Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
File:                     ryrOvHYcrzdlbb1xU8AEmftzd3c.mft (raw, json)
Hash identifier:          d7bPzIIAE7cosrxnAtw5O2U3ViHdYCPcrv2avjQbetc=
Subject key identifier:   FD:E6:FB:E7:02:04:CA:EC:83:01:42:C2:96:D9:B7:0B:41:18:54:74
Authority key identifier: AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77
Certificate issuer:       /CN=af2acebc761caf37656dbd7153c00499fb737777
Certificate serial:       01992C34CA7587B4333B3DC795ABBAC95B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
Manifest number:          06CC
Signing time:             Tue 09 Sep 2025 02:01:21 +0000
Manifest this update:     Tue 09 Sep 2025 02:01:21 +0000
Manifest next update:     Wed 10 Sep 2025 02:01:21 +0000
Files and hashes:         1: ryrOvHYcrzdlbb1xU8AEmftzd3c.crl (hash: J6aN/8hWrqR12jlBzdzIqY2OTPztun8uR94vTZMexzA=)
                          2: zMLzsvyvzttf1W0nTGnk2Xapur8.roa (hash: RrEXPJicy0wkgDG3hlm5HrYEO3YA5hlKCSWiWB4jQfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 02:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:34:ca:75:87:b4:33:3b:3d:c7:95:ab:ba:c9:5b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2acebc761caf37656dbd7153c00499fb737777
        Validity
            Not Before: Sep  9 02:01:21 2025 GMT
            Not After : Sep 10 02:01:21 2025 GMT
        Subject: CN=fde6fbe70204caec830142c296d9b70b41185474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:fa:8d:bf:e0:18:26:a1:17:28:43:fb:33:
                    59:8a:38:0a:1b:2b:38:84:d6:ad:f9:a4:99:ba:21:
                    fb:f4:b5:45:84:c4:f9:85:db:a8:f4:f9:0e:7c:50:
                    57:66:82:99:63:94:00:fa:f6:7f:2d:6c:5d:35:d5:
                    09:56:28:83:e6:f1:40:03:eb:24:58:96:2b:b8:56:
                    9a:c7:7f:38:18:f4:48:a9:58:b6:43:cf:01:96:41:
                    f3:c2:88:30:29:9f:d0:e5:1a:12:4c:5d:15:9f:e7:
                    53:2d:bb:0a:26:bc:7d:5f:76:25:21:c3:74:18:d6:
                    c4:e2:f5:a6:93:dc:26:53:b4:82:ef:d7:87:f8:68:
                    fb:49:2d:35:08:dd:7d:37:6d:8e:cf:17:32:6b:3a:
                    02:a7:31:19:10:39:45:97:2e:10:89:f7:08:c3:d6:
                    22:44:08:d4:6c:3e:92:f2:24:4d:85:3c:23:97:31:
                    ea:d3:c3:dc:3c:5f:9b:8a:bf:5b:34:fc:e6:cd:c4:
                    c1:19:98:40:ac:52:8c:fd:44:3d:52:7d:77:7a:75:
                    09:c1:20:f3:e5:a5:74:d8:04:3c:c9:00:e1:1f:35:
                    96:50:27:75:e2:e3:1e:49:72:85:91:44:cb:33:f4:
                    ef:d8:a8:4a:9a:6d:3e:c5:3e:79:a0:46:7b:4c:d1:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E6:FB:E7:02:04:CA:EC:83:01:42:C2:96:D9:B7:0B:41:18:54:74
            X509v3 Authority Key Identifier:
                keyid:AF:2A:CE:BC:76:1C:AF:37:65:6D:BD:71:53:C0:04:99:FB:73:77:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryrOvHYcrzdlbb1xU8AEmftzd3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/93804e-b1f2-4034-9b26-3cef8a8d6ea1/1/ryrOvHYcrzdlbb1xU8AEmftzd3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:63:21:64:1e:8d:b2:5f:c8:89:9c:2c:cd:48:fd:ff:cf:
         2e:74:72:1d:b4:2c:1d:ee:8b:de:64:d6:0d:e8:15:04:19:da:
         86:a7:0a:82:07:90:05:cf:e3:65:e9:ea:03:4e:24:85:42:7e:
         7e:21:5d:ef:d4:fd:21:7a:86:64:fb:03:20:49:7d:21:3e:75:
         54:ca:06:6b:6c:5a:de:62:5e:f6:70:99:77:d0:f4:07:b4:0a:
         a6:12:9b:7a:2f:ef:df:1d:dc:4f:85:f0:cd:07:0b:0f:49:7e:
         c9:24:43:8f:88:0b:ab:20:6a:57:74:8b:13:6e:78:74:40:fc:
         f6:ef:a3:c2:bc:45:28:68:29:71:44:88:25:37:66:4d:d9:34:
         6d:9a:63:3a:40:13:66:82:97:b4:24:12:d7:dd:18:7c:25:70:
         07:e5:ca:22:e4:5b:6f:76:18:93:11:ac:9d:83:17:78:4a:f1:
         29:ee:ae:6e:9d:d2:9d:94:1c:6f:cd:a9:49:38:48:67:79:18:
         9b:e7:00:cf:ff:90:f3:92:d3:6b:d6:6f:5d:7c:79:cc:8b:0c:
         c8:6b:71:a5:cb:cd:dd:23:44:fe:c8:5a:4a:0c:30:94:13:ec:
         6d:37:62:1e:5c:9a:ab:27:3a:ad:85:a0:b0:24:32:1a:3d:c5:
         ed:13:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:21:20 2025 by rpki-client