Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File:                     wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier:          cnlU8YCJjjh1sIHLZzh3YnETvpAoS8320S7Vzm57wB8=
Subject key identifier:   87:AA:60:6D:D5:05:C6:08:3D:A3:46:BF:33:3A:AF:AC:65:06:8A:D6
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer:       /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial:       0199221E81B3D97E4301EE02458367585473
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number:          09BA
Signing time:             Sun 07 Sep 2025 03:00:48 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:48 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:48 +0000
Files and hashes:         1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
                          2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: DwTuE8s++lF/m7hdBWWUnssOemfywX73Wna7WVK1LyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:81:b3:d9:7e:43:01:ee:02:45:83:67:58:54:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
        Validity
            Not Before: Sep  7 03:00:48 2025 GMT
            Not After : Sep  8 03:00:48 2025 GMT
        Subject: CN=87aa606dd505c6083da346bf333aafac65068ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:43:ee:e4:00:c7:7d:c7:c1:5c:1c:05:e5:f0:
                    82:f3:3e:9b:7b:90:7f:16:45:04:ab:95:e4:cd:31:
                    c6:d0:ed:ed:41:38:91:c3:a0:50:2a:23:cd:83:95:
                    74:d6:5e:87:6a:e0:94:72:6c:18:e9:55:1a:9b:6a:
                    a8:d9:5d:e7:57:19:97:bf:43:ed:2a:be:52:e3:42:
                    bd:4e:2c:f0:be:c5:9e:57:5b:57:41:f2:1c:7d:c6:
                    5a:f3:a5:29:47:ab:c4:d6:49:63:2b:4d:b9:25:e4:
                    29:f2:a1:73:15:f2:00:04:3d:c2:17:f0:54:39:8b:
                    6d:09:b8:ea:84:c8:9a:0c:56:23:61:01:f0:ac:9d:
                    e4:b6:e2:0c:30:ef:b6:9b:41:d7:0e:91:a5:26:35:
                    b3:02:22:c6:5b:24:4f:f8:e0:99:31:2f:7b:37:72:
                    cb:54:16:07:0d:c2:ee:6c:de:8b:01:ff:ba:3e:a7:
                    e5:9d:3f:55:f0:68:a3:7d:56:3a:05:bd:da:ad:c2:
                    bf:16:06:0f:f1:6b:16:59:70:ae:f1:39:99:2f:c2:
                    48:3f:36:88:bd:b1:70:f0:04:c4:85:f2:70:00:35:
                    5f:e8:f2:59:d3:eb:9b:49:e8:31:5b:31:3f:42:48:
                    4d:c3:63:04:2e:6f:64:7c:4c:83:78:0e:87:4e:0c:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:60:6D:D5:05:C6:08:3D:A3:46:BF:33:3A:AF:AC:65:06:8A:D6
            X509v3 Authority Key Identifier:
                keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:be:c9:cb:f6:25:16:d6:6a:99:83:ac:38:9f:38:c5:90:
         8e:fc:ac:9f:ce:17:c2:75:de:40:56:a5:44:80:b7:36:12:81:
         d3:69:dc:ab:07:13:32:9f:c7:3a:a0:51:1b:45:1a:84:81:44:
         d5:50:2e:4f:64:e5:e0:2f:77:16:db:a4:59:d4:9b:d7:ac:66:
         e3:25:17:4c:b9:ed:be:6b:a3:4f:a5:ad:80:4b:26:5b:01:a6:
         a9:ba:5d:50:ff:2d:42:cd:d1:a7:d6:c6:5f:5a:68:45:f0:f2:
         14:0b:fa:e2:01:2a:e9:2a:27:f9:86:81:df:20:b0:8d:2e:ad:
         ac:cb:69:df:33:fa:53:ac:a8:02:c1:2c:b9:37:52:6f:9e:58:
         9c:24:dc:e6:1b:9f:a4:e5:bb:59:7e:06:71:da:30:11:fa:0f:
         c3:b6:a6:97:a5:54:77:db:1d:e2:87:fa:8a:e2:b4:7c:91:67:
         f6:8f:e6:d2:55:b1:e9:7b:18:4e:0a:48:f7:3c:8c:a1:d2:81:
         b0:4b:10:bc:77:01:b5:f4:2b:74:62:e5:fd:61:88:0a:36:5f:
         1b:40:ff:d2:92:68:42:a5:5d:f5:ab:f7:6e:f2:22:d5:ba:d1:
         10:82:ef:99:b7:1e:87:e7:06:da:55:e1:75:e4:10:5e:fe:13:
         be:07:64:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHoGz2X5DAe4CRYNnWFRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOGRlNGYyYWY4YzcwNTBlNmU3MGUwOGExNTI1NzNlZGQ0
MmU2NzgwHhcNMjUwOTA3MDMwMDQ4WhcNMjUwOTA4MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg4N2FhNjA2ZGQ1MDVjNjA4M2RhMzQ2YmYzMzNhYWZhYzY1MDY4YWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kPu5ADHfcfBXBwF5fCC8z6be5B/
FkUEq5XkzTHG0O3tQTiRw6BQKiPNg5V01l6HauCUcmwY6VUam2qo2V3nVxmXv0Pt
Kr5S40K9TizwvsWeV1tXQfIcfcZa86UpR6vE1kljK025JeQp8qFzFfIABD3CF/BU
OYttCbjqhMiaDFYjYQHwrJ3ktuIMMO+2m0HXDpGlJjWzAiLGWyRP+OCZMS97N3LL
VBYHDcLubN6LAf+6PqflnT9V8GijfVY6Bb3arcK/FgYP8WsWWXCu8TmZL8JIPzaI
vbFw8ATEhfJwADVf6PJZ0+ubSegxWzE/QkhNw2MELm9kfEyDeA6HTgxvLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeqYG3VBcYIPaNGvzM6r6xlBorWMB8GA1UdIwQY
MBaAFMGN5PKvjHBQ5ucOCKFSVz7dQuZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzct
MDA3YjQ0N2Q0YjM5LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80YWY3YzEtNTBjYi00NzlkLWEzNzctMDA3YjQ0N2Q0YjM5
LzEvd1kzazhxLU1jRkRtNXc0SW9WSlhQdDFDNW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNK+ycv2
JRbWapmDrDifOMWQjvysn84XwnXeQFalRIC3NhKB02ncqwcTMp/HOqBRG0UahIFE
1VAuT2Tl4C93FtukWdSb16xm4yUXTLntvmujT6WtgEsmWwGmqbpdUP8tQs3Rp9bG
X1poRfDyFAv64gEq6Son+YaB3yCwjS6trMtp3zP6U6yoAsEsuTdSb55YnCTc5huf
pOW7WX4GcdowEfoPw7aml6VUd9sd4of6iuK0fJFn9o/m0lWx6XsYTgpI9zyModKB
sEsQvHcBtfQrdGLl/WGICjZfG0D/0pJoQqVd9av3bvIi1brREILvmbceh+cG2lXh
deQQXv4TvgdkJg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:49 2025 by rpki-client