Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File:                     yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier:          jJR7BQHxOT5F+dTFSak970Afa+J4DGxMWI3D4cMfBIY=
Subject key identifier:   C3:5D:8A:74:BA:55:31:78:1A:54:30:69:04:0C:75:F4:48:BE:79:B2
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer:       /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial:       01991763EF1FD521880B26614A21D3C88854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number:          166B
Signing time:             Fri 05 Sep 2025 01:00:49 +0000
Manifest this update:     Fri 05 Sep 2025 01:00:49 +0000
Manifest next update:     Sat 06 Sep 2025 01:00:49 +0000
Files and hashes:         1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
                          2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: rrEKpTmsT+b9xySgAzgOwylCZZjhwjQkQFLyN8/dAD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:63:ef:1f:d5:21:88:0b:26:61:4a:21:d3:c8:88:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
        Validity
            Not Before: Sep  5 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=c35d8a74ba5531781a543069040c75f448be79b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:4d:79:1c:ab:16:cc:dc:ba:59:86:56:3a:
                    fc:fe:ac:77:39:f7:94:b7:02:bd:1e:42:ca:9f:38:
                    ce:2d:36:76:85:9a:23:98:af:69:e8:ee:37:61:14:
                    13:c7:0d:e0:e2:88:dc:1b:2c:e5:07:e7:8c:ab:e0:
                    d0:5a:5a:d1:be:b0:14:c0:ff:88:1e:04:1e:e2:81:
                    22:a4:fa:e2:bf:ce:f7:6f:80:37:28:ce:ea:72:08:
                    84:aa:6f:ad:31:9a:f6:53:80:b8:ac:23:c2:1e:2b:
                    bf:39:fd:cb:bb:ca:d1:c4:b2:d8:ed:0c:01:41:0a:
                    94:04:c4:72:1f:fa:40:1f:30:86:3a:3c:b2:01:47:
                    a7:a9:2e:d1:6a:80:07:2b:17:64:78:62:9e:fe:61:
                    ce:9f:79:ad:e8:2e:b9:79:a1:28:14:c1:8b:7a:f9:
                    36:a1:56:f2:7b:f5:7b:94:a3:e1:6e:54:cb:b7:e5:
                    54:26:57:9e:6d:82:09:e8:e0:42:10:b1:79:41:e7:
                    82:e5:49:22:29:6f:17:28:b4:d6:1b:62:57:56:23:
                    ce:0a:c2:04:79:c4:28:c2:bc:90:23:2f:c8:bf:b0:
                    b0:5f:a4:df:d7:ad:8f:05:e5:2c:b3:33:1a:6d:22:
                    8d:c8:76:9d:ba:0d:1c:0a:bf:29:63:4c:cd:31:34:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5D:8A:74:BA:55:31:78:1A:54:30:69:04:0C:75:F4:48:BE:79:B2
            X509v3 Authority Key Identifier:
                keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:f8:e2:8b:06:4b:f4:1e:c9:0d:95:b5:83:c9:79:06:f8:
         55:24:c1:98:ea:64:78:22:1d:30:e0:cd:2b:47:3b:c1:f3:7d:
         97:44:79:2f:ef:94:a8:48:10:0f:4a:93:8c:ad:a3:c4:93:ec:
         db:48:36:ee:17:50:e8:2b:3d:6c:21:c1:d7:06:be:3e:be:ae:
         df:e7:c8:a8:12:79:c5:0d:5d:ee:43:3d:74:d7:31:1d:e9:43:
         77:6b:68:30:1c:c9:9d:64:83:3b:b5:1c:0e:aa:f8:1c:24:3a:
         85:9c:59:6e:6b:3f:71:61:58:8f:64:93:ef:67:1d:d2:27:55:
         37:9c:3b:1b:69:9d:a6:32:53:12:07:77:ad:9a:96:e1:c3:a4:
         8f:e8:66:de:26:87:c0:80:87:3c:45:34:b4:0f:5c:7c:8e:29:
         91:73:91:47:a7:82:7a:95:0f:a0:32:96:f9:4b:bb:29:45:14:
         15:9c:42:45:53:06:6f:f2:17:4d:62:ad:09:1d:72:64:b9:99:
         3f:c1:06:a6:96:ad:9d:6b:c9:61:d3:f0:ce:d3:04:cb:6e:ec:
         af:78:f4:03:fa:62:22:11:bf:2b:1d:55:60:22:f2:23:17:fd:
         b7:e3:50:c8:2b:51:81:14:5e:69:6a:ad:86:67:a6:14:e5:bd:
         be:f7:10:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXY+8f1SGICyZhSiHTyIhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MmM4MDAxYTE3NjQyYjY5NTYyYzYzYWM1ODkyMGRhMzYw
ZjE1NGYwHhcNMjUwOTA1MDEwMDQ5WhcNMjUwOTA2MDEwMDQ5WjAzMTEwLwYDVQQD
EyhjMzVkOGE3NGJhNTUzMTc4MWE1NDMwNjkwNDBjNzVmNDQ4YmU3OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPlNeRyrFszculmGVjr8/qx3OfeU
twK9HkLKnzjOLTZ2hZojmK9p6O43YRQTxw3g4ojcGyzlB+eMq+DQWlrRvrAUwP+I
HgQe4oEipPriv873b4A3KM7qcgiEqm+tMZr2U4C4rCPCHiu/Of3Lu8rRxLLY7QwB
QQqUBMRyH/pAHzCGOjyyAUenqS7RaoAHKxdkeGKe/mHOn3mt6C65eaEoFMGLevk2
oVbye/V7lKPhblTLt+VUJleebYIJ6OBCELF5QeeC5UkiKW8XKLTWG2JXViPOCsIE
ecQowryQIy/Iv7CwX6Tf162PBeUsszMabSKNyHadug0cCr8pY0zNMTRcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNdinS6VTF4GlQwaQQMdfRIvnmyMB8GA1UdIwQY
MBaAFMgsgAGhdkK2lWLGOsWJINo2DxVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mYzIwNDQtNjFjZi00NGJhLWFiYWUt
YzJiMGRmN2Y0M2JkLzEveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mYzIwNDQtNjFjZi00NGJhLWFiYWUtYzJiMGRmN2Y0M2Jk
LzEveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuz44osG
S/QeyQ2VtYPJeQb4VSTBmOpkeCIdMODNK0c7wfN9l0R5L++UqEgQD0qTjK2jxJPs
20g27hdQ6Cs9bCHB1wa+Pr6u3+fIqBJ5xQ1d7kM9dNcxHelDd2toMBzJnWSDO7Uc
Dqr4HCQ6hZxZbms/cWFYj2ST72cd0idVN5w7G2mdpjJTEgd3rZqW4cOkj+hm3iaH
wICHPEU0tA9cfI4pkXORR6eCepUPoDKW+Uu7KUUUFZxCRVMGb/IXTWKtCR1yZLmZ
P8EGppatnWvJYdPwztMEy27sr3j0A/piIhG/Kx1VYCLyIxf9t+NQyCtRgRReaWqt
hmemFOW9vvcQHw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:16 2025 by rpki-client