Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          KTgYWggdAasIAIx2RglD4m2tJLa8GJK2W1fa2YP3gRo=
Subject key identifier:   F2:97:22:3C:AB:E5:9E:3D:DB:8D:A7:9D:73:5D:94:D8:2B:EB:8D:31
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       019A085BD544C79785F1D522716362FC6E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          0622
Signing time:             Tue 21 Oct 2025 20:00:27 +0000
Manifest this update:     Tue 21 Oct 2025 20:00:27 +0000
Manifest next update:     Wed 22 Oct 2025 20:00:27 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: BdoUxztpfjCol76HnARJY94mK4zYWRry3/8ku/QIfoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:5b:d5:44:c7:97:85:f1:d5:22:71:63:62:fc:6e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Oct 21 20:00:27 2025 GMT
            Not After : Oct 22 20:00:27 2025 GMT
        Subject: CN=f297223cabe59e3ddb8da79d735d94d82beb8d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:67:1b:03:e0:e8:62:51:9b:39:61:46:99:
                    12:26:d6:68:60:3f:78:76:b3:67:41:9d:fe:a9:9f:
                    17:26:51:3b:01:a2:d3:1a:90:c3:d2:ca:fb:20:6a:
                    ef:9e:10:25:c5:8d:fc:65:ac:39:71:30:09:3e:25:
                    8f:85:cd:64:c6:49:b6:94:ac:40:7b:c8:e2:6b:64:
                    20:54:7c:27:fb:0b:67:ad:6c:e8:90:6f:ce:9b:f8:
                    ff:a5:4f:bf:e3:ad:5c:e5:b9:ca:7d:55:e0:35:f0:
                    ff:24:09:60:ab:20:29:24:9c:7d:ab:14:5e:47:98:
                    06:e1:72:b3:b9:90:e7:b4:c6:3b:30:27:ba:2e:85:
                    48:5e:61:1d:b0:6a:0a:76:8f:43:3b:67:20:ca:e7:
                    ba:21:3c:81:2c:48:a0:03:a3:08:dd:6e:61:81:10:
                    9f:8c:fd:72:0d:0d:50:a9:2a:4b:41:b2:be:f9:f8:
                    5c:ca:7f:12:ec:01:22:71:23:22:b4:80:07:a8:b5:
                    ae:a2:8c:8e:a3:05:d9:a4:7d:75:ed:20:6a:10:49:
                    34:27:6b:dc:27:d9:94:9c:d3:44:68:61:4f:87:ff:
                    d1:4a:b8:61:0b:2c:b9:19:83:66:ac:df:fb:a5:14:
                    8b:83:64:9a:61:f7:84:ce:ed:45:52:03:ae:0d:17:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:97:22:3C:AB:E5:9E:3D:DB:8D:A7:9D:73:5D:94:D8:2B:EB:8D:31
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2e:4c:83:60:38:8e:a6:c3:f6:e4:c7:ee:6e:f0:6f:62:32:
         a1:00:51:6a:d5:b4:54:0a:0a:07:28:7a:3e:88:ab:81:76:45:
         43:f9:1f:6e:a6:e2:23:29:f4:b5:71:1d:22:53:25:5a:53:64:
         1b:8d:e6:26:8f:ba:13:94:04:de:9f:ac:fc:f7:1a:5f:70:1a:
         83:7f:71:ac:f7:b9:47:4a:8d:22:b3:e0:c6:5c:a5:fe:b3:b6:
         53:9e:08:88:1a:d1:94:8f:fe:17:82:72:65:ff:e4:7a:68:68:
         7d:06:6f:0e:07:c3:07:52:a1:f6:a1:c5:ca:37:b3:c5:e4:3c:
         75:af:c0:c1:52:3f:58:76:66:70:42:f7:8c:48:78:97:d4:41:
         c8:3e:79:3e:ec:ee:c5:3f:cf:35:93:0a:dd:c6:bd:b8:2b:01:
         fe:38:36:2b:76:44:cd:a9:bd:91:1e:20:64:0b:d1:44:b6:eb:
         95:f4:65:bf:de:10:a0:69:33:c6:ea:79:90:d0:c3:e2:ed:56:
         72:8b:d7:87:f0:c9:db:c4:d3:76:c0:ad:f7:c7:77:81:92:00:
         a1:79:ae:dc:99:82:fa:ce:b6:9f:ea:62:4c:ea:d4:30:26:fa:
         a0:21:59:7d:3b:31:33:80:d7:44:a2:cc:dd:0b:23:f9:66:1e:
         fa:60:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 06:52:26 2025 by rpki-client