Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          vhmyBPHhjOE0TZuHsKWIW5t8M/HATU3q0hcaWu9rL3I=
Subject key identifier:   D6:85:41:C7:22:33:35:5C:80:F6:9A:59:42:1B:D1:3F:D4:91:15:7D
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       0198D698409E9002745DC5F5D2FD2A6FD86F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          01BA
Signing time:             Sat 23 Aug 2025 11:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:38 +0000
Files and hashes:         1: dlzqaHBNCax7AH7cKOuLGUROmhc.roa (hash: V0WC0WTCXqpzuDi1+bDioL4WjgyLz03d8dARSLHOma8=)
                          2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: kCMDenkFfD9u1Ia5mXCmGBY7rGoMJjV4f76feCH6DnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:40:9e:90:02:74:5d:c5:f5:d2:fd:2a:6f:d8:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Aug 23 11:02:38 2025 GMT
            Not After : Aug 24 11:02:38 2025 GMT
        Subject: CN=d68541c72233355c80f69a59421bd13fd491157d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:d2:cb:48:45:a8:e3:db:8f:3f:3e:23:06:
                    9a:f0:f1:02:dc:63:f4:ab:bb:fa:06:93:63:4c:2d:
                    23:12:dc:a1:5a:14:89:73:17:a2:e4:bd:cc:e3:6e:
                    ec:aa:90:cf:45:33:1a:88:ca:39:67:a8:43:5a:8d:
                    ed:63:11:02:02:5b:91:bd:f3:4c:08:98:d2:29:fa:
                    49:97:96:8c:0a:65:89:b8:25:73:c8:58:11:53:e6:
                    73:e9:10:90:18:b4:ed:1b:5c:e9:c8:72:68:e6:d4:
                    17:5f:83:25:38:20:19:a8:9a:9f:27:03:61:34:1d:
                    21:1e:10:85:74:c5:48:d2:0b:35:32:d7:01:5a:8c:
                    2a:e3:70:b8:91:8d:48:8c:10:4e:56:7a:b9:d5:2c:
                    62:98:0b:37:a5:c9:76:ed:55:df:a8:8f:2e:6f:58:
                    54:e7:7f:32:93:c6:58:8e:e8:2e:d3:98:a1:a2:f7:
                    64:6f:06:60:f0:ab:11:c5:8c:fb:b4:9c:3a:a5:9a:
                    8a:61:92:c0:6e:3b:69:60:74:c8:79:f4:6a:29:20:
                    bb:4a:b7:e7:1d:f4:ef:64:64:ca:81:91:32:f4:e0:
                    cc:12:26:ab:10:27:d9:65:b4:aa:52:7b:22:d6:fb:
                    1c:2b:c8:db:dc:dc:bb:e0:c8:6d:15:d4:fe:78:45:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:85:41:C7:22:33:35:5C:80:F6:9A:59:42:1B:D1:3F:D4:91:15:7D
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:7f:f5:cb:a5:ee:60:9d:33:86:e3:93:87:84:be:b9:0e:
         90:d0:74:05:3f:59:ab:91:76:a8:e8:8a:2d:38:07:02:6e:e9:
         5d:5f:18:8b:9a:df:fc:5a:df:3c:21:3c:6c:71:4f:aa:1d:13:
         e8:bd:7c:9c:bd:8b:9b:3c:4e:07:53:3e:6b:ed:26:ef:42:2b:
         1d:62:63:2b:7e:14:51:fe:65:8e:5e:e2:4d:ec:8c:c8:c0:a9:
         12:f5:37:a3:3b:16:47:36:c0:d8:76:33:bc:dd:9b:59:79:2b:
         41:d3:ad:b7:df:3e:43:00:d9:94:b2:bf:b1:c5:04:93:ed:80:
         af:da:c6:22:89:ee:00:4a:c0:d3:c8:47:91:d3:03:2f:42:39:
         88:fc:69:60:7b:d3:53:fe:2f:12:9f:2f:bd:ea:dc:e0:4b:f2:
         57:62:19:9a:e7:05:1b:44:d6:85:ca:e9:8d:ca:df:1d:f2:ec:
         e4:9f:e7:1d:a1:d7:87:cd:54:c8:f0:9f:75:23:c7:08:18:39:
         3c:06:02:d2:b5:26:35:f9:2b:a0:38:e7:35:9b:08:e5:ef:4c:
         09:59:b5:59:10:d4:fb:6d:8e:27:4c:ee:d1:a6:3d:cc:59:9d:
         7a:1b:ab:e1:d2:f5:49:30:cb:12:25:7a:e8:92:72:a9:82:c7:
         d3:06:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:23 2025 by rpki-client