Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          DyxyWMkI3tT9jGXWEbHglMDrufatFYrF7W7FRrsf2NA=
Subject key identifier:   CB:52:DD:C8:88:50:00:74:12:99:6A:54:87:AE:31:3A:1E:B8:E2:33
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       019874BD75FF652C2542F417E325CACA79C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          0551
Signing time:             Mon 04 Aug 2025 11:00:30 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:30 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:30 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: Ytgh6IdcBkKb0G/roKQN5YPw6tVXHJgqW3FneefJutc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:75:ff:65:2c:25:42:f4:17:e3:25:ca:ca:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Aug  4 11:00:30 2025 GMT
            Not After : Aug  5 11:00:30 2025 GMT
        Subject: CN=cb52ddc88850007412996a5487ae313a1eb8e233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:ea:6a:40:49:98:9f:7e:15:da:08:1d:20:
                    f1:d9:bd:21:79:0a:a7:fd:c4:fd:7d:9e:4c:d6:8d:
                    0b:2d:f0:b0:f0:bb:c0:85:c8:81:b0:1f:70:93:77:
                    87:c7:c6:71:18:5d:1a:05:cc:24:9c:52:b6:3f:0d:
                    c9:2e:f6:0d:5e:05:21:18:66:88:cd:30:42:a5:ef:
                    33:4c:0e:57:bb:e7:a4:dc:2a:b7:d7:b8:7e:6a:07:
                    79:f9:cb:40:07:44:69:dc:0d:9f:8a:c5:31:14:8b:
                    8a:23:ed:69:db:3f:29:13:43:0a:aa:b3:6d:ef:7e:
                    f2:07:c0:99:19:67:98:78:65:dd:0b:6e:56:15:36:
                    cd:e6:82:33:00:41:0b:04:a2:d6:35:71:b6:7d:de:
                    d8:22:9b:1b:93:08:d1:0e:01:ea:b0:75:ec:ee:87:
                    88:9e:f1:cd:46:d6:0a:30:55:3f:06:80:0b:45:6c:
                    91:77:40:d2:d0:9b:99:6c:54:22:8a:be:6f:e8:13:
                    12:07:50:d6:ba:c1:c1:71:b5:f5:7e:ff:15:6f:4a:
                    7b:12:d9:e2:90:61:46:1b:47:f2:b0:51:c5:1b:db:
                    7b:b0:3f:79:a0:6d:7a:1e:de:09:c9:10:47:db:e3:
                    f0:c9:99:e1:e0:97:32:e5:59:96:17:e0:2c:57:7b:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:DD:C8:88:50:00:74:12:99:6A:54:87:AE:31:3A:1E:B8:E2:33
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:33:68:26:96:31:ef:71:29:a8:cc:42:b5:5c:63:c7:b4:
         99:90:e7:fb:46:96:eb:07:b4:74:0b:d2:84:38:fd:bb:75:b3:
         04:c2:a9:5d:1c:4d:1a:de:a3:72:ef:5f:34:c9:aa:5d:44:9c:
         d1:b6:de:d7:c1:74:5a:10:63:26:ae:48:3c:d6:61:c9:c7:22:
         4c:3e:80:c6:ec:aa:ec:32:db:2d:fd:ee:b9:42:bc:06:78:a0:
         98:f2:90:a3:e9:35:58:b6:64:1d:d4:e0:2e:76:c5:a8:fd:56:
         be:11:72:fb:66:a8:e3:38:31:09:09:b2:87:93:e7:b5:29:7e:
         75:34:d7:26:2b:61:1d:55:71:35:74:7c:0c:3c:45:d5:8f:67:
         da:b8:75:6d:a3:c4:42:10:a4:75:ca:64:39:63:1f:2b:0c:66:
         a4:b9:06:26:2c:52:4b:de:06:18:f2:c5:86:88:b0:2e:46:39:
         cd:02:a4:9a:64:54:5b:8d:ad:08:40:1c:e2:09:74:bc:1c:c5:
         05:80:b5:49:eb:e9:6e:a0:60:6d:a2:89:3c:97:ad:e6:d6:80:
         58:36:21:4f:c5:d7:61:7d:92:11:eb:34:9d:a3:73:7a:24:76:
         ba:52:ba:d9:15:3b:8e:52:97:d5:ab:05:c4:78:4d:08:67:8b:
         03:9f:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:53 2025 by rpki-client