Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
File:                     YddkoENCcsEymumSiNCSvD7yIo8.mft (raw, json)
Hash identifier:          yj3p3q72R3Ay+W8AOk0pdMszHMuR6XkHud8JSf1uKAw=
Subject key identifier:   DF:55:CF:C7:49:4C:09:ED:F3:EF:A0:62:A8:CA:3B:FD:D5:B3:BE:52
Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F
Certificate issuer:       /CN=61d764a0434272c1329ae99288d092bc3ef2228f
Certificate serial:       01987DC0CE74FB83D3AACC2DB32299AE7BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
Manifest number:          1574
Signing time:             Wed 06 Aug 2025 05:00:44 +0000
Manifest this update:     Wed 06 Aug 2025 05:00:44 +0000
Manifest next update:     Thu 07 Aug 2025 05:00:44 +0000
Files and hashes:         1: REqtYQmRREKLJc9dQnOchbRCd38.roa (hash: CsFmG2TMLbA2Znbnw8r80UkQYTzgJ0VzpR3kBwBlHwY=)
                          2: YddkoENCcsEymumSiNCSvD7yIo8.crl (hash: bY8TGIWipf7KSb+jrjKTAP2MwW1nI9URRrQUwi6XLsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c0:ce:74:fb:83:d3:aa:cc:2d:b3:22:99:ae:7b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f
        Validity
            Not Before: Aug  6 05:00:44 2025 GMT
            Not After : Aug  7 05:00:44 2025 GMT
        Subject: CN=df55cfc7494c09edf3efa062a8ca3bfdd5b3be52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:6c:4b:eb:a5:ad:1a:bc:54:c5:cf:39:d3:
                    be:98:53:aa:7b:2d:fa:77:28:44:2f:1f:46:33:d1:
                    ee:ca:3d:3a:65:8c:69:7f:4c:9a:38:ce:e2:0b:d2:
                    84:f7:da:89:05:9e:79:7f:04:a5:64:49:4c:80:7b:
                    aa:dd:db:e7:80:61:86:25:aa:df:a1:02:f5:cb:c0:
                    f7:b5:cb:d2:ed:2e:64:cc:2b:07:92:8a:b5:8d:e1:
                    49:db:0a:83:76:3b:b7:87:8d:18:16:2b:b6:37:48:
                    fa:b4:5f:f2:a3:2a:fd:d5:c9:ec:ec:40:94:43:97:
                    ec:2d:00:50:df:4a:33:ff:e8:12:52:3a:5d:df:bd:
                    5b:a1:8c:d0:a8:21:b5:e7:ed:2b:6d:3a:d1:12:0f:
                    a0:52:ef:93:0f:c5:c1:4d:75:94:46:ad:99:54:4e:
                    73:53:97:c4:af:4f:ea:1b:03:3e:f2:8e:67:ca:6b:
                    91:5c:4b:6d:f8:0e:af:0d:ed:4b:d5:86:a5:7a:ac:
                    35:08:5f:4f:7b:f9:fd:9c:26:b1:db:11:b9:d0:9b:
                    c4:f2:28:e0:99:ad:35:9b:1a:97:8b:9a:a1:4d:0f:
                    9a:ee:de:5e:af:11:dd:86:52:3a:cc:ec:e3:b8:a5:
                    a2:5f:53:f0:ad:58:4a:ec:49:22:77:1c:43:ce:6c:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:55:CF:C7:49:4C:09:ED:F3:EF:A0:62:A8:CA:3B:FD:D5:B3:BE:52
            X509v3 Authority Key Identifier:
                keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:f9:32:9e:7d:51:e8:47:fb:b9:3c:64:82:cd:3f:99:07:d0:
         c3:da:3c:f5:12:05:e3:0b:eb:a1:a6:ff:ab:bc:eb:63:b0:a6:
         ea:ca:67:a3:c3:5e:2a:3c:33:dc:40:af:e5:e0:b5:e8:cd:59:
         81:3c:28:06:38:7c:96:9d:be:fc:43:e5:43:49:40:0c:2e:ac:
         a4:a3:bd:f2:66:df:b3:f3:1d:3a:e0:86:5f:72:cc:5f:15:11:
         81:ce:a4:53:d1:83:bd:37:15:0c:ab:e1:e5:10:29:6b:c7:87:
         3c:44:60:fa:28:15:c0:ac:4e:fa:32:16:69:af:ac:5b:51:5d:
         97:47:32:0b:84:40:41:8f:aa:ab:91:fd:ce:86:3b:06:7d:a3:
         71:36:d9:fe:33:67:7a:a9:e0:e6:62:31:49:f1:e5:16:93:1e:
         96:6f:68:0e:17:77:7f:47:11:1c:a5:31:6d:52:b7:8c:3a:aa:
         dd:18:98:70:a5:71:9b:e9:14:7f:05:55:04:6a:5f:a7:15:65:
         bb:6c:0d:64:bc:f1:16:12:82:2c:d9:76:64:3c:0e:d0:95:47:
         62:69:f9:6b:c9:8a:40:e5:dd:30:8d:98:d3:fb:e5:f6:87:15:
         5b:57:d7:4d:d2:01:09:e5:1d:64:2d:23:7d:b5:1d:a2:84:83:
         c1:7e:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:40 2025 by rpki-client