93:73:6f:de:58:9e:d2:8e:95:5d:64:e5:98:60:6b:
                    22:4c:26:fe:1d:cf:ea:90:3f:42:4a:38:0c:b8:79:
                    51:6d:77:ce:c2:7b:34:af:a0:19:29:83:f8:d8:1e:
                    78:b9:e0:65:2c:1f:80:9b:53:86:dd:82:a5:2a:d8:
                    b1:16:46:8a:29:dc:0e:46:5c:d9:1d:7b:15:00:13:
                    bb:f1:1e:04:39:b3:84:ac:57:a7:0b:de:27:e7:b8:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:95:22:33:95:2E:2A:8B:F9:91:5F:94:07:10:4F:47:60:7F:8F
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:e4:9f:a8:51:a6:b4:b3:f3:d4:a8:ce:0e:ba:6a:46:46:
         9d:d6:dc:98:50:b4:39:ee:f8:f9:f1:64:d5:4f:77:ac:b8:1d:
         43:6c:d6:9e:1d:51:35:1e:86:87:75:d5:91:e6:68:df:e1:24:
         3e:1b:dc:42:d4:85:18:8b:5a:6c:22:79:79:3d:d8:d4:df:3b:
         48:17:76:00:f8:d0:19:cd:91:e1:98:a6:61:29:cf:f4:72:9e:
         91:1d:11:2e:d1:fb:f8:b5:fa:74:71:df:c0:46:e4:3a:34:e2:
         46:ec:08:0c:48:26:24:9e:c8:ce:75:5f:83:61:fd:b8:bd:d5:
         f9:87:fc:b8:9f:22:70:60:92:0c:6e:12:62:d1:46:78:aa:70:
         f3:66:a2:99:dc:93:69:63:51:c7:16:6f:5b:c1:34:25:78:59:
         c6:e5:18:5f:b1:8d:1c:d1:7a:85:3d:ed:e6:19:a4:d7:2a:1b:
         f5:42:f3:21:49:d9:e0:3d:93:cd:5a:8e:0f:51:ab:e9:26:22:
         4a:05:5d:82:4f:ef:25:ec:6c:f7:3f:b1:c9:bc:2c:c0:8a:e5:
         e5:31:de:f3:bc:46:b4:1f:1e:b0:bc:64:70:17:07:62:a1:05:
         ee:a2:d8:e3:0c:84:ff:b5:ab:42:85:26:e6:c3:97:85:c9:d7:
         93:e0:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:40 2025 by rpki-client