Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
File:                     yu5BB041mQr-T1CoTkLrCVhKLxk.mft (raw, json)
Hash identifier:          f83zXU5L4lFUlePfQ83LT4f5mQhSGuuE953/ar/wDvg=
Subject key identifier:   55:75:1B:68:8C:D4:A8:26:A4:AB:8D:F8:84:20:BC:C2:96:D3:4E:55
Authority key identifier: CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19
Certificate issuer:       /CN=caee41074e35990afe4f50a84e42eb09584a2f19
Certificate serial:       01984964E3259B83634E1DA437556C8586F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
Manifest number:          0CE7
Signing time:             Sun 27 Jul 2025 01:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:05 +0000
Files and hashes:         1: sgBY7n2csmLkZgf9ainTuHIvW2g.roa (hash: DJU1cJjUpjCYx1PJIE+EYgCKTFmb6SUb2ET+8j8meig=)
                          2: yu5BB041mQr-T1CoTkLrCVhKLxk.crl (hash: KesHwiowGFCkYADzSMIr7lv5nDCMUcrNdOWvJOCxj1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:64:e3:25:9b:83:63:4e:1d:a4:37:55:6c:85:86:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caee41074e35990afe4f50a84e42eb09584a2f19
        Validity
            Not Before: Jul 27 01:00:05 2025 GMT
            Not After : Jul 28 01:00:05 2025 GMT
        Subject: CN=55751b688cd4a826a4ab8df88420bcc296d34e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:f8:d5:3c:29:a5:3c:d8:32:fd:0d:a0:f4:
                    dc:0e:92:d8:d4:e2:e2:de:e8:a6:9e:6b:b8:2d:83:
                    26:ff:b2:eb:8b:a0:b0:ec:47:6c:5d:f4:30:1c:6b:
                    6c:cd:f2:bc:5d:d7:da:0f:83:2d:f6:95:32:58:b1:
                    8b:99:b0:1d:9b:62:1d:ed:02:89:ed:4e:42:c0:4c:
                    0c:53:f7:61:5a:85:b9:5e:a1:17:b9:b0:48:8d:3c:
                    b6:8a:0d:0c:20:e1:f0:99:49:46:ae:cd:7f:fd:0b:
                    8c:7a:34:ca:70:9f:af:ca:85:93:6a:25:3d:5c:67:
                    7a:13:a8:dd:4a:c3:0e:2d:54:40:e7:10:2c:01:c3:
                    41:e4:b3:50:67:19:7d:82:43:18:63:cc:b8:f3:ff:
                    17:1d:75:a7:7f:bb:5d:e8:31:73:1a:7a:83:66:c5:
                    80:a1:ff:6c:e2:db:fb:a6:af:37:a5:04:a8:79:e7:
                    e6:a8:63:69:df:b8:1a:7c:cf:ae:ba:d2:04:93:51:
                    fc:f4:97:d7:35:67:14:ee:46:60:9c:34:dc:66:49:
                    fc:6e:cb:65:a0:a8:5f:a6:d8:75:22:21:59:07:e3:
                    15:b6:fc:c3:f0:16:9d:5e:3c:4a:bb:fb:76:ff:8c:
                    30:f1:7f:07:fd:d0:85:19:fb:1b:85:eb:9e:72:85:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:1B:68:8C:D4:A8:26:A4:AB:8D:F8:84:20:BC:C2:96:D3:4E:55
            X509v3 Authority Key Identifier:
