Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
File:                     TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json)
Hash identifier:          RYdFfdxu0En443Fa8B+hIC4Xo3FwhSasmnIP7vxYVNk=
Subject key identifier:   AC:5B:0C:AC:7D:D2:D2:F4:E2:6A:F3:29:B6:3B:31:4B:8A:1D:34:FF
Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2
Certificate issuer:       /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
Certificate serial:       019895C8F7EE47A339B139292A028FEB389B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
Manifest number:          0B56
Signing time:             Sun 10 Aug 2025 21:00:32 +0000
Manifest this update:     Sun 10 Aug 2025 21:00:32 +0000
Manifest next update:     Mon 11 Aug 2025 21:00:32 +0000
Files and hashes:         1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: yRrMrjxcUjBlth/qZicE1/K9UiZQ2NPo81K18L3e6LE=)
                          2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:c8:f7:ee:47:a3:39:b1:39:29:2a:02:8f:eb:38:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2
        Validity
            Not Before: Aug 10 21:00:32 2025 GMT
            Not After : Aug 11 21:00:32 2025 GMT
        Subject: CN=ac5b0cac7dd2d2f4e26af329b63b314b8a1d34ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:1e:00:56:bc:ac:09:9f:91:32:a8:16:88:
                    25:fc:ba:61:02:3c:af:5b:54:09:43:8b:bc:2d:a6:
                    f1:28:c1:2d:3e:56:04:4f:4e:2d:2e:da:d6:dd:0d:
                    e7:a6:01:0b:f1:bd:53:fc:82:d4:14:8e:ba:67:9b:
                    0a:bf:68:7d:d4:1b:60:b7:ed:c4:cd:4a:da:1b:31:
                    d5:4f:2b:cb:8a:f0:07:54:27:dd:60:92:89:f5:f4:
                    a8:49:9b:8b:b4:fd:72:ca:0d:c3:f2:a1:3e:e0:9c:
                    f3:8c:36:02:ed:68:cf:47:53:be:13:c2:35:04:67:
                    1a:4b:b0:43:f5:82:a3:7c:50:36:63:65:b0:1d:5b:
                    7b:fb:7c:f1:14:7e:ac:9b:d1:5b:a3:b4:2e:5c:7e:
                    32:de:d3:45:14:a2:54:26:46:9a:4c:59:0a:3a:9a:
                    5b:4d:73:a1:fa:b3:5b:86:ef:8f:e8:5d:ff:b3:b3:
                    53:7b:f6:1e:48:49:9d:43:e4:0c:cb:4e:c7:aa:1b:
                    2a:d1:e9:d2:e4:a8:f3:ea:48:84:cf:b2:35:5b:f8:
                    95:34:b7:10:6e:0e:32:4c:de:6a:57:a3:71:08:be:
                    e3:8e:c3:ed:35:15:5f:0c:bb:b1:f8:32:e1:9f:ec:
                    3d:f2:d7:0b:3d:64:e1:9b:90:09:80:99:da:6e:fe:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:0C:AC:7D:D2:D2:F4:E2:6A:F3:29:B6:3B:31:4B:8A:1D:34:FF
            X509v3 Authority Key Identifier:
                keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:99:e5:9d:7c:38:09:dd:62:28:b0:b9:47:4b:44:11:5d:7a:
         c2:df:49:85:43:e3:67:15:2d:2c:d3:a8:bb:e1:e7:14:f6:12:
         d9:e0:75:19:2f:ae:1e:f8:99:a9:94:28:50:58:78:0b:5c:f0:
         04:49:43:b5:c5:8f:49:c9:a4:9b:9c:75:d3:0c:30:d1:3c:c0:
         87:e2:8d:68:29:d8:27:a2:38:9b:e4:9b:ea:da:df:aa:6f:ec:
         80:1a:6a:ec:b9:61:57:89:19:70:7d:0d:13:9c:57:7f:f0:53:
         44:9f:3d:a0:51:b6:f4:8b:c9:9a:f1:ee:e9:98:5d:fe:c4:75:
         ec:61:a6:8a:38:72:3d:54:67:01:00:c3:ff:6c:b5:39:94:3f:
         b0:37:33:6f:e3:b3:76:bb:75:f4:d4:a9:12:ea:ff:9e:d8:07:
         03:c2:b3:d2:a8:54:bd:91:42:52:35:23:05:0f:57:59:be:da:
         2f:ac:51:a5:ed:d7:df:6e:13:50:e2:5b:09:fc:de:6d:c7:47:
         1f:af:d6:88:d1:5e:f2:4b:9c:0f:c8:42:aa:e1:67:69:42:bb:
         79:db:72:7e:9c:3d:5f:21:d1:3d:07:0e:d9:cf:2a:db:e0:4e:
         f9:69:bf:3e:d5:4e:0c:16:93:6c:ee:b9:cc:11:b0:b8:c7:7e:
         49:7d:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:16 2025 by rpki-client