Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          oF8Y1+i7H0Z5x5iDGfzUBhoAMjkb+8BBRHv3UsSz4mk=
Subject key identifier:   AE:F1:48:9C:B6:47:87:AA:3C:2A:5D:95:DC:1E:C8:09:5E:79:49:C0
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       0198808ADAB64C37596CC5339234D8E85A90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          0492
Signing time:             Wed 06 Aug 2025 18:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 18:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 18:00:40 +0000
Files and hashes:         1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: zhEW6Cf5O3WKoQwuqKdVdKDGuEobcHIBckDzCjEvaIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8a:da:b6:4c:37:59:6c:c5:33:92:34:d8:e8:5a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Aug  6 18:00:40 2025 GMT
            Not After : Aug  7 18:00:40 2025 GMT
        Subject: CN=aef1489cb64787aa3c2a5d95dc1ec8095e7949c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:fe:dc:c9:21:1b:71:33:75:6e:97:2a:4e:
                    ad:ff:74:7e:ab:ca:d6:01:48:de:0b:39:f7:4b:6b:
                    e9:6d:ad:56:e1:35:8a:98:dd:34:ce:d9:06:f3:2a:
                    c0:57:c1:75:ee:c1:a3:6f:ff:88:52:61:7c:2c:68:
                    ca:7e:03:2c:3d:e1:92:ec:64:e2:f5:8b:b7:93:1f:
                    68:5d:12:70:78:08:ff:81:c4:ba:3b:20:c6:5d:84:
                    ed:81:54:37:d0:05:90:71:7e:71:0b:ac:a3:c7:b6:
                    91:41:86:20:b5:3f:97:e4:b0:30:fc:40:7d:e1:d5:
                    e4:ad:0f:8d:a7:c9:8c:f2:fd:c4:04:00:8f:94:b6:
                    e2:f4:c8:46:be:a8:dd:06:b0:a3:77:cf:03:49:23:
                    86:82:a7:89:cc:75:d0:32:79:53:a9:37:0a:ab:49:
                    3e:60:b5:9d:a2:23:62:2e:33:ad:5c:66:c6:5f:54:
                    47:b6:1e:0f:60:af:62:08:c5:3f:ba:37:21:b2:15:
                    bd:b0:92:5d:59:6d:0a:37:ac:c4:b3:73:b4:d9:7c:
                    27:29:d0:c3:7c:8e:06:9c:fa:1d:15:58:17:5e:08:
                    35:3b:11:da:af:b3:b2:80:2a:fa:80:85:73:82:2e:
                    c2:9d:dc:d0:fa:2d:14:be:00:d0:ed:fa:e2:22:29:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F1:48:9C:B6:47:87:AA:3C:2A:5D:95:DC:1E:C8:09:5E:79:49:C0
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:d2:2a:5a:f6:2f:42:98:2b:01:60:0b:df:f2:e4:85:97:
         29:90:6c:00:e3:48:4e:69:9f:40:3c:2f:f2:5d:12:e9:fd:64:
         cb:19:3c:c8:cb:03:41:84:11:f8:eb:19:c9:5c:3d:0b:6d:07:
         af:11:c2:cb:12:24:6d:fb:06:ec:44:0c:91:86:33:38:33:65:
         4b:fb:23:d5:48:56:dd:38:a6:13:b8:5c:ee:07:65:4e:81:ad:
         a7:99:e2:90:eb:be:6c:03:03:9f:dc:fb:12:40:f7:22:62:32:
         96:13:7b:37:ef:dc:35:86:0e:de:d7:b9:2d:1d:3a:5c:b1:6e:
         b6:d7:14:be:44:78:c0:32:50:26:c0:3b:f2:a6:95:82:e4:16:
         f7:c9:1c:7c:0c:fd:17:2e:f7:b5:d7:de:60:79:cb:e6:9a:32:
         f4:c2:fb:5d:a7:a8:c8:09:8b:34:71:59:fd:d4:3e:af:cd:4e:
         ab:39:0e:c9:e5:cc:fc:30:1b:2c:02:dd:11:41:8c:4e:ff:38:
         52:63:5f:bc:6a:6e:2f:68:37:4e:f8:7d:de:44:05:03:0b:af:
         69:c5:a3:35:e6:ed:79:59:f4:b1:79:77:4a:0d:f8:a7:c1:8a:
         47:7b:1d:6f:f0:db:9a:39:09:ec:f1:1d:d6:98:09:01:94:19:
         61:cf:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:42 2025 by rpki-client