Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File:                     Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier:          EY7sbc4hXcOVD8wr4y16J5Z6Kw7RkYy/1guN1uPGFWo=
Subject key identifier:   40:5A:BB:BC:51:62:D6:04:5D:96:0B:B0:54:AF:0B:3E:2D:D0:52:E2
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer:       /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial:       0198D5BBAC72D190F8F8AC9065112E35D52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 07:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:43 +0000
Files and hashes:         1: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: G/D2JTfNPvASL9COclZ2r8EDdMlJnEtayUHaqbpWwI8=)
                          2: dZjzanZ5Xa3WwYz-n1bsR4-cdN4.roa (hash: x2Q62dC7uuAXO8D8ST0Y3bzPEAD8rzw3v3/5eqKnb5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ac:72:d1:90:f8:f8:ac:90:65:11:2e:35:d5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
        Validity
            Not Before: Aug 23 07:01:43 2025 GMT
            Not After : Aug 24 07:01:43 2025 GMT
        Subject: CN=405abbbc5162d6045d960bb054af0b3e2dd052e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:3f:3f:da:0f:b0:e0:7e:f8:f6:f2:fe:4a:
                    68:79:74:05:d4:22:ac:f7:dd:e3:08:08:76:ee:8d:
                    6b:ea:14:ca:f3:fb:0d:db:24:5a:4e:43:93:90:c0:
                    9e:e8:de:a5:da:d2:f0:87:05:a2:c9:30:54:b6:06:
                    a9:6f:59:da:42:b0:57:c0:a1:24:c3:21:bc:86:b6:
                    0a:93:30:22:fc:d6:4a:46:04:60:da:d8:cb:50:61:
                    e7:dc:37:be:14:32:f7:0f:b1:3f:89:9b:97:ef:5a:
                    9d:af:0a:2a:ff:e8:80:82:d5:ac:cb:c1:e4:b1:6d:
                    a6:9e:c5:0a:84:e8:31:f1:d9:2a:69:df:5a:a0:27:
                    ef:59:c6:1e:a9:28:f0:f0:d4:4c:ea:ce:b8:e4:8c:
                    f3:0f:64:f0:3c:12:e2:92:b7:9f:a7:53:af:cb:16:
                    26:09:42:b2:15:cb:f6:63:cf:c1:03:31:e1:1f:01:
                    4f:f8:0f:fb:de:a8:c9:cc:d4:4a:69:4b:a6:43:51:
                    ac:64:df:1e:2f:4b:c2:a1:3b:78:3d:98:92:14:bc:
                    09:6b:ae:ae:d0:85:2c:7d:4a:a3:55:72:45:7c:34:
                    1a:17:7e:f7:c9:dc:f4:3b:78:8b:ac:8f:c4:86:6c:
                    03:85:af:96:fb:21:62:31:e1:cf:36:f2:c4:45:d9:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:BB:BC:51:62:D6:04:5D:96:0B:B0:54:AF:0B:3E:2D:D0:52:E2
            X509v3 Authority Key Identifier:
                keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:20:64:7b:13:59:d5:24:47:27:e7:52:fd:d9:1b:f7:c9:
         46:83:56:33:a7:49:9c:d2:cd:94:ea:c0:db:12:0a:e6:ca:41:
         48:c8:ff:90:d0:d6:41:7d:2d:58:19:77:e9:ed:7d:e4:d6:ca:
         9d:08:20:26:6e:ae:01:9b:3b:3c:9b:e1:4d:bb:9a:e9:7f:93:
         59:10:2e:10:5e:99:99:53:0f:a1:67:69:65:31:8d:25:87:f3:
         19:43:ef:79:5b:51:db:1d:8b:67:6e:c9:aa:b1:6f:1f:60:bd:
         4e:82:dc:18:e0:1e:b4:b6:59:41:0d:81:60:31:af:a4:53:b8:
         3f:4b:11:c5:23:48:57:fd:67:7c:ea:a7:04:5d:3a:a6:fa:47:
         45:30:16:30:36:4d:a9:f5:de:6a:5a:a4:21:93:a5:d2:8d:82:
         28:46:96:ca:37:a6:85:08:5c:b9:be:a7:13:c7:2d:2a:17:35:
         38:64:7c:3c:fb:7e:e7:76:6f:5b:c9:18:4f:8b:bb:8a:8f:3d:
         da:dd:b1:e8:04:db:4e:c9:ba:86:db:61:4c:3e:5a:7e:de:ff:
         ba:ab:a1:ca:45:60:98:27:dc:13:14:3a:7a:c7:b1:95:d2:b1:
         9b:39:2d:0a:0c:98:fa:e6:c7:dc:9d:5e:ff:20:7f:29:4c:89:
         9b:5d:46:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6xy0ZD4+KyQZREuNdUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDZlNGJmZmEyYjRkMWJjNDBlOTJiMzBhZjBkMjFhNzRi
MGJiZDAwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg0MDVhYmJiYzUxNjJkNjA0NWQ5NjBiYjA1NGFmMGIzZTJkZDA1MmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyU/P9oPsOB++Pby/kpoeXQF1CKs
993jCAh27o1r6hTK8/sN2yRaTkOTkMCe6N6l2tLwhwWiyTBUtgapb1naQrBXwKEk
wyG8hrYKkzAi/NZKRgRg2tjLUGHn3De+FDL3D7E/iZuX71qdrwoq/+iAgtWsy8Hk
sW2mnsUKhOgx8dkqad9aoCfvWcYeqSjw8NRM6s645IzzD2TwPBLikrefp1OvyxYm
CUKyFcv2Y8/BAzHhHwFP+A/73qjJzNRKaUumQ1GsZN8eL0vCoTt4PZiSFLwJa66u
0IUsfUqjVXJFfDQaF373ydz0O3iLrI/EhmwDha+W+yFiMeHPNvLERdkchwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBau7xRYtYEXZYLsFSvCz4t0FLiMB8GA1UdIwQY
MBaAFGLW5L/6K00bxA6Sswrw0hp0sLvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDIt
ZjE1NTU0ZmE0YjBiLzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NzY3NTAtYTIzMC00ZjI2LWI0NDItZjE1NTU0ZmE0YjBi
LzEvWXRia3Zfb3JUUnZFRHBLekN2RFNHblN3dTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf8gZHsT
WdUkRyfnUv3ZG/fJRoNWM6dJnNLNlOrA2xIK5spBSMj/kNDWQX0tWBl36e195NbK
nQggJm6uAZs7PJvhTbua6X+TWRAuEF6ZmVMPoWdpZTGNJYfzGUPveVtR2x2LZ27J
qrFvH2C9ToLcGOAetLZZQQ2BYDGvpFO4P0sRxSNIV/1nfOqnBF06pvpHRTAWMDZN
qfXealqkIZOl0o2CKEaWyjemhQhcub6nE8ctKhc1OGR8PPt+53ZvW8kYT4u7io89
2t2x6ATbTsm6htthTD5aft7/uquhykVgmCfcExQ6esexldKxmzktCgyY+ubH3J1e
/yB/KUyJm11GBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:48 2025 by rpki-client