Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          jXZXkZl8onfXIqjkxpMT0nqEDAbWpR+KQOrym9YLmcE=
Subject key identifier:   B9:39:15:27:93:50:4F:DB:48:49:7C:A0:6D:BC:85:84:42:39:5D:ED
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       019874F54F6426C10DD91BDCBF74E743BCE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          046B
Signing time:             Mon 04 Aug 2025 12:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:30 +0000
Files and hashes:         1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: MrqBDUvXMLNwkGD9gf/7X+yGvhbDzSnVeX0ZQaxJRhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:4f:64:26:c1:0d:d9:1b:dc:bf:74:e7:43:bc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Aug  4 12:01:30 2025 GMT
            Not After : Aug  5 12:01:30 2025 GMT
        Subject: CN=b939152793504fdb48497ca06dbc858442395ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:5f:b3:4e:4e:00:69:ab:c8:f4:9d:21:b4:
                    83:3f:99:09:29:ed:ac:ab:39:f0:9e:3a:f3:19:49:
                    e0:ad:8f:83:71:23:2b:07:70:1f:25:c4:63:5d:0a:
                    b0:d4:88:f6:9f:19:28:d6:64:38:7c:f6:2b:22:89:
                    3f:bd:45:b4:2d:9a:e2:e7:c5:db:14:37:2e:19:e5:
                    34:b8:bd:5e:a2:be:fa:a0:43:53:83:72:2a:94:08:
                    cc:4e:7a:fc:39:d1:6c:69:d5:7e:fa:fe:50:da:fa:
                    5b:4c:d2:fc:9b:6b:b7:5b:68:86:b8:11:a2:7b:c7:
                    a7:fa:d6:34:ce:5c:33:e8:d0:a2:00:00:36:9d:ac:
                    b8:c2:f4:79:04:47:24:37:27:39:94:28:4b:e7:84:
                    41:92:92:16:f4:28:1a:cc:7c:6b:37:81:06:4b:8d:
                    19:15:11:06:43:f7:06:79:4d:36:0f:98:0b:4c:8f:
                    ae:75:3c:62:82:24:f8:2b:33:7a:75:fe:6c:75:ae:
                    3a:41:28:59:2c:89:70:7c:0b:6d:13:9d:1c:63:50:
                    e1:60:34:33:5f:28:8a:d8:08:d8:29:89:93:17:0c:
                    76:7d:79:3b:86:0c:c5:7e:a4:c5:fd:e3:73:1f:6b:
                    5e:e5:ca:51:80:ec:61:34:eb:fc:30:a0:88:c5:c3:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:15:27:93:50:4F:DB:48:49:7C:A0:6D:BC:85:84:42:39:5D:ED
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ad:48:10:90:5c:51:78:3b:59:f4:b3:1e:d6:44:01:c8:2e:
         d6:fc:0a:69:7c:eb:0b:2c:ac:ce:13:a7:c1:90:87:1c:20:a4:
         60:19:a2:e9:61:ef:3d:0f:20:e6:44:53:18:82:f3:01:dc:7d:
         43:f2:c7:3c:f3:d1:04:ae:4d:28:a9:0a:40:2d:a8:9e:02:4a:
         13:5c:ea:f8:ec:ff:c1:5a:f3:1a:4d:22:aa:11:d9:32:19:5f:
         b9:df:da:f2:be:84:8b:52:14:f5:4e:1b:64:4c:62:00:3e:7f:
         07:2c:33:45:8a:7a:dd:f7:b3:20:80:5e:d2:08:ef:e9:ee:2d:
         c6:de:a4:42:1b:58:4e:33:5a:a4:b7:7d:0f:74:88:af:50:f9:
         7e:65:14:aa:f5:f0:96:ae:6d:cf:f9:92:e9:1b:42:7d:9a:3a:
         42:b4:49:f6:2e:fe:fb:4b:24:b5:77:4b:45:e8:42:80:89:b5:
         04:05:ff:6b:94:65:e8:40:11:60:5f:30:f7:8a:47:0b:6d:18:
         20:b3:de:b4:55:89:74:87:dd:b3:9c:30:7c:41:d1:94:08:89:
         17:71:ca:78:5e:4e:12:e5:d4:d3:7c:d3:c1:89:8f:ab:db:e2:
         c9:29:03:23:50:b0:ef:d7:41:a7:88:23:2e:a3:fe:fb:6d:a6:
         75:58:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:41 2025 by rpki-client