Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          48IwfN8ayzGllj8Qf5TAuGCP46vHbpZiKvDRMGrADGg=
Subject key identifier:   0B:36:DD:EA:C9:3A:DC:AE:EA:6A:5A:ED:0A:96:BC:DE:47:50:A9:40
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       0199247B5B4DDB2F8AF3964D44D9B52D74C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0C2C
Signing time:             Sun 07 Sep 2025 14:01:27 +0000
Manifest this update:     Sun 07 Sep 2025 14:01:27 +0000
Manifest next update:     Mon 08 Sep 2025 14:01:27 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: ZKEdm2ywDxzAbSuNKwaJlqm5uJFDVL8yZXiVeBITfGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:7b:5b:4d:db:2f:8a:f3:96:4d:44:d9:b5:2d:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Sep  7 14:01:27 2025 GMT
            Not After : Sep  8 14:01:27 2025 GMT
        Subject: CN=0b36ddeac93adcaeea6a5aed0a96bcde4750a940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:23:ff:15:61:9b:5e:86:03:98:42:a0:0c:
                    ea:90:c3:da:e4:90:69:d4:8a:9b:18:b4:7f:8a:5b:
                    59:d7:31:ce:70:04:8e:9c:ac:66:bb:a4:62:8b:4b:
                    23:a2:d3:8b:9f:58:d3:22:99:d3:ef:6b:3d:76:c9:
                    d7:4d:69:82:5a:1e:c0:ce:47:19:50:84:b3:73:9d:
                    cb:c3:b8:5b:d0:0a:a0:0e:ed:bb:12:e8:33:07:cd:
                    74:76:18:b3:c9:86:00:8d:21:64:1d:c8:cc:1f:7d:
                    74:cc:f8:3d:6d:69:9d:bc:c5:09:9f:eb:6d:00:08:
                    28:e0:0f:9d:df:1a:a7:48:1e:15:7d:bf:8a:fc:d0:
                    a7:16:69:58:94:96:a4:48:15:3b:66:f3:fa:d5:76:
                    a7:9f:ac:91:75:f7:92:97:51:19:cd:16:24:93:fb:
                    3a:9f:4d:cf:57:5a:74:fa:b7:6e:b5:e6:1c:96:cd:
                    88:7d:d6:75:ef:2a:e4:b8:93:d6:ea:cc:22:46:7a:
                    3d:ed:e0:24:5a:f5:f6:52:e6:96:92:fc:4f:c8:15:
                    67:9e:c9:6a:b2:1e:b8:9f:1a:46:d1:2a:2b:0d:6a:
                    dc:fe:25:e7:28:53:77:c3:0b:40:1a:0d:ce:3f:b4:
                    1b:f1:b5:59:8e:3f:3f:06:00:0a:24:dc:e2:87:1c:
                    25:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:DD:EA:C9:3A:DC:AE:EA:6A:5A:ED:0A:96:BC:DE:47:50:A9:40
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:42:17:b9:b4:30:6c:60:bc:88:79:c7:b7:42:13:f1:5e:17:
         29:23:c8:4b:92:08:db:55:8a:02:9a:96:d6:b6:71:0d:9e:24:
         93:85:40:be:7e:b5:09:6e:1f:09:48:da:c4:5d:a4:8d:38:d7:
         e7:da:81:f2:e3:60:54:b4:da:4b:19:96:a2:fa:cb:0b:b6:0b:
         98:10:d6:52:4b:5a:90:2b:7e:4c:ec:e0:2c:16:92:ce:de:b1:
         6f:fc:bf:58:af:69:1f:9c:b2:11:2a:6b:fa:1d:7b:c4:b9:3e:
         e1:2e:9c:4a:a1:b9:9f:35:f9:64:5c:03:97:3a:26:da:66:76:
         0a:6f:65:f2:c7:da:bf:f4:d6:2a:bc:25:04:48:7c:59:1a:30:
         20:9f:8e:18:3b:31:bf:44:9d:ad:ec:92:b1:35:06:06:35:f4:
         3a:48:4b:bb:91:57:c8:55:bb:17:72:22:e2:b0:ee:5f:22:9d:
         a8:43:8a:b2:84:72:ce:aa:5c:01:32:ab:50:67:d8:a6:1a:c4:
         79:e1:0e:50:fc:d4:1a:0a:05:6a:0a:c6:0a:d9:95:2a:ad:c4:
         da:dc:be:1a:6a:9f:30:c1:ab:77:f5:89:24:69:3e:10:1d:f7:
         0e:b1:12:a4:d7:95:c8:d9:23:fb:f9:37:f6:f1:12:bc:dd:ae:
         16:dc:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:04 2025 by rpki-client