Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          1vsyNrR3O7OoTY/U+haihAAZTnOWboAiSfgdwKHcRto=
Subject key identifier:   4C:7E:1A:58:B8:95:B4:7F:68:90:C9:8B:56:93:27:9D:18:88:76:08
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       0198496604D07E413F8FC646AF8E6871BF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0A8C
Signing time:             Sun 27 Jul 2025 01:01:19 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:19 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:19 +0000
Files and hashes:         1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
                          2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: eaI3CQmik+ysT8FakPiKHVPxPJRr1XIzRxApYEQYuvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:04:d0:7e:41:3f:8f:c6:46:af:8e:68:71:bf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Jul 27 01:01:19 2025 GMT
            Not After : Jul 28 01:01:19 2025 GMT
        Subject: CN=4c7e1a58b895b47f6890c98b5693279d18887608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:e1:51:48:71:06:22:01:40:82:22:c8:17:
                    0c:c4:13:bc:c1:2e:6c:25:b2:c2:5d:97:c4:08:85:
                    0b:f1:a5:47:11:63:4c:69:6c:20:d2:41:ff:3d:40:
                    2a:62:b2:7c:c2:45:05:be:c3:84:71:a9:e7:63:c1:
                    91:8f:64:66:e2:1c:77:43:86:59:5c:18:6a:ab:f1:
                    1d:52:75:e4:f2:9b:d8:14:6a:a1:a6:06:76:5c:d4:
                    c8:eb:0e:07:83:34:d6:39:1b:8b:ad:59:5c:a0:0f:
                    8e:db:44:01:0f:a8:96:0a:0d:ed:c7:5e:dc:cb:1c:
                    d5:04:7a:1f:e3:73:4a:b5:63:7c:31:f5:5e:e4:5d:
                    64:11:1d:4f:fe:8f:df:13:80:fa:d7:0b:89:bc:db:
                    cf:00:08:f7:27:ca:ef:b0:f1:20:94:47:2a:17:eb:
                    ea:98:1e:3c:5a:10:97:46:87:bd:3d:15:ee:ea:4c:
                    ec:90:43:76:6a:47:5b:89:98:89:ee:15:b9:1d:62:
                    08:84:dc:89:5a:4d:48:1b:81:22:ca:44:e4:6c:45:
                    5f:7c:40:fe:0b:a8:db:90:3f:77:2c:04:7d:9a:23:
                    52:09:e8:fa:a5:1e:ae:26:d8:6e:0c:34:11:2d:7b:
                    51:1a:ff:bd:ab:0a:1f:c3:7e:20:3e:88:36:8b:aa:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7E:1A:58:B8:95:B4:7F:68:90:C9:8B:56:93:27:9D:18:88:76:08
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:cc:9b:e4:05:17:4e:20:fd:da:d5:23:1f:34:68:c8:ef:
         c7:aa:32:a9:ae:12:94:68:7b:ef:3c:7f:20:ef:7f:18:86:01:
         d9:f1:52:18:f2:c6:03:4e:ad:c8:eb:48:49:8e:a9:a5:64:2b:
         63:76:8b:bd:ff:53:72:6c:84:cb:1a:b9:99:df:71:91:f4:ce:
         49:04:64:3f:97:96:ed:f9:7f:75:b4:fb:9b:5a:d0:ba:93:ff:
         f0:35:45:16:dd:dc:cb:b8:9a:12:c0:4e:9c:ac:e4:6a:be:97:
         02:da:c1:b8:58:21:25:39:91:f0:fd:c5:61:9b:22:f2:27:3b:
         dd:52:7d:26:e9:e7:f7:bb:aa:50:34:96:ed:71:d4:34:aa:c2:
         0e:b8:8f:30:58:d4:c3:52:38:a8:db:e4:fd:c3:80:2b:77:bd:
         0f:52:a3:bf:92:eb:5a:30:70:88:62:34:35:27:43:9a:cf:a1:
         b5:11:5b:1d:e0:d6:d1:46:5f:2f:f2:8f:e9:e7:c0:ff:79:a1:
         16:14:5b:c2:53:24:07:21:f9:bf:e9:fe:5e:6b:7f:ba:2c:be:
         10:83:96:92:ad:e7:21:1d:df:2e:3d:d3:04:31:7c:b2:82:37:
         2c:68:74:22:64:6a:a7:17:bf:a0:52:b8:04:36:57:60:e5:32:
         3f:0f:fd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:30 2025 by rpki-client