Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File:                     YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier:          oD3F54zdayDPrrV32XGF6HBQGkjQL8cm+qMVe2t3q68=
Subject key identifier:   77:4A:9D:67:C5:34:09:B6:6A:D3:3E:6B:C5:AF:43:11:3F:A5:94:30
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer:       /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial:       019873E36CD343BF4E7D1A476A8F0BCF0748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number:          14F6
Signing time:             Mon 04 Aug 2025 07:02:20 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:20 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:20 +0000
Files and hashes:         1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: bjqKhhESrArVH21gyzeIXYcMsJ//1Tc+iHMTj+Mm0bQ=)
                          2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:6c:d3:43:bf:4e:7d:1a:47:6a:8f:0b:cf:07:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
        Validity
            Not Before: Aug  4 07:02:20 2025 GMT
            Not After : Aug  5 07:02:20 2025 GMT
        Subject: CN=774a9d67c53409b66ad33e6bc5af43113fa59430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:6c:c7:17:54:d1:d5:10:90:c2:e6:33:24:
                    b7:09:fb:14:69:7f:03:66:38:46:cb:57:ea:a7:c8:
                    f7:ea:33:6d:be:89:a0:5d:f4:c5:c2:40:b5:3f:bf:
                    8d:b1:7f:d6:95:a6:f0:3c:b2:2d:da:c5:d7:56:c6:
                    9a:40:55:1f:58:bc:1b:4c:fd:3d:fa:79:c5:b6:ad:
                    c0:56:3d:bf:be:36:e4:9c:27:04:a4:44:e5:f0:b3:
                    8b:b5:40:0d:e3:a4:d8:33:45:f8:34:c3:3a:ec:37:
                    76:e3:5c:21:ad:2e:5a:e5:ed:8d:ef:c4:5b:13:d5:
                    96:45:67:09:7c:59:3e:59:0d:05:3c:ed:1f:73:da:
                    71:43:1f:07:72:fa:f0:03:33:30:3d:17:a0:c3:ef:
                    cb:fc:a4:4c:a4:cf:23:04:05:54:6b:00:3e:ca:9d:
                    fb:b3:58:85:9d:65:8d:02:c3:6a:9e:d7:9f:b0:04:
                    6f:95:30:9b:6b:40:38:48:6c:dd:7f:d5:02:a8:ed:
                    ab:9d:bf:93:01:2a:ce:52:bf:3a:a6:1f:c7:35:0b:
                    77:27:b8:01:45:88:bf:96:ef:2f:11:42:60:26:50:
                    ab:73:cd:a1:53:05:49:d8:ff:75:3a:75:40:d1:c0:
                    04:4e:88:7b:47:9a:1d:0f:12:60:4b:32:98:a4:18:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4A:9D:67:C5:34:09:B6:6A:D3:3E:6B:C5:AF:43:11:3F:A5:94:30
            X509v3 Authority Key Identifier:
                keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b6:5d:06:84:14:8d:a0:13:d2:a0:00:64:b3:07:6b:fc:f0:
         ac:77:4c:01:fc:62:b2:5f:30:a9:c3:68:fd:3b:9c:f4:2c:b0:
         65:47:73:10:0d:7a:27:32:f8:af:22:df:4c:ba:b7:35:f8:7d:
         77:7a:a4:b6:0c:15:27:7a:15:14:12:78:48:1b:3b:49:16:f4:
         47:02:19:b9:68:b7:64:d5:61:be:68:a7:d5:3d:17:ef:f7:d5:
         29:3c:d9:cd:82:41:59:af:95:06:82:91:52:7c:81:46:e5:23:
         3e:bf:63:50:48:df:c4:1e:86:48:2f:8f:c4:81:f5:01:4a:2a:
         ef:ed:cc:39:33:9d:8b:b4:ab:06:e6:fd:00:13:91:27:c1:ea:
         4d:76:5f:d3:5e:17:7a:36:73:4c:76:39:70:47:9d:68:ff:83:
         3e:39:05:66:1e:6a:5e:37:1e:ad:08:89:53:2f:0c:69:05:3d:
         5e:84:54:f5:66:3a:d8:68:02:34:2b:cf:1d:d5:fb:54:70:d9:
         88:96:aa:ce:da:b6:94:9c:de:3d:2e:d3:f6:18:fb:a2:2d:c3:
         86:8d:7c:55:f2:18:cb:1a:d2:fc:d3:4d:6c:a7:00:b7:88:26:
         8a:21:b3:af:56:a6:e7:54:35:69:ce:07:ca:06:22:65:66:29:
         96:3c:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:53 2025 by rpki-client