Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          kHqK3PE1wxlRmh95bDM30zXPKr1rxL3/nNHBPjCjas0=
Subject key identifier:   BA:3A:3A:2A:DD:1A:FB:1A:82:2F:AF:9B:87:09:58:F5:7C:F6:58:C6
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       01984A416A6AEC4384F52AEBB8D388870D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          01BF
Signing time:             Sun 27 Jul 2025 05:00:57 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:57 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:57 +0000
Files and hashes:         1: RgDK0GlNrO7C7ubV0WX7Z9uLa44.roa (hash: rsSKr9gwgh4LATGzKPPW1fvQ8qeoiCF1icD7tfZVV58=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: rx0HWFvCQ/I55O/TX2sObx7UrsBFXIP4ZQFOevMeAJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:6a:6a:ec:43:84:f5:2a:eb:b8:d3:88:87:0d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Jul 27 05:00:57 2025 GMT
            Not After : Jul 28 05:00:57 2025 GMT
        Subject: CN=ba3a3a2add1afb1a822faf9b870958f57cf658c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:65:5b:86:eb:3d:a9:1b:96:f8:90:c5:c6:
                    7b:f6:83:11:6e:f8:0f:a4:90:38:d0:39:a3:25:04:
                    db:36:c1:23:49:69:9e:2a:89:56:19:31:58:28:d5:
                    85:51:d1:b2:ec:e7:59:d7:a4:6f:c4:5c:ca:21:93:
                    a4:fa:56:ca:2f:a0:1b:70:81:4e:0f:bd:52:df:fa:
                    db:73:be:4b:32:56:2c:8d:88:64:9f:01:2f:48:a1:
                    b7:04:8a:8e:44:e7:e3:e5:ed:1b:5c:8f:e5:c3:f6:
                    bf:3c:b0:4c:63:0b:d5:73:9d:c3:af:18:d9:0e:bb:
                    f9:16:13:a4:cf:a2:b9:1f:8d:1b:bc:bc:d4:ed:61:
                    e9:bb:5d:8f:cb:dc:b4:e3:b0:6b:f1:cd:bb:e4:44:
                    53:f9:09:de:16:39:c5:18:3b:11:fe:fb:69:72:ac:
                    34:5b:bd:a8:d0:98:38:95:4b:29:cc:5d:ee:b2:bf:
                    76:6b:1a:22:24:22:05:47:5b:c9:2a:43:d8:02:8b:
                    29:56:5f:bf:b0:17:0d:f9:af:ea:74:1e:90:eb:d0:
                    fb:c1:bb:6e:9e:61:2e:f0:23:5a:75:b4:4b:62:56:
                    d6:3a:b1:da:f0:fe:47:41:bb:69:7c:d4:85:84:c5:
                    39:8f:40:a4:1a:ae:a6:d7:56:05:02:40:d4:12:6a:
                    2c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:3A:3A:2A:DD:1A:FB:1A:82:2F:AF:9B:87:09:58:F5:7C:F6:58:C6
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:9f:c1:17:0c:91:ef:96:bd:35:3b:b1:74:36:74:1e:9c:
         32:51:e9:fd:01:b1:da:4f:98:16:96:c5:24:15:a7:8b:95:8f:
         4c:c6:6f:08:5f:20:46:1a:b9:77:42:b7:28:14:e3:7a:f6:f5:
         b7:31:45:89:54:36:dd:7e:ba:1a:93:90:f8:a9:8a:77:ba:c5:
         ad:93:61:37:d3:1c:a4:7a:ed:d8:06:58:60:c6:c8:7e:d9:56:
         d3:02:d1:4d:79:14:52:86:8c:95:e1:0a:d0:7a:8c:1e:56:a3:
         34:31:27:39:b9:87:84:46:86:04:7d:73:9c:b4:24:33:0c:76:
         91:33:6f:f8:7f:4c:5c:f2:3a:c8:84:b0:72:86:0d:f2:df:bd:
         d0:4c:0b:25:bb:07:72:89:e7:8a:33:bf:6b:1f:9a:92:7b:23:
         ca:93:aa:8c:d4:e4:fe:a6:6b:11:4f:38:72:3d:87:d7:07:8a:
         09:9f:e7:ab:13:d1:d1:96:82:0b:31:36:d1:5c:88:1f:b2:8c:
         86:f1:ab:8a:9b:1c:39:04:28:d8:5a:f8:31:81:14:66:9a:ee:
         8d:97:a7:52:83:8a:04:64:2b:48:18:2d:c8:9d:99:f7:82:8e:
         66:bb:e0:1b:18:b1:1b:7e:44:5a:53:f9:3a:6c:d8:10:a1:8a:
         8a:83:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:17 2025 by rpki-client