Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File:                     ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier:          snAAGCJdOR8aDgxzsVd6LJuddQ4xhMAIEGMvAqUTVrw=
Subject key identifier:   D8:84:B0:64:F8:A1:5F:DE:3A:A3:AC:40:17:E7:50:03:AA:9C:CC:E3
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       019848534BC4039920061CCFBC304F85BD81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number:          12A9
Signing time:             Sat 26 Jul 2025 20:01:14 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:14 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:14 +0000
Files and hashes:         1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: ej2TllRlE0qC690uzAW5egv8Qs7kWVg61CeFcbpDCIM=)
                          2: zl8vYnMSKo50V7tHcL3U74d2LS4.roa (hash: cxI3XYqo0XKxXcEnFf9KagnCReAfMGFWl39LE0K//l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:4b:c4:03:99:20:06:1c:cf:bc:30:4f:85:bd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: Jul 26 20:01:14 2025 GMT
            Not After : Jul 27 20:01:14 2025 GMT
        Subject: CN=d884b064f8a15fde3aa3ac4017e75003aa9ccce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:fe:95:d1:94:ad:92:6f:79:6d:8e:ff:03:
                    c0:62:16:be:4f:0e:24:70:15:ab:ed:2e:63:a6:be:
                    fa:1b:fe:e9:fd:b8:e4:e3:84:a4:01:19:b1:01:88:
                    b1:34:70:76:6d:a1:db:87:bc:8b:7b:31:43:44:f2:
                    88:30:22:66:bb:03:d0:0e:4d:b1:a5:99:d1:27:fc:
                    cd:7d:13:89:42:3e:d0:1a:7b:b5:b2:d5:d0:f4:a9:
                    a4:c6:e2:75:2a:22:b9:76:3a:ad:ef:9f:f3:8c:60:
                    63:c5:fc:f4:b6:0e:6e:1d:a0:bd:98:3b:ac:83:19:
                    ab:7b:2e:69:60:59:b2:94:66:c8:7d:2c:39:f8:9f:
                    8e:63:b4:1b:33:51:09:c1:80:ac:83:d5:7c:c5:7d:
                    73:31:69:73:cb:b5:06:0d:51:91:0f:ac:39:92:20:
                    45:5c:3b:9a:8b:94:f0:9e:ec:9f:4f:af:b0:13:a8:
                    21:44:c8:44:59:b2:ec:bb:00:14:3c:80:40:6b:ee:
                    56:2e:3a:fb:da:1f:b9:68:5f:85:83:73:e9:3d:3c:
                    17:a5:70:05:b1:49:27:43:3a:c7:12:fa:ae:0d:4a:
                    5a:20:da:d9:d4:20:8b:57:3f:ea:7e:cd:aa:a7:80:
                    da:9e:5b:a6:58:04:db:b4:eb:7d:f0:08:89:3a:81:
                    cf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:B0:64:F8:A1:5F:DE:3A:A3:AC:40:17:E7:50:03:AA:9C:CC:E3
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5e:74:10:f4:b4:7c:60:b0:91:67:73:6b:67:b8:97:d3:bc:
         6f:3e:2d:da:58:c5:85:c2:f0:04:61:40:b9:1e:6e:7f:5a:c7:
         bb:9f:e5:7e:84:50:3e:39:1b:e7:3c:01:9c:4b:f1:5b:85:26:
         63:28:a9:5b:0a:46:86:f7:31:ad:0c:16:80:a6:88:6a:9f:97:
         32:46:ea:78:fb:ae:da:14:66:36:05:9f:c6:89:e4:1b:0c:c8:
         27:40:63:d5:70:9e:1c:09:28:30:fd:bf:78:8f:fc:54:df:93:
         0a:d3:f5:6a:6c:f5:c4:64:85:d6:66:71:f6:67:2c:1f:32:33:
         d3:6f:7b:ee:70:19:fa:32:29:48:79:f8:8f:8a:61:c3:9e:19:
         c5:94:da:d0:07:76:af:55:c1:2c:39:e3:7c:94:1f:55:02:45:
         3d:6b:a9:22:8e:75:1e:43:6d:8c:5a:9a:be:10:bc:4f:cd:7a:
         c7:ea:f3:09:d9:9d:07:b5:99:08:4a:a1:39:7a:07:e5:76:ac:
         00:ab:2e:da:8d:31:97:b0:b7:2c:0e:b2:75:3f:66:69:46:17:
         cf:c3:27:a8:1a:9e:f8:1e:dc:90:81:94:68:a9:6a:c0:12:17:
         21:d0:50:96:f6:37:fc:3e:43:dc:1d:d9:5a:1c:2c:d2:a8:5b:
         6a:ee:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:08 2025 by rpki-client