Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
File:                     YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft (raw, json)
Hash identifier:          3MpoWFTvf+BPfI+w6U3lqahDyjx3kUFnY8jr6Brleko=
Subject key identifier:   F9:74:FA:39:1F:F4:21:7A:8B:6D:6A:3C:9B:9C:C8:2E:6C:28:8B:CE
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Certificate issuer:       /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial:       019896A54846400CFBF8B105FB988D8A31A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
Manifest number:          1647
Signing time:             Mon 11 Aug 2025 01:01:10 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:10 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:10 +0000
Files and hashes:         1: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (hash: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=)
                          2: YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl (hash: +Oj3ZRMmPn0SNUTvfpuRXM6gGlY4w7nbXXz6086EY/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:48:46:40:0c:fb:f8:b1:05:fb:98:8d:8a:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
        Validity
            Not Before: Aug 11 01:01:10 2025 GMT
            Not After : Aug 12 01:01:10 2025 GMT
        Subject: CN=f974fa391ff4217a8b6d6a3c9b9cc82e6c288bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:52:89:ed:1d:89:d5:8f:fc:96:28:68:be:
                    37:b0:b2:a8:cb:10:c2:6a:af:27:99:bc:4e:2a:27:
                    87:12:ee:34:73:70:aa:4a:fe:15:ed:4a:06:da:a1:
                    53:f7:b9:ed:85:5f:6f:f4:6e:b3:24:6c:0c:6a:be:
                    18:68:3a:2d:a1:51:a9:ff:ab:a8:99:9a:28:2e:48:
                    89:ef:66:09:76:bd:18:c4:8c:43:e1:b3:0b:34:86:
                    69:28:80:71:2a:c0:63:f3:a8:67:f8:c5:9a:04:32:
                    17:46:7b:59:3f:f6:8a:e0:c4:04:a7:0e:6c:80:07:
                    a8:01:66:ea:c8:3c:76:2e:df:68:bb:bc:3c:e1:c5:
                    67:7a:48:db:7e:bf:dd:98:0d:51:a2:47:40:79:cb:
                    fd:bf:07:83:67:c6:c5:1d:62:28:1a:f8:59:0a:4f:
                    ab:7e:46:90:f2:6d:a5:39:79:d0:a6:56:c5:c2:5b:
                    f5:ba:60:7b:61:9a:e7:65:cc:1c:d9:40:99:d8:ef:
                    f6:90:e9:2d:a0:2d:c7:cc:6b:6c:b8:c1:d0:2b:12:
                    d7:16:a4:d8:88:b2:05:67:65:ea:94:63:45:7d:14:
                    49:7b:c9:a2:02:2f:a6:52:e4:99:bf:b7:92:34:45:
                    bf:c0:bb:ab:cd:62:44:eb:8b:fc:ec:f7:ec:5a:dd:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:FA:39:1F:F4:21:7A:8B:6D:6A:3C:9B:9C:C8:2E:6C:28:8B:CE
            X509v3 Authority Key Identifier:
                keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9b:cc:ef:62:4b:5b:84:4b:7c:1e:31:5d:fc:a5:89:65:b8:
         3a:dc:b3:8a:95:43:05:1b:78:b9:61:da:55:9c:b4:df:43:c7:
         14:27:38:6f:c1:75:e3:10:c3:d4:5b:c6:08:21:d5:0d:20:e3:
         70:33:68:28:6c:c8:73:bd:1a:ae:6f:0b:da:2c:4e:f8:77:a1:
         ea:b8:5b:1c:12:cf:26:95:89:c5:42:6b:4f:1a:8b:8b:a4:0c:
         50:3b:ae:b1:8b:49:92:6b:9b:53:2a:63:99:ea:ae:01:78:9e:
         4c:fb:b6:b4:5c:56:6c:34:f0:b4:d6:17:ce:24:5c:84:5c:a0:
         c5:ee:77:9e:e6:87:92:ab:05:3e:06:5c:2d:57:d2:38:d2:73:
         55:f5:40:ac:dc:98:02:87:0a:d0:05:52:89:fa:d8:f3:53:82:
         bf:88:1b:1b:22:1b:db:a6:40:82:10:d5:02:97:b2:30:15:a8:
         08:cb:2d:8f:4e:24:24:b9:d8:4a:6b:0f:3c:6c:6d:34:55:59:
         d4:6b:fb:40:d7:d4:da:90:3e:c3:0e:7d:85:31:e3:bd:1a:fe:
         36:d6:1e:8a:35:18:df:cd:be:c6:86:08:80:7f:3c:f1:43:be:
         72:29:60:e1:f6:14:bf:e7:bb:04:4f:6b:9c:a6:28:1b:33:59:
         a3:40:1c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpUhGQAz7+LEF+5iNijGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNjQzMThjMWFhYTdjYTA2MDMxNTVhODgzZDQzOTI2ZWY5
N2U4N2MwHhcNMjUwODExMDEwMTEwWhcNMjUwODEyMDEwMTEwWjAzMTEwLwYDVQQD
EyhmOTc0ZmEzOTFmZjQyMTdhOGI2ZDZhM2M5YjljYzgyZTZjMjg4YmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDRSie0didWP/JYoaL43sLKoyxDC
aq8nmbxOKieHEu40c3CqSv4V7UoG2qFT97nthV9v9G6zJGwMar4YaDotoVGp/6uo
mZooLkiJ72YJdr0YxIxD4bMLNIZpKIBxKsBj86hn+MWaBDIXRntZP/aK4MQEpw5s
gAeoAWbqyDx2Lt9ou7w84cVnekjbfr/dmA1RokdAecv9vweDZ8bFHWIoGvhZCk+r
fkaQ8m2lOXnQplbFwlv1umB7YZrnZcwc2UCZ2O/2kOktoC3HzGtsuMHQKxLXFqTY
iLIFZ2XqlGNFfRRJe8miAi+mUuSZv7eSNEW/wLurzWJE64v87PfsWt3jdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl0+jkf9CF6i21qPJucyC5sKIvOMB8GA1UdIwQY
MBaAFGJkMYwaqnygYDFVqIPUOSbvl+h8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEt
YjkxYTI3MDU1MjA0LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mNmI2NDItODcyYi00YjdkLWJkNmEtYjkxYTI3MDU1MjA0
LzEvWW1ReGpCcXFmS0JnTVZXb2c5UTVKdS1YNkh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpvM72JL
W4RLfB4xXfyliWW4OtyzipVDBRt4uWHaVZy030PHFCc4b8F14xDD1FvGCCHVDSDj
cDNoKGzIc70arm8L2ixO+Heh6rhbHBLPJpWJxUJrTxqLi6QMUDuusYtJkmubUypj
mequAXieTPu2tFxWbDTwtNYXziRchFygxe53nuaHkqsFPgZcLVfSONJzVfVArNyY
AocK0AVSifrY81OCv4gbGyIb26ZAghDVApeyMBWoCMstj04kJLnYSmsPPGxtNFVZ
1Gv7QNfU2pA+ww59hTHjvRr+NtYeijUY382+xoYIgH888UO+cilg4fYUv+e7BE9r
nKYoGzNZo0AcJA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:32 2025 by rpki-client