                keyid:CA:EE:41:07:4E:35:99:0A:FE:4F:50:A8:4E:42:EB:09:58:4A:2F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu5BB041mQr-T1CoTkLrCVhKLxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5d80b0-fc4a-4cde-9c53-b8518909820f/1/yu5BB041mQr-T1CoTkLrCVhKLxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:33:1f:76:0c:87:57:70:68:2c:99:79:2f:b8:8a:e2:95:d3:
         a0:be:f4:b8:e7:58:4c:1c:10:43:cf:73:6c:5b:36:45:f2:09:
         f1:9f:f7:9e:0a:69:af:92:fc:8c:34:f8:0a:75:ac:89:c4:d6:
         23:53:b7:88:70:df:b5:35:4a:cf:15:7f:fc:63:03:75:59:48:
         b2:9c:fb:e1:2d:44:1a:fb:aa:7b:14:cd:69:a4:12:80:44:2e:
         20:08:48:d5:8d:4a:45:8b:c6:c2:dc:e1:e4:fa:1f:54:90:3d:
         31:7d:53:00:72:59:0b:f6:54:d6:75:75:5e:fa:51:06:c5:ea:
         b4:a8:29:9e:33:16:4c:9e:0d:e0:e4:09:76:39:a9:7f:0a:13:
         f1:59:c2:cf:93:86:9d:94:c2:b5:b7:cc:d2:5a:45:15:b8:89:
         52:a8:e4:7a:02:34:29:1e:55:9e:7b:ca:87:5e:a8:7a:b6:88:
         23:fb:29:d3:c9:d6:76:56:c4:05:c4:a8:1d:08:57:a8:89:3c:
         f8:1b:df:41:3d:91:ff:62:51:c5:b0:06:fa:5e:6d:f5:e3:7a:
         79:00:88:ae:84:b4:37:fe:54:53:0e:04:72:2a:f6:3b:26:24:
         3d:9c:c8:3c:98:b5:f1:86:62:20:b2:ca:8c:15:47:2a:c8:10:
         71:c0:d1:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZOMlm4NjTh2kN1VshYb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZWU0MTA3NGUzNTk5MGFmZTRmNTBhODRlNDJlYjA5NTg0
YTJmMTkwHhcNMjUwNzI3MDEwMDA1WhcNMjUwNzI4MDEwMDA1WjAzMTEwLwYDVQQD
Eyg1NTc1MWI2ODhjZDRhODI2YTRhYjhkZjg4NDIwYmNjMjk2ZDM0ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszL41TwppTzYMv0NoPTcDpLY1OLi
3uimnmu4LYMm/7Lri6Cw7EdsXfQwHGtszfK8XdfaD4Mt9pUyWLGLmbAdm2Id7QKJ
7U5CwEwMU/dhWoW5XqEXubBIjTy2ig0MIOHwmUlGrs1//QuMejTKcJ+vyoWTaiU9
XGd6E6jdSsMOLVRA5xAsAcNB5LNQZxl9gkMYY8y48/8XHXWnf7td6DFzGnqDZsWA
of9s4tv7pq83pQSoeefmqGNp37gafM+uutIEk1H89JfXNWcU7kZgnDTcZkn8bstl
oKhfpth1IiFZB+MVtvzD8BadXjxKu/t2/4ww8X8H/dCFGfsbheuecoVV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFV1G2iM1KgmpKuN+IQgvMKW005VMB8GA1UdIwQY
MBaAFMruQQdONZkK/k9QqE5C6wlYSi8ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMt
Yjg1MTg5MDk4MjBmLzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81ZDgwYjAtZmM0YS00Y2RlLTljNTMtYjg1MTg5MDk4MjBm
LzEveXU1QkIwNDFtUXItVDFDb1RrTHJDVmhLTHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjMfdgyH
V3BoLJl5L7iK4pXToL70uOdYTBwQQ89zbFs2RfIJ8Z/3ngppr5L8jDT4CnWsicTW
I1O3iHDftTVKzxV//GMDdVlIspz74S1EGvuqexTNaaQSgEQuIAhI1Y1KRYvGwtzh
5PofVJA9MX1TAHJZC/ZU1nV1XvpRBsXqtKgpnjMWTJ4N4OQJdjmpfwoT8VnCz5OG
nZTCtbfM0lpFFbiJUqjkegI0KR5VnnvKh16oeraII/sp08nWdlbEBcSoHQhXqIk8
+BvfQT2R/2JRxbAG+l5t9eN6eQCIroS0N/5UUw4Ecir2OyYkPZzIPJi18YZiILLK
jBVHKsgQccDRdA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:35 2025 by rpki-client