Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          dOe1R9+0gfQliamaBk19SrXwKr0sJeO1psDFH82qYJU=
Subject key identifier:   04:60:D6:D9:D6:64:F7:86:C5:F6:95:B5:DE:46:24:46:90:DE:B4:66
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       019923D65E95566AF7ACEF07E14EE2A7F3CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          01E2
Signing time:             Sun 07 Sep 2025 11:01:15 +0000
Manifest this update:     Sun 07 Sep 2025 11:01:15 +0000
Manifest next update:     Mon 08 Sep 2025 11:01:15 +0000
Files and hashes:         1: dlzqaHBNCax7AH7cKOuLGUROmhc.roa (hash: V0WC0WTCXqpzuDi1+bDioL4WjgyLz03d8dARSLHOma8=)
                          2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: q8ugVo7435KvFd1ebZ82MHFA6mBHzWrHNDfvuHFBADE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d6:5e:95:56:6a:f7:ac:ef:07:e1:4e:e2:a7:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Sep  7 11:01:15 2025 GMT
            Not After : Sep  8 11:01:15 2025 GMT
        Subject: CN=0460d6d9d664f786c5f695b5de46244690deb466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:16:26:ab:10:1f:22:62:fc:3f:dd:c1:fb:
                    50:2e:ee:e6:54:c6:e8:9b:e8:3c:4e:19:c7:35:3a:
                    59:7f:e3:20:8a:51:c9:c5:67:af:55:cd:82:71:a4:
                    2e:b7:48:eb:0e:d6:90:23:10:a4:0f:21:04:ee:8e:
                    e5:7c:64:7b:a1:fa:4a:d0:ca:d6:54:dc:18:ff:e8:
                    7e:01:6a:44:65:2b:f0:19:78:69:95:d4:1b:1b:cc:
                    86:46:b9:55:93:69:14:6a:da:58:27:c6:d6:a6:38:
                    31:8e:e8:04:53:3a:b1:b1:f3:5e:4c:6d:d7:50:3b:
                    e4:5d:ea:1b:dc:f8:2e:b6:48:8d:5e:c7:1e:72:68:
                    24:da:d4:a8:fd:5c:ff:18:90:9c:7f:c9:cf:00:a5:
                    66:68:d5:b1:d9:f2:be:fc:9d:ae:af:f4:43:7d:fa:
                    1c:5e:ca:46:63:d3:2d:e8:1f:6b:2e:1f:03:05:ff:
                    23:ce:00:93:00:1d:57:f5:be:0d:69:1e:05:6e:05:
                    56:22:41:d1:5c:48:ab:63:13:cb:a4:fe:4b:ea:50:
                    75:20:c3:bc:e4:11:75:9f:27:d5:17:1f:d5:47:f0:
                    60:65:b6:33:9d:08:04:54:31:e6:90:13:23:46:84:
                    e1:5e:e0:7e:b1:9e:45:58:fd:f3:a4:24:d8:bb:da:
                    28:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:D6:D9:D6:64:F7:86:C5:F6:95:B5:DE:46:24:46:90:DE:B4:66
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9e:25:8d:02:df:df:31:3e:97:60:ca:de:f9:2e:40:6f:d2:
         61:bf:2b:24:bd:b5:e2:16:67:20:2f:e3:cd:70:02:22:93:0e:
         d3:44:7a:28:c4:f3:3d:45:34:0f:aa:d0:bc:ab:e7:59:31:39:
         88:a6:d5:bd:b4:39:88:6a:db:ee:50:81:62:65:fb:4c:63:2b:
         b8:fc:a5:5b:7a:4a:ba:52:ae:94:8b:f8:78:9e:fc:dc:9c:3e:
         b2:14:51:1f:4e:6f:e8:38:1f:3b:c9:cd:63:33:16:ef:73:72:
         f3:8e:66:1f:03:6a:16:e2:97:8e:1d:c5:6b:2d:d7:bf:94:15:
         7b:df:22:83:f8:c8:fb:33:93:84:88:b9:6a:85:0c:6c:d4:14:
         0a:c9:b2:6e:1b:51:31:14:61:db:51:8b:7b:bf:da:86:e4:29:
         29:d3:7d:a1:4c:5f:66:e3:9c:42:82:f1:6a:a6:a5:b9:bb:34:
         0f:86:ab:7a:9b:6b:c4:6e:36:81:74:c2:c4:c3:91:77:a7:9f:
         94:23:5d:45:0e:07:de:d5:e8:bb:84:f5:dd:51:a4:19:6b:0e:
         cf:f0:6c:f1:f2:41:1d:cc:46:24:b5:06:0a:1e:3b:ec:b4:8c:
         88:9a:bd:d0:49:0d:ff:1b:11:89:22:8d:40:a5:e8:db:17:38:
         d3:cd:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:44 2025 by rpki-client