Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier:          xM3CDfvrIl8ofyw01YpNTfFhcyAI5x9avPGCvU9iIis=
Subject key identifier:   11:0B:3A:D8:B8:4C:1C:39:E0:4B:CF:1E:00:2C:F9:A4:46:87:0D:9E
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer:       /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial:       01983E3CAB94BB59705D2F6F1F70800F499D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number:          11C6
Signing time:             Thu 24 Jul 2025 21:00:20 +0000
Manifest this update:     Thu 24 Jul 2025 21:00:20 +0000
Manifest next update:     Fri 25 Jul 2025 21:00:20 +0000
Files and hashes:         1: 63TdjH6W107on2R0OsWADBs0on8.roa (hash: Ncx3bdjsiwwzAHtwjbAlakIAyaghqw6YvVL5UElIrQk=)
                          2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: vrVqdn2vKke1srdhfEIDkbk9Ax7KTWPp/BxubBIFZ5k=)
                          3: fWsFtqjlg1LQ_p_q5K_2GnL8QEw.roa (hash: CoDBOpj4/7ndyh9Jvl792nll1Mc+xm7ePsUPRUs36YE=)
                          4: rJW6voa1Wjy_FJWB-mYHdAKiSVs.roa (hash: vjUPxR8jUNlJ30WRpjQpZExmSVG2787XG5OfBnV64ZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:3c:ab:94:bb:59:70:5d:2f:6f:1f:70:80:0f:49:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Validity
            Not Before: Jul 24 21:00:20 2025 GMT
            Not After : Jul 25 21:00:20 2025 GMT
        Subject: CN=110b3ad8b84c1c39e04bcf1e002cf9a446870d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:d4:12:a5:1b:66:27:be:8c:49:11:dc:13:
                    0d:3c:2c:09:24:55:a9:0f:9b:e6:66:2f:bf:6f:cc:
                    b4:d9:71:f4:2d:83:ca:ab:c9:26:15:87:f0:8f:6a:
                    27:92:2b:2d:cf:a1:71:99:0b:f2:13:2f:cf:2b:ff:
                    55:f4:b7:c0:1f:94:79:45:29:6a:a4:1c:4d:02:ef:
                    17:01:b6:77:46:bc:17:16:e8:90:10:35:86:51:d7:
                    30:e8:70:ea:cb:3b:5e:6c:a6:de:5a:fd:f7:4f:1f:
                    74:c1:27:10:50:e4:96:f3:28:23:12:66:4a:fc:c2:
                    ce:d3:89:3a:28:80:87:ae:ab:2e:de:3c:0b:be:70:
                    73:4f:17:cd:22:15:14:b2:e8:34:45:43:9f:60:46:
                    51:3d:ce:60:d7:d5:43:b8:2d:2c:85:f8:9c:07:41:
                    50:85:38:b2:46:24:88:9a:0a:5b:60:50:ee:20:d6:
                    a9:51:00:12:55:34:89:1a:9f:a4:f9:c5:53:42:ed:
                    ae:86:3f:5b:9c:4b:81:55:13:24:d7:4f:e5:a6:19:
                    05:ba:7a:df:0d:ac:cc:60:7f:9c:54:06:26:06:44:
                    6c:92:a0:de:16:aa:65:5a:98:b1:5f:e0:fd:ac:4b:
                    0b:90:ae:35:5a:37:57:2d:8c:d7:f4:91:80:89:c3:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:3A:D8:B8:4C:1C:39:E0:4B:CF:1E:00:2C:F9:A4:46:87:0D:9E
