Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
File:                     yMHp4LxfXaGOMkoYEltCeAGoB_E.mft (raw, json)
Hash identifier:          Ft7ASz+wBCjJRYwMUCe5A/tWv/3aVWPlDrsLMbg9P1Q=
Subject key identifier:   F0:6A:3F:09:C8:E4:E6:45:F6:09:3A:CB:6C:D1:C5:34:16:AA:E7:C0
Authority key identifier: C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1
Certificate issuer:       /CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
Certificate serial:       019887A07A3D4A7F709CDE29CF5854DB97DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
Manifest number:          0779
Signing time:             Fri 08 Aug 2025 03:01:37 +0000
Manifest this update:     Fri 08 Aug 2025 03:01:37 +0000
Manifest next update:     Sat 09 Aug 2025 03:01:37 +0000
Files and hashes:         1: KzFfCDjHV6hqDoqqVxbHisFAzqw.roa (hash: EJN3VDm9IKnbYFgaxZt9SIfMAHKvU3wGx8Z5+gCSQRo=)
                          2: yMHp4LxfXaGOMkoYEltCeAGoB_E.crl (hash: ec0a1+It+mAwFFW4IserGfl5aSDMqLGMKeibQJhGin0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:a0:7a:3d:4a:7f:70:9c:de:29:cf:58:54:db:97:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1e9e0bc5f5da18e324a18125b427801a807f1
        Validity
            Not Before: Aug  8 03:01:37 2025 GMT
            Not After : Aug  9 03:01:37 2025 GMT
        Subject: CN=f06a3f09c8e4e645f6093acb6cd1c53416aae7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:c2:f5:99:7d:c7:ae:f9:7e:6c:1a:18:6b:
                    60:7b:46:19:fa:66:d2:8b:a9:a6:7b:b3:12:88:f9:
                    fb:e7:41:c9:15:38:8b:2b:cf:c0:6e:f4:c1:47:4d:
                    20:1a:eb:5d:ca:69:50:c1:e5:d5:39:d8:df:ec:b6:
                    52:25:fd:9d:cd:37:9d:cd:16:d2:d7:96:31:78:13:
                    01:9d:5d:63:61:9d:cb:5f:ba:0f:cc:d7:91:38:6a:
                    cd:bf:2b:fb:6b:9e:08:1e:8d:7f:9a:1d:ab:d6:07:
                    94:2f:2d:0d:f2:2b:47:af:95:ae:42:3e:9e:fa:a1:
                    1f:a9:c5:61:d9:94:df:b2:78:5a:3b:df:3f:4a:f2:
                    c2:af:23:a9:21:9c:eb:94:83:09:0a:74:c8:7d:44:
                    dd:25:97:e0:bd:1e:ae:37:1d:e4:c6:21:75:81:70:
                    d8:56:ec:35:69:90:04:01:80:48:70:bb:32:4d:cf:
                    e9:a8:7d:f1:13:22:45:e2:07:a4:15:3b:cf:35:ff:
                    14:32:01:fd:29:22:41:45:6e:61:cf:97:f4:c6:0e:
                    7e:7e:01:66:6c:69:eb:d2:b0:7e:c9:cc:0b:b3:d0:
                    e0:45:4a:4f:4d:f1:e6:f7:e2:13:9b:81:24:51:10:
                    5d:c2:66:20:ae:df:8b:bc:f0:3e:60:c6:32:67:92:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:3F:09:C8:E4:E6:45:F6:09:3A:CB:6C:D1:C5:34:16:AA:E7:C0
            X509v3 Authority Key Identifier:
                keyid:C8:C1:E9:E0:BC:5F:5D:A1:8E:32:4A:18:12:5B:42:78:01:A8:07:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHp4LxfXaGOMkoYEltCeAGoB_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4f6f43-85f4-401a-a32f-e1e39f956081/1/yMHp4LxfXaGOMkoYEltCeAGoB_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:be:08:75:19:f4:9e:97:76:5b:0d:19:ab:fc:3e:70:f3:
         7a:09:91:c0:6d:fa:14:a5:f5:01:32:9e:bd:4f:9b:ca:dd:f6:
         fc:42:8d:75:3d:5f:ca:ee:a6:21:b7:50:71:ea:04:1f:e0:ac:
         94:00:1e:22:4a:50:c8:0f:97:9d:41:c9:61:20:a2:f3:a5:d8:
         0e:2c:a8:18:68:2e:59:02:d6:e2:d3:d9:cf:81:53:e4:66:0d:
         51:86:5a:82:a1:2b:c1:b1:2b:23:23:14:f0:cb:4a:be:68:74:
         33:97:56:7d:cf:9d:8d:b5:87:94:12:73:fa:93:ad:b4:e1:20:
         cc:f8:2d:dd:a6:ab:e3:32:23:73:67:7c:2f:ef:6c:d0:14:75:
         1d:a9:0b:51:de:d5:db:eb:36:b5:cb:60:53:00:2d:f0:1a:53:
         3e:a4:7a:7e:96:7a:e8:9c:b8:d6:6a:2a:3e:37:ca:92:0d:9d:
         7f:d8:2e:5f:c4:48:2d:0b:4f:72:c2:08:65:5a:2c:ae:a2:c5:
         8f:1a:c5:96:95:27:98:6a:d9:45:f9:bd:fe:03:72:9d:9d:02:
         53:8a:df:e0:09:87:ae:ea:aa:09:a8:30:d9:57:64:3e:b6:69:
         48:0f:92:e8:8d:08:02:2b:68:66:9a:29:ab:3e:46:d3:da:e1:
         73:a7:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:42 2025 by rpki-client