Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          JNi0l/fpr6VQmZa5br70Co8IoQp/SNnZF4ajbjorSuY=
Subject key identifier:   F8:E3:F4:75:76:81:59:1F:EE:CA:34:14:0B:84:61:4A:30:8F:E2:39
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       01984776C34C51F4F320496A496469D3E922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          0C92
Signing time:             Sat 26 Jul 2025 16:00:22 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:22 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:22 +0000
Files and hashes:         1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: xk1JvRj1/09IPjBUIMxOkxh6AJqhjgesn/BnV4AlDdk=)
                          3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
                          4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:c3:4c:51:f4:f3:20:49:6a:49:64:69:d3:e9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Jul 26 16:00:22 2025 GMT
            Not After : Jul 27 16:00:22 2025 GMT
        Subject: CN=f8e3f4757681591feeca34140b84614a308fe239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:8b:e6:af:ef:c8:b5:20:ee:f5:c3:ed:82:
                    98:86:e5:c3:67:6a:d5:9a:3b:26:da:47:1f:6f:81:
                    3d:e8:c6:37:5b:fa:73:98:70:c5:88:7d:e4:43:b6:
                    92:cd:16:91:56:6a:bc:c6:6e:a4:7a:2b:53:2d:5c:
                    62:68:62:cb:fc:e9:21:d5:fe:69:e3:37:c8:8a:7a:
                    36:8d:8c:ce:67:fd:bd:c0:42:3b:da:76:83:81:9c:
                    d0:8f:21:71:7f:13:d1:9a:4a:5c:bf:b3:7f:ab:c6:
                    51:ce:08:c1:9f:cd:57:67:c4:52:90:99:9c:14:fa:
                    56:ab:a8:0b:f9:e9:9d:52:eb:ad:ef:44:24:63:73:
                    fd:2d:4a:79:9d:8e:fb:a4:b9:2d:95:6d:b4:12:ba:
                    64:88:5c:9f:fb:43:8b:1b:0d:18:6b:88:29:39:be:
                    0c:fc:fe:89:64:b4:a2:10:2a:1f:83:99:81:ca:96:
                    87:07:bc:56:70:ac:0b:20:37:c4:c5:0e:91:72:bf:
                    49:46:bc:d5:cf:7f:a4:81:59:47:1f:80:06:1a:03:
                    c9:86:6f:38:31:1d:95:09:c9:be:2e:f2:74:47:10:
                    0c:63:95:5a:15:1d:7e:e0:a0:39:0c:f9:a8:84:da:
                    23:91:fd:9f:46:42:00:de:82:f1:46:26:9e:da:72:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:F4:75:76:81:59:1F:EE:CA:34:14:0B:84:61:4A:30:8F:E2:39
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:75:2a:a2:38:7b:d6:c8:29:6d:31:8f:3d:d7:fc:3d:fd:
         85:e1:62:86:5c:0a:c6:fd:df:5e:c8:8e:b7:22:67:53:5c:ef:
         fc:0a:53:8f:17:24:ac:6a:2e:a4:89:00:ae:19:9c:26:1d:c0:
         c6:45:76:8f:61:bd:78:4d:e1:c5:e4:d4:be:b3:d0:3f:60:20:
         b9:59:0d:0c:a4:26:8b:ca:08:a1:4a:85:10:87:d9:eb:bf:72:
         ab:d8:3c:78:25:28:c2:95:3d:da:81:95:48:1b:92:3f:ec:72:
         6c:45:30:0c:58:51:a5:32:8f:49:c6:75:11:7a:ea:aa:af:c3:
         9f:49:08:06:cd:d3:74:15:95:ec:69:74:0b:76:45:ce:97:9d:
         c8:f7:bb:15:f8:26:bc:c6:51:13:8d:02:17:9d:a3:04:65:2a:
         3d:b6:2c:e0:5c:5c:da:31:5a:be:42:39:65:91:ed:94:6d:84:
         1b:05:d1:4b:8c:cc:33:4f:0a:4b:fc:7f:3c:d0:f0:53:87:0e:
         9d:61:07:3f:83:25:bd:6e:6b:d5:64:25:4d:01:88:60:2a:49:
         7b:74:82:7b:ff:20:8e:e3:06:47:c0:a6:ab:08:ef:d9:67:de:
         7e:e1:9a:93:d4:34:7b:af:6a:84:3a:ad:20:aa:20:e2:b3:59:
         4a:82:d9:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdsNMUfTzIElqSWRp0+kiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjUwNzI2MTYwMDIyWhcNMjUwNzI3MTYwMDIyWjAzMTEwLwYDVQQD
EyhmOGUzZjQ3NTc2ODE1OTFmZWVjYTM0MTQwYjg0NjE0YTMwOGZlMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPGL5q/vyLUg7vXD7YKYhuXDZ2rV
mjsm2kcfb4E96MY3W/pzmHDFiH3kQ7aSzRaRVmq8xm6keitTLVxiaGLL/Okh1f5p
4zfIino2jYzOZ/29wEI72naDgZzQjyFxfxPRmkpcv7N/q8ZRzgjBn81XZ8RSkJmc
FPpWq6gL+emdUuut70QkY3P9LUp5nY77pLktlW20ErpkiFyf+0OLGw0Ya4gpOb4M
/P6JZLSiECofg5mBypaHB7xWcKwLIDfExQ6Rcr9JRrzVz3+kgVlHH4AGGgPJhm84
MR2VCcm+LvJ0RxAMY5VaFR1+4KA5DPmohNojkf2fRkIA3oLxRiae2nLtlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjj9HV2gVkf7so0FAuEYUowj+I5MB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq11KqI4
e9bIKW0xjz3X/D39heFihlwKxv3fXsiOtyJnU1zv/ApTjxckrGoupIkArhmcJh3A
xkV2j2G9eE3hxeTUvrPQP2AguVkNDKQmi8oIoUqFEIfZ679yq9g8eCUowpU92oGV
SBuSP+xybEUwDFhRpTKPScZ1EXrqqq/Dn0kIBs3TdBWV7Gl0C3ZFzpedyPe7Ffgm
vMZRE40CF52jBGUqPbYs4Fxc2jFavkI5ZZHtlG2EGwXRS4zMM08KS/x/PNDwU4cO
nWEHP4MlvW5r1WQlTQGIYCpJe3SCe/8gjuMGR8Cmqwjv2WfefuGak9Q0e69qhDqt
IKog4rNZSoLZag==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:22 2025 by rpki-client