            X509v3 Authority Key Identifier:
                keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:9c:99:6f:ce:f5:d5:a7:82:76:3c:0a:29:bc:68:0c:1d:
         ef:e7:39:0a:fd:85:ef:16:3a:23:65:a4:1d:9a:7b:c6:7b:39:
         d2:ad:85:3d:38:09:67:5b:a9:03:ed:20:00:18:91:64:0e:38:
         24:08:40:d9:8f:58:1d:31:c0:da:e6:ae:69:8a:ea:c2:5b:fa:
         a4:e4:5d:a3:a9:6a:a1:2a:25:b7:c5:31:01:e8:46:a3:98:a4:
         5f:96:b6:a6:7c:63:d0:70:b7:f0:fa:58:a4:48:59:73:93:bb:
         a6:f0:57:28:c7:c5:da:11:6c:51:29:0b:72:34:b3:32:10:23:
         c5:d1:3d:12:28:ff:f4:ae:35:8d:56:a7:40:98:f1:26:29:75:
         32:89:dc:f2:34:e4:ba:5c:e9:6e:9a:57:e7:70:f7:50:17:aa:
         58:20:b4:d7:5f:59:f6:9a:c1:69:90:6a:fb:6b:df:d2:92:6a:
         4c:94:a6:eb:26:7a:5f:29:e9:80:eb:5c:fe:1a:c3:6c:ce:d1:
         07:49:ee:bc:9f:ce:40:17:a4:d8:b2:92:2e:78:f2:b6:4f:4e:
         02:58:aa:59:8e:81:b6:23:f2:69:a6:0d:5e:17:d0:6b:1f:a7:
         86:35:10:95:b4:7a:51:72:0d:83:4a:14:42:c0:55:00:7d:f4:
         69:ed:77:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+PKuUu1lwXS9vH3CAD0mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzVjMWY3YjcxNDBjODcyZTdmM2ZmMzQ2MmI0ZWRjNjMx
ZDc2NzQwHhcNMjUwNzI0MjEwMDIwWhcNMjUwNzI1MjEwMDIwWjAzMTEwLwYDVQQD
EygxMTBiM2FkOGI4NGMxYzM5ZTA0YmNmMWUwMDJjZjlhNDQ2ODcwZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+zUEqUbZie+jEkR3BMNPCwJJFWp
D5vmZi+/b8y02XH0LYPKq8kmFYfwj2onkistz6FxmQvyEy/PK/9V9LfAH5R5RSlq
pBxNAu8XAbZ3RrwXFuiQEDWGUdcw6HDqyztebKbeWv33Tx90wScQUOSW8ygjEmZK
/MLO04k6KICHrqsu3jwLvnBzTxfNIhUUsug0RUOfYEZRPc5g19VDuC0shficB0FQ
hTiyRiSImgpbYFDuINapUQASVTSJGp+k+cVTQu2uhj9bnEuBVRMk10/lphkFunrf
DazMYH+cVAYmBkRskqDeFqplWpixX+D9rEsLkK41WjdXLYzX9JGAicNUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBELOti4TBw54EvPHgAs+aRGhw2eMB8GA1UdIwQY
MBaAFGE1wfe3FAyHLn8/80YrTtxjHXZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2Mt
ZTM3ODFkOGZlNzRjLzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80MzNlZGYtYWFmOC00NjY5LTg3N2MtZTM3ODFkOGZlNzRj
LzEvWVRYQjk3Y1VESWN1ZnpfelJpdE8zR01kZG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHicmW/O
9dWngnY8Cim8aAwd7+c5Cv2F7xY6I2WkHZp7xns50q2FPTgJZ1upA+0gABiRZA44
JAhA2Y9YHTHA2uauaYrqwlv6pORdo6lqoSolt8UxAehGo5ikX5a2pnxj0HC38PpY
pEhZc5O7pvBXKMfF2hFsUSkLcjSzMhAjxdE9Eij/9K41jVanQJjxJil1Monc8jTk
ulzpbppX53D3UBeqWCC0119Z9prBaZBq+2vf0pJqTJSm6yZ6XynpgOtc/hrDbM7R
B0nuvJ/OQBek2LKSLnjytk9OAliqWY6BtiPyaaYNXhfQax+nhjUQlbR6UXINg0oU
QsBVAH30ae137w==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:11:57 2025 by rpki-client