Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File:                     yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier:          Q4wnWTPixViPkDk3/gPmatwHrB+l3J7ykj5UmsVOFug=
Subject key identifier:   46:2D:57:8C:FE:C3:76:BC:3C:9B:54:7A:29:15:FF:C2:2B:28:1C:CF
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer:       /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial:       0197B9A162F4823F1ACAD7E3E8EA659D274F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number:          0B70
Signing time:             Sun 29 Jun 2025 03:00:50 +0000
Manifest this update:     Sun 29 Jun 2025 03:00:50 +0000
Manifest next update:     Mon 30 Jun 2025 03:00:50 +0000
Files and hashes:         1: KMVYfNBq8fQcPieeDn4rOXJEAQc.roa (hash: ydascvmFGyZEMeBYeWR21NuJQtwhyewDNO5cyV/mt0U=)
                          2: qQtVwx26Q11uVtNfnJzbmJUlIFc.roa (hash: Us6KZhFay/pkNMEXF/JAjIY/J6B0ztmxrmyXEzSbCqU=)
                          3: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: ItUmq9SJP5Xye0l5bWMKs+CRuq//pksmQdgS7FerD1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:62:f4:82:3f:1a:ca:d7:e3:e8:ea:65:9d:27:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
        Validity
            Not Before: Jun 29 03:00:50 2025 GMT
            Not After : Jun 30 03:00:50 2025 GMT
        Subject: CN=462d578cfec376bc3c9b547a2915ffc22b281ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:92:18:0e:30:5a:38:d1:12:ec:6b:a4:d6:
                    b8:42:ea:9b:be:a0:c7:07:1c:1b:a1:09:4e:08:00:
                    92:bc:bd:e7:5b:c9:5d:5b:e5:3f:e3:4c:eb:15:58:
                    fa:ab:77:1c:b3:19:a2:e6:7d:c0:e3:91:82:29:e2:
                    c0:0b:07:15:ca:a9:50:51:da:dd:70:b0:e6:cf:8a:
                    94:12:81:3f:c6:82:ec:6a:91:20:17:5f:ab:ee:55:
                    7b:02:c7:f2:19:cb:9f:6a:ac:0a:f8:b8:1e:e6:8c:
                    9a:43:90:86:db:f3:54:4f:00:8a:b6:40:e6:a0:34:
                    6e:8a:ac:aa:1f:a3:c2:4f:98:77:90:f1:68:e1:fd:
                    e1:72:5b:ab:01:1b:c7:e4:d3:99:db:61:a8:eb:db:
                    18:a3:73:b2:b8:f8:72:7f:5a:a1:61:fa:35:66:ba:
                    6d:8f:e7:59:b3:cc:27:78:46:d0:fc:ce:8b:34:b1:
                    b4:7c:1a:ab:b2:3d:9a:29:65:94:21:63:df:11:45:
                    1a:63:b1:ee:b0:e0:6d:e1:e5:52:ea:24:49:74:17:
                    a0:a6:bb:3c:88:fb:ca:24:5c:d0:7d:b9:ff:d2:9f:
                    3b:28:9f:d4:03:08:5c:1f:3e:77:b1:7e:9b:8b:f4:
                    0f:ef:c1:7a:6b:54:3c:8a:3f:eb:6f:ad:a6:a3:53:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2D:57:8C:FE:C3:76:BC:3C:9B:54:7A:29:15:FF:C2:2B:28:1C:CF
            X509v3 Authority Key Identifier:
                keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:8a:0e:31:b4:49:e3:a5:0c:c7:3c:52:89:42:a1:e0:4b:
         40:ee:db:f6:53:ca:19:2a:96:e3:81:8f:b2:6b:63:71:64:e3:
         01:9b:4c:af:9c:cb:a5:d3:df:0c:4a:4d:90:7c:de:5f:9d:be:
         6d:e4:b8:bd:14:8d:b1:5e:04:de:a2:dc:06:e1:11:34:b8:5c:
         89:be:97:e4:fd:eb:ad:b4:70:89:b0:06:05:4b:f2:38:d3:21:
         2a:9e:12:1f:07:d1:fe:52:98:63:e2:c2:84:0c:2d:34:d4:e7:
         70:96:5c:be:5a:97:c6:f5:73:19:66:c6:34:6d:77:ea:85:df:
         c6:55:a1:b1:e9:4a:fa:0c:0d:52:d3:57:80:23:e8:27:72:99:
         4e:32:ef:6a:28:21:90:00:de:9c:2c:4d:b8:eb:30:e4:30:e7:
         3c:6e:80:23:1c:c0:49:3e:06:13:a8:c1:3e:f5:2b:ed:96:0b:
         e8:29:3e:25:c7:61:c7:8d:e1:e3:39:66:6f:60:0b:a4:78:52:
         ef:d7:4f:e3:14:f3:8b:1b:cc:81:7f:38:ae:17:41:1a:0d:2b:
         36:19:71:54:b2:16:e4:ea:c3:9e:7e:ca:19:6a:ca:de:01:bf:
         69:4b:16:ba:0a:cd:b1:8b:22:9d:7d:67:46:b3:73:4e:15:29:
         be:91:b5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:05 2025 by rpki-client