Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File:                     ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier:          doeKtfUck9OjkSJcRSZV/Gjx3bOOnSYvA38RsFZkcnM=
Subject key identifier:   4F:AF:E9:39:E8:AC:3A:FF:72:FA:B5:34:38:34:FF:4D:75:BB:1C:6B
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer:       /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial:       019875D0473B94B6A41520F62D6E50336CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number:          CC
Signing time:             Mon 04 Aug 2025 16:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 16:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 16:00:40 +0000
Files and hashes:         1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: hUayr5Tnh0QFbmLJTy20paCBX3leSx3L/811RdLhs1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:47:3b:94:b6:a4:15:20:f6:2d:6e:50:33:6c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
        Validity
            Not Before: Aug  4 16:00:40 2025 GMT
            Not After : Aug  5 16:00:40 2025 GMT
        Subject: CN=4fafe939e8ac3aff72fab5343834ff4d75bb1c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:49:c3:eb:bf:c5:3e:d4:ed:43:b4:47:f6:
                    04:3d:2a:36:d3:03:7e:9a:a4:75:1c:d4:60:35:61:
                    91:31:64:5b:39:b2:22:d3:72:7e:bb:e6:12:37:12:
                    ff:81:4c:ef:c4:d4:17:26:85:18:54:bd:04:37:6c:
                    39:48:61:63:af:3b:0f:e8:d2:51:11:b9:9b:2f:a5:
                    33:f4:49:18:82:29:3c:b0:d4:9c:3b:06:0e:f4:09:
                    cd:10:64:72:b4:9b:0b:75:ca:46:08:99:23:c3:b1:
                    49:2a:aa:9e:ad:4d:f6:8a:c4:17:cb:48:ec:55:3f:
                    47:0b:ff:08:ff:fe:f2:29:a8:f5:6d:22:9f:0b:b0:
                    77:c1:5a:70:bc:ab:48:95:33:b9:cf:9f:91:56:6b:
                    3e:48:b7:14:23:9f:4f:b8:3d:2d:4a:d2:13:1a:2f:
                    ea:db:d7:fe:60:50:b8:54:3c:b7:ea:b8:9d:fb:1e:
                    da:77:86:05:81:71:f7:c1:27:86:18:e8:d2:77:a3:
                    a2:13:c9:3f:f8:9f:ae:34:a5:c0:52:1f:91:57:7a:
                    5d:84:18:56:35:60:94:e1:20:73:be:37:72:9c:8e:
                    a9:70:96:24:c0:91:3d:fb:b9:5c:a9:45:00:dc:ce:
                    13:0a:56:d2:4f:32:c7:52:13:ca:d4:f1:06:14:07:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AF:E9:39:E8:AC:3A:FF:72:FA:B5:34:38:34:FF:4D:75:BB:1C:6B
            X509v3 Authority Key Identifier:
                keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:fc:46:f0:4e:3c:e9:2f:87:14:52:9c:83:a4:f1:d3:19:
         2f:e3:92:b1:35:11:79:81:a9:f8:71:7e:2a:48:0c:7d:9d:b5:
         ff:f3:98:d5:8b:9f:4f:bd:98:28:99:f0:af:23:18:04:a2:b1:
         ea:ba:b7:ad:cd:05:77:0a:02:10:ad:fe:d5:64:2c:03:66:2a:
         70:1e:19:1c:4e:ea:65:0b:d6:ff:99:68:ef:80:99:fc:ec:94:
         27:6a:b5:9b:50:ba:9b:88:b3:2a:f2:f5:22:2c:1c:fb:c6:6e:
         05:9f:a3:bd:cd:7f:bc:76:86:84:af:29:ad:e5:41:a9:0e:e1:
         00:fb:77:85:c6:2f:78:c3:a4:29:3a:b1:13:76:18:1a:45:6a:
         21:df:af:2f:0e:f7:bf:53:8b:36:6e:ca:85:c1:50:fa:88:fb:
         d5:b6:a3:77:af:f8:1f:3c:72:1f:bd:07:12:0b:cb:ac:99:d8:
         f5:b9:04:9e:c5:53:73:34:cd:fb:44:5b:97:19:e0:52:43:33:
         7a:6c:80:94:0d:7c:fb:bb:a0:30:1d:96:0d:34:eb:29:a3:1a:
         71:0e:2f:e4:b1:dc:8b:89:11:2c:4b:60:c8:b8:70:07:f8:f1:
         52:34:ae:a5:f4:70:cf:fa:ce:9b:96:b9:60:9e:fd:89:6a:e0:
         12:32:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:12 2025 by rpki-client