Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File:                     YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier:          N3gMmI3MVA0hpeO5ahsiNFRQ+gZRSS99YaAMsPbrPdQ=
Subject key identifier:   8B:AD:4D:20:0C:A8:F4:79:65:FF:9D:49:56:5B:47:59:BB:87:86:B9
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer:       /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial:       01987AF7577F507A6E2AD387F9F608AB4710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number:          10BE
Signing time:             Tue 05 Aug 2025 16:01:26 +0000
Manifest this update:     Tue 05 Aug 2025 16:01:26 +0000
Manifest next update:     Wed 06 Aug 2025 16:01:26 +0000
Files and hashes:         1: TUukLx44kjF0H_lfWyE2v7MimXs.roa (hash: hh6d1KEKUecIQgdhGgz8Bqi6uh15mWOy43tdVfLxrHg=)
                          2: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: 1OYNmgE+zy8ipr5CAamlvRiJ3bN5NSZCGoLQAtBI2z8=)
                          3: _Zz1Cu9GIz20qsemRnTOxpptbFA.roa (hash: Nq/fM/hd3jyGxJ/ud7QdLP64eh6OFLHRS+jqgC+mzSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 16:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f7:57:7f:50:7a:6e:2a:d3:87:f9:f6:08:ab:47:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
        Validity
            Not Before: Aug  5 16:01:26 2025 GMT
            Not After : Aug  6 16:01:26 2025 GMT
        Subject: CN=8bad4d200ca8f47965ff9d49565b4759bb8786b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5d:5f:37:c0:60:ba:d1:1e:54:5e:ce:a3:72:
                    a5:72:26:48:51:d9:1b:ea:55:8e:ce:92:cb:e2:db:
                    84:fb:c4:59:f9:9f:dd:c7:c8:38:34:b1:5f:e2:ba:
                    0b:7e:57:5c:cd:15:62:73:8c:7d:fc:35:01:e0:93:
                    c2:5f:9f:02:bb:d2:82:b3:73:b1:a8:09:73:fe:bf:
                    0c:ae:09:8d:27:d2:64:4a:dd:ac:7f:9e:8c:1a:7d:
                    9b:cc:be:ef:de:a4:9b:8d:ed:ce:f8:45:7c:b1:25:
                    ab:fe:0c:ae:e1:99:c5:f5:03:1c:bd:2d:61:2a:c9:
                    54:04:d7:fa:64:f5:76:cd:3d:0d:39:d8:68:7d:c9:
                    04:b1:2f:6f:30:db:62:11:c6:92:b4:ae:b9:e7:0d:
                    07:8f:e9:de:f1:18:63:c3:5b:34:77:57:0d:eb:3a:
                    09:52:26:30:b8:ee:01:08:70:78:81:8f:20:3e:d8:
                    51:46:49:29:7d:3a:dc:81:5e:b9:3d:bb:b5:a9:1e:
                    96:90:85:1f:fc:5a:46:25:57:36:d4:02:6d:0e:2a:
                    b5:7c:ca:78:e2:03:5d:34:c3:b7:23:8b:38:01:f4:
                    9e:8a:ce:ef:46:e4:3c:4c:6f:f8:1e:a4:a8:5a:bc:
                    34:c8:4f:80:29:eb:20:95:45:d6:50:01:ec:b1:3a:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:4D:20:0C:A8:F4:79:65:FF:9D:49:56:5B:47:59:BB:87:86:B9
            X509v3 Authority Key Identifier:
                keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:43:48:c6:82:c3:d2:55:8b:57:fa:f7:4a:30:18:87:75:
         d9:3b:1d:f1:fe:4f:65:89:02:70:d7:1f:e4:58:ec:91:f1:04:
         bf:08:c4:c5:2a:a2:ac:8b:2b:d5:a6:e3:db:7e:ba:e0:c3:f4:
         5d:db:ab:a3:3d:8d:73:b7:ec:d8:d2:88:cd:10:78:a3:bc:66:
         1a:f2:86:c8:1c:87:7b:fc:37:69:5f:a3:a1:19:e8:74:ea:92:
         0e:83:31:8e:17:bb:72:3f:c0:8f:e2:17:a4:23:1e:70:65:9d:
         72:97:12:8b:eb:6c:ca:1b:1e:ef:1c:53:c2:9d:d7:f3:42:73:
         b8:26:68:81:3f:32:5e:64:13:5f:15:b6:f1:5c:58:ba:6f:1d:
         b4:af:85:5f:da:3f:31:cd:37:78:4f:c7:62:00:27:f6:ae:0d:
         c4:1e:1e:e5:e2:5f:20:38:3d:72:35:08:79:e6:92:62:55:96:
         3e:94:b4:73:e5:49:49:8b:2d:2e:1b:4a:1b:63:99:da:e2:da:
         90:f1:9d:cc:a1:5b:da:47:6e:79:32:52:9d:ca:62:e5:a5:4b:
         22:58:fa:b1:4f:58:75:19:2f:df:8b:d5:5e:30:5f:ae:ca:d9:
         f9:33:c5:fe:73:cc:37:13:2d:79:d1:5b:1d:77:2a:dc:ad:df:
         a1:70:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:50:39 2025 by rpki-client