Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          z7mTbvHwF/xXUkUVXADLonOOwrsjPBW/8k8hduh1ykg=
Subject key identifier:   71:E1:C0:8D:D3:CB:A7:51:49:16:F1:35:BE:9A:E2:95:71:E5:A4:A4
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       0199228D04786B110FFB50E6649F977FF76A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          0F35
Signing time:             Sun 07 Sep 2025 05:01:30 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:30 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:30 +0000
Files and hashes:         1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: 8Y2hD+tNtxyT+7sxCDYilcixMMJYesTC4dAyKZPvn4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:04:78:6b:11:0f:fb:50:e6:64:9f:97:7f:f7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: Sep  7 05:01:30 2025 GMT
            Not After : Sep  8 05:01:30 2025 GMT
        Subject: CN=71e1c08dd3cba7514916f135be9ae29571e5a4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:97:a0:e8:18:64:51:93:94:dc:d8:3e:2d:
                    c1:4f:4e:a9:50:49:ba:ab:22:41:c2:77:7d:e1:0b:
                    a1:9f:6d:d2:75:4a:f0:64:f2:42:e1:e4:93:60:3f:
                    46:73:4e:93:1f:ad:8f:ff:45:26:f8:e2:1d:38:f3:
                    78:c9:47:2a:75:66:8f:63:76:8b:2d:8c:92:4f:ff:
                    60:3d:6f:d3:e0:cd:e7:0d:17:f7:ca:48:42:41:18:
                    67:d9:f5:de:9b:a3:ed:4d:a3:35:fd:c6:f6:a1:05:
                    79:4d:d6:84:5e:fd:57:0c:c5:40:6c:f2:0d:0f:6c:
                    3a:f7:4a:23:52:0a:ba:f1:76:87:38:da:05:a7:21:
                    23:44:6a:bf:e2:b6:30:ad:4c:63:0f:01:22:4a:f3:
                    4f:b1:8e:01:3b:5c:c0:22:d9:d1:c5:e6:d4:a6:61:
                    e5:a9:4b:35:a7:f4:d5:2c:11:ed:6c:58:03:8f:ed:
                    b7:18:5d:8b:15:fc:de:38:2e:35:d8:2a:08:74:29:
                    ca:b8:61:eb:43:5b:bf:96:8d:42:46:8a:a2:3d:46:
                    cb:f3:0d:0f:e2:b4:dc:af:92:30:f4:c0:be:05:0c:
                    5f:9c:33:68:23:b6:a9:3b:24:fc:43:dd:44:f3:95:
                    4c:94:06:8b:d9:5f:7d:73:7b:a7:c5:c5:46:1a:38:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:C0:8D:D3:CB:A7:51:49:16:F1:35:BE:9A:E2:95:71:E5:A4:A4
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:80:1a:89:45:33:88:26:cb:b5:63:42:d2:17:54:83:ce:
         fc:e1:34:9d:d2:6b:06:5d:13:6c:7b:ea:59:88:4e:57:1d:81:
         30:1d:1c:c6:19:03:88:99:ce:25:d0:53:a8:c4:fa:75:5b:ae:
         74:27:75:87:a5:ea:a3:a8:61:04:59:5a:b9:d6:87:ab:ae:74:
         a0:36:4d:02:8c:26:13:38:c2:3a:62:e6:ec:28:02:a8:d1:b6:
         37:98:c9:0a:04:d1:c0:5c:66:96:33:9c:ec:fd:9b:60:49:94:
         e0:bd:ac:34:ea:35:e3:ac:f1:5a:18:4c:e1:cc:39:6c:5d:04:
         e2:f4:df:5e:25:12:ca:10:f3:6d:3c:cd:0d:d9:8f:45:e5:b1:
         de:32:c5:77:eb:8e:a4:72:39:f8:9e:1d:81:54:7d:cd:69:cf:
         95:b8:c2:83:d7:e9:be:2a:f9:96:06:75:0a:2a:e2:fa:cb:f9:
         d3:a2:6b:03:e0:73:dd:a3:88:d5:92:6b:66:7c:5d:b5:54:93:
         92:00:5b:2e:85:d2:bc:33:5c:d5:dc:a7:99:11:66:22:99:43:
         db:60:88:87:b4:36:d1:db:09:f4:88:01:d0:2a:b0:48:34:86:
         75:52:c5:54:1a:9b:d2:8e:dc:77:f8:10:84:a7:f0:e8:10:42:
         06:b1:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client