Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
File:                     yeG79grg631AB2JxhcXxRyP_864.mft (raw, json)
Hash identifier:          Uny9pv4+DWloly4NHAQ/oY3vcpZnuF90lIwByNxPfkA=
Subject key identifier:   55:0E:FE:32:FB:CB:7C:AB:F0:5E:41:20:83:4E:29:8C:BA:97:C3:32
Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE
Certificate issuer:       /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
Certificate serial:       019922C391F0EFF55BB89E1EC96AA41916A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
Manifest number:          01B5
Signing time:             Sun 07 Sep 2025 06:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:06 +0000
Files and hashes:         1: qP-gsAFmgVOc4H-oZTo26Ptp5vw.roa (hash: QT6Tbak41BDvyGiXFOwS3KI7ZlriOjq7qFbGvl+22Ak=)
                          2: yeG79grg631AB2JxhcXxRyP_864.crl (hash: 2x0q/VQMCP33/SdpOSNLoHkuG3rMG+L/zsCjQ4/IeFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:91:f0:ef:f5:5b:b8:9e:1e:c9:6a:a4:19:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae
        Validity
            Not Before: Sep  7 06:01:06 2025 GMT
            Not After : Sep  8 06:01:06 2025 GMT
        Subject: CN=550efe32fbcb7cabf05e4120834e298cba97c332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:b0:23:89:a9:0c:40:9a:47:8e:72:13:51:
                    30:9a:02:09:e0:a5:0a:4c:55:ee:4a:7e:82:17:5c:
                    7a:0c:e5:6d:f2:8a:13:6e:ee:06:4a:45:8c:37:0b:
                    96:11:3d:8b:96:f3:be:c4:25:28:e8:bb:12:d7:4b:
                    d3:ba:ab:24:d5:7b:4f:14:a4:e1:44:2d:c4:3e:08:
                    6a:b2:38:ce:89:84:4b:94:0c:6f:08:f4:02:18:c9:
                    3a:57:01:06:5a:95:d3:b7:d9:a2:8b:11:ac:58:72:
                    bb:fa:15:df:59:86:6b:9b:0f:ee:7f:ed:57:75:e7:
                    10:82:c3:aa:b7:f8:18:80:9a:2a:b4:08:39:60:52:
                    35:49:c7:bd:5a:0a:a2:14:8d:68:16:ab:60:63:05:
                    13:ad:15:4a:58:83:95:01:96:70:d6:19:36:f1:44:
                    9a:b3:af:bd:ac:fa:36:61:e3:29:94:b1:e9:6b:3a:
                    a2:f4:ce:47:80:cf:d0:45:0e:ca:e4:6e:81:0e:4f:
                    2b:2d:b7:a5:77:2f:df:28:6c:35:4f:f2:35:dc:bc:
                    17:d0:7f:dc:53:24:84:01:d5:8a:65:94:6e:3a:82:
                    24:67:54:83:b7:39:e2:b0:f8:23:94:19:e5:da:41:
                    1f:cc:d6:04:19:3b:d4:e7:65:f3:01:b9:c7:43:91:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0E:FE:32:FB:CB:7C:AB:F0:5E:41:20:83:4E:29:8C:BA:97:C3:32
            X509v3 Authority Key Identifier:
                keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:c7:14:f4:a3:24:4f:bd:e9:f0:ed:36:19:f9:25:30:ba:
         e1:ce:e0:d5:a5:30:21:ce:27:a7:0a:04:08:62:64:ae:05:de:
         f6:d9:ed:24:9a:1c:be:c0:28:8e:9a:7d:c8:53:99:87:35:60:
         af:7d:ae:04:59:4e:67:63:40:d9:72:43:2e:1c:e7:60:ed:11:
         85:8b:f6:5b:a6:4c:cc:02:d4:69:ed:c1:15:b7:61:46:40:5b:
         9b:fa:aa:dc:e3:a1:8b:15:ac:79:53:15:d1:d1:53:c7:8b:23:
         77:f2:c0:aa:4c:94:1f:ac:82:3b:45:92:9f:52:a1:d0:b7:9b:
         1b:11:c7:53:e0:38:1c:bd:a8:22:fd:86:d4:1f:11:2a:fa:d0:
         60:74:c4:cf:cb:3d:d6:ce:41:7e:46:8c:58:e4:40:bd:2c:bd:
         cc:ed:1c:03:da:73:11:4e:d3:83:13:86:c8:6f:b1:2c:21:cb:
         2f:77:e4:3d:f3:58:f7:60:f0:1d:8d:8b:b8:da:58:bc:bb:59:
         18:1e:8a:a2:11:60:47:b3:a4:49:ec:2d:48:49:53:f7:83:6b:
         60:be:bc:40:e7:2b:a7:3d:38:6c:7e:33:e2:de:ec:f6:e1:4c:
         d9:74:11:ab:c8:4b:99:28:22:3f:17:62:4a:00:58:c6:49:b3:
         55:85:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:38 2025 by rpki-client