Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File:                     mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier:          MufcvEHMj0UQMJJRehCyubWiVjSJC9htZuX/ovR3TUY=
Subject key identifier:   C2:90:2F:69:25:39:6B:4F:8A:2D:E7:3C:76:52:B1:5C:FF:61:01:D7
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer:       /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial:       019872CF3C89566583C7C5DC000AC1C7AE8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number:          0CF8
Signing time:             Mon 04 Aug 2025 02:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:40 +0000
Files and hashes:         1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
                          2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: XQIKF7Sq109zfzJCXdQ1qZ+xblbNAv/PPCbKAQV3nbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:3c:89:56:65:83:c7:c5:dc:00:0a:c1:c7:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
        Validity
            Not Before: Aug  4 02:00:40 2025 GMT
            Not After : Aug  5 02:00:40 2025 GMT
        Subject: CN=c2902f6925396b4f8a2de73c7652b15cff6101d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:25:03:01:e3:67:ea:25:0e:2d:b3:db:06:
                    de:00:23:bc:72:72:38:ea:75:f9:68:3f:f7:37:11:
                    46:c6:9b:3f:7e:8b:45:d0:fe:89:84:4e:91:32:dd:
                    ff:38:7f:f6:bb:4a:b7:1d:58:c0:74:be:53:fb:e9:
                    53:53:f1:90:8b:c4:e4:0e:9f:01:6a:1c:06:ab:75:
                    8f:a0:61:f5:8b:77:cb:ce:08:85:aa:7f:e0:d5:eb:
                    f3:08:d8:fc:13:de:84:ae:51:3c:00:cc:2e:e3:a6:
                    4f:c6:be:f1:13:fe:6c:7e:b4:e2:0a:6e:e3:06:46:
                    75:a1:40:aa:ba:03:74:fc:78:3b:f9:56:ef:65:61:
                    14:11:2a:d0:6a:f3:a6:fd:c4:b5:15:f6:27:45:05:
                    b3:00:9f:95:38:04:20:e5:27:04:93:e4:e1:03:f3:
                    ab:e4:f6:da:70:a6:a6:d4:ec:a2:5b:0a:f0:8a:f2:
                    cc:4d:42:9f:57:18:d4:90:9d:4c:12:d6:ab:25:d4:
                    b5:e2:73:b2:ef:b8:86:11:eb:41:f1:d1:1b:66:72:
                    4e:0d:16:ba:2c:11:2b:cb:0a:86:fa:f8:5f:dd:55:
                    6c:49:6d:24:1f:02:d2:a3:21:8c:bb:cd:21:ec:f5:
                    d9:7f:9d:88:d7:44:ef:d4:ff:e1:27:e9:f9:8f:54:
                    ea:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:90:2F:69:25:39:6B:4F:8A:2D:E7:3C:76:52:B1:5C:FF:61:01:D7
            X509v3 Authority Key Identifier:
                keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:db:82:6e:0f:e4:96:7a:53:cc:9d:ae:81:43:05:fe:0e:a3:
         71:56:04:51:01:a2:0a:7e:34:91:3d:5b:a8:88:f3:13:f1:35:
         20:ca:5b:9e:91:29:17:5c:9b:a6:35:3e:57:f5:b0:b2:b3:ef:
         65:32:aa:51:79:e6:0e:f9:d8:98:d5:3b:5b:4f:1b:d3:c4:b7:
         25:b2:fd:af:6b:11:ad:2c:03:fc:7e:bd:ad:a5:37:23:3d:60:
         82:9d:ba:7b:84:c6:78:12:89:35:76:b6:09:07:c9:27:c9:6b:
         49:87:88:ea:85:1a:a6:cf:7c:4a:0f:23:ee:ac:62:61:d7:d7:
         3c:d3:42:eb:89:d9:e2:e3:d8:08:d8:d9:4d:69:99:ef:53:d3:
         f7:be:5f:ee:13:38:fb:4a:a6:2d:c8:cf:bd:58:e5:b1:a8:c5:
         25:a8:04:ee:d0:60:4f:c7:3d:91:28:43:ba:61:df:b4:d0:d0:
         70:f9:cb:e8:12:72:09:95:e4:50:f7:d1:18:0e:f0:f6:75:0d:
         2f:c3:d1:8f:9d:e7:30:eb:3c:d6:cd:80:9f:8d:f7:f8:5c:83:
         35:3a:b6:2f:35:c8:c1:ec:c2:fc:71:c4:e0:05:44:50:82:25:
         aa:6b:9c:a2:eb:b8:39:e8:7a:10:c1:6b:cc:96:8a:d3:e5:ef:
         7a:44:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:45 2025 by rpki-client