Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          IAMmdERPHwJRYi6BA8VZrwqG1W9CDsvu46Tf93ZK0Pw=
Subject key identifier:   2E:B4:0C:DF:4C:56:0C:4F:90:97:4D:8E:1C:61:38:09:21:F1:A8:00
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       0198D4738A0CA3A6708416D1AC8103C18BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          08CF
Signing time:             Sat 23 Aug 2025 01:03:18 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:18 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:18 +0000
Files and hashes:         1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
                          2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
                          3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: 08VeSFqCF/ApLrZnklrGdU+RjVjQBU1x0ihOjYIZA3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:8a:0c:a3:a6:70:84:16:d1:ac:81:03:c1:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Aug 23 01:03:18 2025 GMT
            Not After : Aug 24 01:03:18 2025 GMT
        Subject: CN=2eb40cdf4c560c4f90974d8e1c61380921f1a800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:56:ce:ad:14:c1:d8:06:ea:31:4c:1d:da:
                    92:57:3d:dc:70:14:b6:f7:13:68:42:b5:33:ac:7f:
                    00:1d:a2:9d:d5:55:dc:ee:b9:80:78:54:d6:26:f9:
                    56:82:3b:dd:ed:b3:de:c1:81:ef:e1:d8:09:cd:c3:
                    f5:ce:9f:62:0a:52:a4:5d:05:fe:4d:97:3b:7f:f4:
                    d2:2c:cd:a6:d9:57:82:b9:98:b0:3f:7e:58:69:94:
                    50:37:75:d3:26:bd:4a:0c:f1:26:97:38:d2:c3:e6:
                    0f:f5:c1:10:97:ea:18:d4:14:34:e7:ef:ef:8a:39:
                    ec:40:9b:f5:8f:51:00:2f:f3:54:40:1f:f5:dc:e1:
                    aa:fa:56:fa:06:70:87:42:ed:73:e0:b7:f9:f5:74:
                    3d:7e:31:eb:bb:be:9b:96:4d:a4:54:4d:25:6c:ed:
                    55:87:3f:b5:62:2d:9f:03:4a:22:05:63:53:af:4c:
                    88:a6:c2:24:46:74:07:98:6d:76:ae:a7:85:cc:8b:
                    b3:8e:9b:e5:b6:d3:8b:40:60:b6:a9:75:6b:d7:66:
                    9f:4e:9b:bf:5d:3d:34:b7:4d:82:5e:13:c6:85:36:
                    74:ec:7e:b2:e2:ff:94:46:e9:8f:64:0d:d6:34:d5:
                    e8:d0:5c:af:e6:4b:46:d1:c6:43:50:32:f4:e6:2f:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:0C:DF:4C:56:0C:4F:90:97:4D:8E:1C:61:38:09:21:F1:A8:00
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:e6:3a:b9:83:87:bf:f8:d6:88:9e:c2:75:cb:70:d6:10:
         22:80:33:60:af:5c:41:67:90:0a:a5:a1:d9:08:3e:68:69:55:
         3e:1c:f0:8a:31:f7:03:4e:98:10:be:b0:7f:aa:f9:a4:9a:17:
         58:3b:20:15:95:00:63:d6:f9:40:d2:96:de:d1:37:72:08:ed:
         71:cb:5d:5c:2e:cd:fd:5b:ac:d8:30:36:55:92:a5:64:b1:9d:
         df:35:56:c9:33:2e:81:17:93:19:46:35:b1:c8:0b:75:64:70:
         24:d0:ca:61:9f:cd:91:dc:65:01:7a:65:5a:78:ef:8c:0b:1b:
         02:d0:6e:64:09:b7:a6:db:82:52:70:35:6a:0f:7d:23:0a:77:
         04:18:07:81:3c:1e:f3:e7:09:23:97:c0:f9:2b:a3:fa:ea:0f:
         79:dd:46:16:f0:cb:0f:c4:79:a5:43:9d:df:13:ea:bb:b8:10:
         05:3c:36:32:81:f4:b0:27:9c:02:9e:c6:88:60:50:a5:df:8b:
         a2:fe:9c:30:b0:b5:14:f3:d5:f7:b5:e6:20:34:13:f5:f7:bb:
         54:a5:01:85:c6:ee:f5:f9:c5:57:6d:b4:77:f5:90:50:29:38:
         34:70:a3:56:b9:d7:75:c1:98:a8:f1:83:52:f6:82:20:c3:99:
         85:3b:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:44 2025 by rpki-client