Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          EA23Id2hnOeTumQ4mbSOkaEcL2rB5MpE44DCMMKdoUw=
Subject key identifier:   1B:77:BC:22:BB:73:6E:6D:6A:4A:08:36:D9:F2:36:D2:61:B1:ED:AC
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       01989335F37415F43E34DDB7B4B2E72D4D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          118F
Signing time:             Sun 10 Aug 2025 09:00:43 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:43 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:43 +0000
Files and hashes:         1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: bk5yIy4+SE/45nNHuobyxFbQFYqeZTZB0dKqN8vr67o=)
                          2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:35:f3:74:15:f4:3e:34:dd:b7:b4:b2:e7:2d:4d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Aug 10 09:00:43 2025 GMT
            Not After : Aug 11 09:00:43 2025 GMT
        Subject: CN=1b77bc22bb736e6d6a4a0836d9f236d261b1edac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:1a:be:99:1f:cd:9d:cb:16:2a:e4:e0:11:
                    99:84:31:9d:0a:ad:af:13:08:ff:96:d6:f1:5b:56:
                    a7:ea:1c:1f:38:16:97:52:21:51:80:c7:0e:37:fd:
                    40:6e:e1:f1:27:81:28:b6:5d:16:07:60:41:3c:99:
                    58:b8:0d:4a:ee:a5:9a:ec:3f:bb:d4:06:fc:2c:14:
                    58:53:23:c0:b1:69:10:05:eb:16:16:60:96:8d:7f:
                    57:5b:22:a1:7d:bf:d3:e5:b2:16:8d:ab:d9:52:12:
                    a1:c3:ac:97:e3:cd:8d:02:37:a9:d4:10:ad:17:eb:
                    44:7a:78:43:c0:0f:98:69:aa:0d:c2:ba:af:b7:6a:
                    d3:24:21:c2:f0:73:98:f2:fa:bd:7e:ed:14:6a:b9:
                    2d:60:26:08:c6:5d:30:95:18:d3:27:67:8a:a4:4d:
                    b0:d6:b5:1f:46:a4:4c:af:3b:f9:98:cc:2e:95:7a:
                    de:de:2c:75:11:62:63:da:1c:b9:95:16:a9:5f:33:
                    ae:cd:68:30:07:47:d2:d9:3b:41:37:16:2e:50:54:
                    3c:88:1d:be:b4:b8:39:5c:0d:bf:8d:62:fb:7b:58:
                    7a:bf:ab:4b:69:9e:6b:b8:86:03:64:bc:d2:fa:1d:
                    e1:14:2f:de:9a:a6:5f:13:bf:9b:a7:79:9f:ff:77:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:BC:22:BB:73:6E:6D:6A:4A:08:36:D9:F2:36:D2:61:B1:ED:AC
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:a9:98:9b:89:7b:b4:af:45:4a:a5:d0:dd:6f:cd:f9:a5:
         f9:6c:a2:fb:c0:fd:20:a9:d5:83:27:92:10:1d:c2:a7:4d:9d:
         c6:c3:9e:da:24:04:de:93:2a:b3:df:01:4a:ee:68:6b:54:94:
         df:3d:47:be:2f:43:ea:1e:b5:1a:a3:39:6b:ea:30:dc:aa:db:
         da:bf:5c:fa:48:44:d7:bc:3c:e7:a7:62:d0:e3:e1:7b:1d:38:
         83:8d:b1:77:15:97:d3:e1:00:cf:c0:ea:71:26:73:56:27:23:
         ab:2b:f3:43:26:13:04:50:95:a3:e0:09:16:44:ef:2d:40:c9:
         fb:e7:6b:87:8f:01:d2:95:7e:ba:19:58:0b:02:8c:90:16:68:
         f5:c9:16:d1:85:67:ce:8f:2a:a8:2d:f4:5e:33:50:a6:e2:a3:
         1c:fa:cf:2d:ab:82:7b:38:15:5c:9b:90:51:4d:2c:12:4b:ae:
         9a:34:5f:45:75:30:0f:3f:cc:b2:34:52:0b:ff:20:a0:31:29:
         9d:fd:14:4e:81:97:1a:4b:99:b0:46:74:b8:b7:15:f2:58:92:
         fe:92:7f:55:dc:cd:c7:9b:61:53:12:ef:c5:13:d5:a7:1b:93:
         16:af:37:21:51:08:61:b6:e6:9d:21:1a:82:d1:95:f5:37:20:
         98:e6:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:44 2025 by rpki-client