Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
File:                     pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft (raw, json)
Hash identifier:          oHG38AGcfnQxIY+FQf1YDk9+Se9q7xdgGDJCAexWDzQ=
Subject key identifier:   29:78:CB:A7:D2:F2:CC:7A:5F:5F:04:21:61:8C:79:6E:6D:34:A9:D7
Authority key identifier: A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA
Certificate issuer:       /CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
Certificate serial:       01984588E7DD9B148834E3A06EFC5B115D5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 07:00:56 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:56 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:56 +0000
Files and hashes:         1: BfRloUJHji-lEUaufwMc19LxiqE.roa (hash: 94Vq30eYX4ShhMgHZx9s+4a5DKBY3zN9CTPT6BVaH44=)
                          2: pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl (hash: DYC3/vL9MYBpo9jJPngnLCOjRknmxpLFzTLE9SN0h98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:e7:dd:9b:14:88:34:e3:a0:6e:fc:5b:11:5d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a585e5e15aa34287cae4368cb58e7227fd87ecba
        Validity
            Not Before: Jul 26 07:00:56 2025 GMT
            Not After : Jul 27 07:00:56 2025 GMT
        Subject: CN=2978cba7d2f2cc7a5f5f0421618c796e6d34a9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:8a:a7:b6:e0:e3:62:7e:83:99:21:9a:e6:
                    64:4a:7b:57:ba:87:3e:c6:57:eb:f1:1e:ec:4a:3c:
                    e1:1a:6f:fe:b0:c9:de:1c:17:da:84:c9:23:ca:0c:
                    89:3d:dd:1a:47:6a:da:48:72:76:5c:b8:ae:09:9f:
                    bc:43:a7:32:64:82:30:7e:8a:28:b4:0e:83:c6:67:
                    17:15:09:e0:bb:ff:33:31:56:82:1a:26:2a:0e:1d:
                    47:3a:4c:bd:30:9f:f2:9f:47:9b:61:2d:83:7c:ad:
                    01:d3:21:f5:48:f8:30:1d:7e:10:e6:54:7f:fa:bb:
                    eb:15:d4:38:53:c7:73:e3:9c:0d:17:c2:b5:5a:e4:
                    bc:1f:24:b5:6c:c3:68:fd:7a:43:bc:8b:21:91:bf:
                    29:81:29:c4:0c:00:44:96:4a:b7:ba:51:43:1f:89:
                    94:8d:29:5a:e4:69:33:e6:dd:bf:3a:9b:e5:9a:84:
                    14:8a:09:46:2c:ee:1c:97:07:f9:0b:e5:7d:4e:72:
                    e8:7e:03:2f:f7:74:65:cb:0f:d2:b5:36:2c:29:07:
                    3e:2b:2c:ca:83:5e:ef:03:bb:a6:cd:c9:4f:9c:84:
                    df:92:a8:53:36:c5:68:b1:2f:d3:d4:23:06:0d:40:
                    af:1a:60:c8:7a:7b:e9:15:68:49:37:5a:ae:6b:43:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:78:CB:A7:D2:F2:CC:7A:5F:5F:04:21:61:8C:79:6E:6D:34:A9:D7
            X509v3 Authority Key Identifier:
                keyid:A5:85:E5:E1:5A:A3:42:87:CA:E4:36:8C:B5:8E:72:27:FD:87:EC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/066509-7a91-45f9-9e18-a9e7b343bc66/1/pYXl4VqjQofK5DaMtY5yJ_2H7Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:64:60:a6:c5:7f:7a:ce:c0:b9:25:11:9c:54:18:d1:91:
         16:3a:80:6f:cf:b0:8d:4d:98:22:d6:04:e6:d6:fc:33:e9:8d:
         b5:2b:d2:8e:20:2e:75:1c:43:8b:b6:1b:b3:85:11:25:6b:f3:
         0d:b4:19:4d:0b:61:23:f1:91:39:4b:70:11:88:36:eb:af:18:
         64:d1:66:11:9c:5d:7b:e3:9e:d7:87:73:b7:02:0d:28:b9:f6:
         9b:13:e4:8b:38:bc:71:0b:70:90:2d:89:dc:53:e4:99:f6:35:
         ac:43:1f:ca:93:2a:c6:77:68:2f:f1:f6:a3:d9:74:a4:44:a6:
         8c:92:8a:50:41:79:7f:31:c1:4a:b5:2c:bb:67:0d:72:1a:49:
         a5:a8:5d:b2:af:c8:59:0e:7c:c3:04:c6:1a:88:11:6d:f8:28:
         fe:e0:7b:6d:89:df:f7:72:3c:49:91:89:11:ee:0e:0f:0a:1b:
         c8:72:a1:e4:62:29:2b:bd:0f:d7:80:6f:1e:df:4e:55:37:bc:
         2a:02:e1:ff:e3:df:0e:7a:c0:9c:49:3d:14:71:70:a4:d8:77:
         09:b0:f4:6a:49:6d:51:d4:2d:2e:dd:88:ee:ea:cf:16:2f:b7:
         f5:c5:5a:ff:35:3b:c1:66:d8:48:6b:ce:7d:89:83:2a:5f:68:
         a4:fc:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:22 2025 by rpki-client