Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File:                     yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier:          olA5B6AmQr4J28cSzo7AJI4Klg4oFgWMRZ+czFwmmLE=
Subject key identifier:   09:56:37:B8:5B:E7:DC:B2:77:6F:80:B4:7A:73:78:41:87:20:EB:53
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer:       /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial:       0199239EDAFD1EA8E157760563F912B0356F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number:          0749
Signing time:             Sun 07 Sep 2025 10:00:37 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:37 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:37 +0000
Files and hashes:         1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
                          2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: C3hSemsYr+P4jKdVZo9oMkwHYDhgxr58d/kRC7SV16Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:da:fd:1e:a8:e1:57:76:05:63:f9:12:b0:35:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
        Validity
            Not Before: Sep  7 10:00:37 2025 GMT
            Not After : Sep  8 10:00:37 2025 GMT
        Subject: CN=095637b85be7dcb2776f80b47a7378418720eb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:51:39:a1:d3:9a:06:d2:c5:86:1e:3a:43:
                    0c:e2:c0:0c:c1:4b:06:cc:31:6b:1c:78:56:d4:5f:
                    e3:fb:25:1e:ea:cd:d4:71:8c:b8:ec:67:0a:cd:d8:
                    7b:bc:a6:4f:a7:bc:ce:0a:02:ca:e8:a5:b5:e6:87:
                    a2:d7:4d:91:1c:d8:98:c2:91:e4:af:d0:9b:01:e5:
                    41:47:be:77:50:53:38:88:9a:14:a5:f6:80:de:9b:
                    41:28:4a:06:78:8f:73:13:30:26:6b:78:20:fc:ca:
                    94:c8:aa:39:43:2d:4c:b4:47:86:4a:a4:d7:69:a5:
                    66:cd:29:bc:ef:c4:9c:3c:75:e9:15:3b:77:96:ef:
                    c2:ca:58:42:20:3e:38:56:b6:81:96:8e:c9:05:6e:
                    67:b9:bc:84:03:97:ff:ef:a9:5f:55:d6:62:45:01:
                    e7:1e:56:7a:0d:a9:13:3a:88:9f:6f:6d:c7:fa:bc:
                    5f:39:3f:1d:07:22:10:54:39:ba:93:f6:1d:c6:c9:
                    ae:e3:ed:58:b2:14:fe:b4:cc:d2:09:53:0d:f1:eb:
                    72:d7:54:05:4e:e5:02:08:87:a2:0c:ad:61:82:67:
                    f6:09:4a:8c:cf:83:9a:92:af:35:cb:cf:b9:2c:ba:
                    aa:89:5c:43:ae:ee:b3:cf:16:1c:49:55:da:29:b2:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:56:37:B8:5B:E7:DC:B2:77:6F:80:B4:7A:73:78:41:87:20:EB:53
            X509v3 Authority Key Identifier:
                keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:5e:70:39:b2:57:6c:7b:07:54:63:e1:36:dd:02:fb:c7:
         4e:f1:2c:17:6d:42:f4:86:04:8d:ff:f7:df:44:ec:98:87:db:
         0c:c0:eb:58:86:eb:b8:c3:45:0d:ae:f0:91:96:51:53:e0:7a:
         aa:8b:eb:2d:bf:64:73:77:8a:e6:49:43:ea:c1:a5:ea:ad:c7:
         ae:06:e2:8b:db:86:35:b7:a5:b7:0e:f8:15:a3:dd:7c:ba:5f:
         27:25:5b:99:48:7b:5c:18:81:16:d4:b8:86:ed:2a:b3:93:4d:
         c0:be:50:df:09:c4:bc:f8:52:5e:df:4b:d7:7b:4a:85:d2:20:
         a8:70:36:9a:72:5d:36:75:0f:73:3d:c5:5e:03:f1:b3:31:2f:
         3c:85:2c:a8:9e:e6:66:72:96:ed:0d:0a:a5:c9:9d:3c:c2:f9:
         f3:3c:06:de:56:24:50:4b:d6:0b:0c:e7:7d:57:ef:4c:06:35:
         35:c3:3b:27:70:78:61:fc:2c:d9:72:10:6b:1d:88:9c:60:93:
         e5:49:2b:d1:10:e7:42:64:25:ba:93:a3:9a:96:cf:b9:26:9e:
         2d:28:38:65:d7:d5:34:16:a8:fb:92:9a:7c:4f:06:58:3f:45:
         4e:4a:af:50:5f:12:82:34:a1:01:6a:c2:49:83:f5:12:ca:43:
         93:46:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client