Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
File:                     YxGmnIFyBEhUkx8QClm9CJy4iBo.mft (raw, json)
Hash identifier:          9JWh73DTI9otS4vcuuoVyQ8VcWkCCT1WBLqW3lFfrs8=
Subject key identifier:   93:30:AB:93:00:69:43:E1:2B:C8:CF:6B:8F:BC:94:A3:B7:82:FE:3B
Authority key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Certificate issuer:       /CN=6311a69c8172044854931f100a59bd089cb8881a
Certificate serial:       0198481BE24CCBCFB067434A51BC51E9870F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 19:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:43 +0000
Files and hashes:         1: Iu34C6WTJwsC1Fqt5jh4X7IhtoM.roa (hash: pYBTjTgLbQQp6tqJYSrST6Bcv/MloC/SDIFHbD5N2uA=)
                          2: YxGmnIFyBEhUkx8QClm9CJy4iBo.crl (hash: CQm4DZZLiU3RalIGZpfQXbzgJUkxD8wJh2/CNiSP8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:e2:4c:cb:cf:b0:67:43:4a:51:bc:51:e9:87:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6311a69c8172044854931f100a59bd089cb8881a
        Validity
            Not Before: Jul 26 19:00:43 2025 GMT
            Not After : Jul 27 19:00:43 2025 GMT
        Subject: CN=9330ab93006943e12bc8cf6b8fbc94a3b782fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:04:e7:ec:63:cd:5e:2b:85:3d:ca:fc:f1:
                    70:22:29:89:df:50:59:ee:c3:0e:e2:fa:86:65:02:
                    fd:c3:97:86:06:52:25:5a:80:18:be:f6:a3:7c:b7:
                    82:ac:68:f3:25:98:e0:8c:68:95:aa:65:88:95:d9:
                    1a:5c:83:85:c9:b2:13:57:a8:a9:41:98:f2:c4:99:
                    e5:a8:35:db:71:81:7d:1c:5e:22:ae:85:37:16:f0:
                    23:87:68:ac:f8:e9:81:f0:e9:7d:53:a2:fd:df:66:
                    29:b7:a6:f4:65:2a:29:74:03:f2:38:8f:2e:2e:f8:
                    77:82:08:4f:c7:8f:a8:95:40:30:e9:ff:4f:67:d3:
                    e2:e0:50:f9:10:00:c3:d2:34:e8:f3:4c:11:01:bb:
                    7e:a8:17:5f:51:43:06:3f:e5:3b:43:c6:d5:ad:de:
                    2c:c8:55:3a:29:d9:2a:ab:18:eb:3f:12:2a:23:65:
                    fa:da:e5:61:c2:c4:d4:ad:ef:24:d6:38:2a:b9:ef:
                    42:4a:92:c6:20:a5:3a:20:8e:40:ec:a4:86:b4:f2:
                    82:12:b1:d2:c6:4e:db:3d:d5:fc:58:61:db:99:85:
                    0f:05:70:dd:34:67:6a:9b:40:5a:90:e5:25:ca:43:
                    e8:8c:77:5c:31:2a:aa:0a:ff:f2:4f:3b:72:36:cf:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:AB:93:00:69:43:E1:2B:C8:CF:6B:8F:BC:94:A3:B7:82:FE:3B
            X509v3 Authority Key Identifier:
                keyid:63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:36:53:6d:ce:e4:2e:ab:5c:bf:c5:5a:4b:cc:da:e2:ac:
         9d:27:4d:0b:3a:da:23:8f:0f:92:ed:9c:ce:d3:01:fb:b5:68:
         bf:b8:3e:e7:e5:60:d6:ae:c4:43:7c:b8:af:c2:4f:ed:62:f1:
         c8:80:21:0d:bf:d8:bb:67:e4:d5:75:f9:c1:cd:8f:ef:60:bf:
         5c:9e:f0:35:8c:61:56:be:83:4f:ff:0b:36:24:e7:ce:40:bf:
         db:39:56:60:3d:69:67:b2:a8:b1:5e:49:07:65:46:73:3d:bd:
         e2:c3:a7:6e:07:59:ad:a4:c9:16:43:c4:97:9d:c5:3b:4e:72:
         c2:6f:85:ee:2a:fd:d0:cc:87:6d:54:e8:eb:06:d0:37:a2:fe:
         ce:7f:1c:f7:34:44:e1:15:04:29:8d:a2:35:99:1e:0a:e3:cb:
         63:03:25:8b:fe:0d:2d:23:6a:22:6b:67:86:f4:5b:d2:46:c1:
         f7:dc:34:f6:dc:57:85:37:27:c5:1f:77:fe:ad:97:05:39:6e:
         09:a1:51:28:44:62:cf:a5:8c:ac:94:09:fd:d7:4d:cc:1c:4f:
         bf:66:74:ab:62:46:95:3d:3d:a3:f5:3e:e0:a8:62:fc:a7:2b:
         8b:30:81:b9:c7:e2:e2:c4:68:c2:ae:50:70:97:a1:78:4f:4b:
         8d:11:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:54:01 2025 by rpki-client