Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
File:                     Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json)
Hash identifier:          jc07rClcQGKjgbStHmDI5ZrZOlthPOADb2wSxI5uuqM=
Subject key identifier:   D2:77:3E:AE:87:76:37:5E:A4:24:6D:23:9C:DA:27:8E:3F:CF:92:01
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Certificate issuer:       /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial:       019A006BE702BA8876B20055C4A9FB796F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
Manifest number:          1040
Signing time:             Mon 20 Oct 2025 07:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:02 +0000
Files and hashes:         1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=)
                          2: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=)
                          3: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=)
                          4: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=)
                          5: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: GAohk+249rch1NlI1K8/0K+f9Mmcm6thT6o8DXUIE9c=)
                          6: Z6ubH84vQbgEnifkNYkjjYx5LIg.roa (hash: A5Iyh12sixazcVNr3007j9RNY5bFIJZSLARvNvwI0hI=)
                          7: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=)
                          8: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=)
                          9: lms_h40r3-LvmvS_QZG5u3K67Uw.roa (hash: sioeVX/bhxcVhyyVff9dr3QSj+48OLBpgP5/WVrFXzw=)
                          10: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=)
                          11: nzJ1VVo_PG7VRYK1qXbMx1rFS50.roa (hash: /GaOWlamFjP2Dj79UI9A1USxEJfBxcpOsY5WVrDbQNw=)
                          12: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=)
                          13: qXSDx6qMLmAkAg9CUQzF6i4iyY0.roa (hash: wdkB7sltE+pNfWEVP8+xe0pE2lM5C0vVvLdbwwyDf04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6b:e7:02:ba:88:76:b2:00:55:c4:a9:fb:79:6f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
        Validity
            Not Before: Oct 20 07:01:02 2025 GMT
            Not After : Oct 21 07:01:02 2025 GMT
        Subject: CN=d2773eae8776375ea4246d239cda278e3fcf9201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:1a:7e:10:4a:2a:14:00:d3:80:30:24:f1:
                    4d:0f:b2:dc:f3:61:6e:18:d8:c3:b9:58:46:01:08:
                    30:de:7c:c7:7a:aa:f3:6b:5e:9b:c8:dd:49:23:23:
                    4a:a3:ff:0e:e2:36:20:3a:05:cd:33:ba:76:2e:40:
                    94:64:0f:18:8d:e8:66:c2:90:fa:22:69:1b:b7:aa:
                    bd:8a:24:d1:59:0b:9d:cd:af:9f:f5:0d:e0:10:4b:
                    6f:8c:39:1d:f2:8b:54:f0:56:86:36:d2:10:97:7e:
                    1c:a6:e4:ec:f7:3a:8b:6c:a4:45:9a:8f:78:32:29:
                    25:d3:38:ca:e5:2d:7f:f9:c0:dd:8b:d8:ae:7a:c5:
                    2a:f2:d5:2f:4c:7f:0c:15:e7:7e:f2:b3:62:c4:c1:
                    7c:de:cc:9c:20:2d:91:f6:30:79:f3:55:92:d8:02:
                    e5:a4:8a:82:ff:76:1f:a6:45:1a:89:57:d3:47:ae:
                    fa:a5:7f:c5:d7:10:87:17:64:13:88:53:66:d4:71:
                    f6:53:36:bd:02:6c:bd:aa:9c:0d:19:f3:f5:a7:7a:
                    d5:35:fd:06:bc:61:d4:d8:86:08:66:ea:16:b5:97:
                    94:31:35:a9:04:d3:95:fc:8f:ac:b2:fe:18:ad:83:
                    c6:75:4e:cf:9e:a9:56:30:04:5f:fb:cf:4f:44:05:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:3E:AE:87:76:37:5E:A4:24:6D:23:9C:DA:27:8E:3F:CF:92:01
            X509v3 Authority Key Identifier:
                keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:77:ae:2b:0e:0d:18:a2:0a:d8:f9:bb:be:44:74:5a:d6:
         45:8d:25:5c:f4:00:f0:6c:9b:84:2b:86:60:1c:7b:26:e1:8c:
         9e:1e:d3:90:5d:7a:34:4a:46:67:ce:6f:9d:6c:df:57:7f:9f:
         03:96:31:26:4f:11:df:e0:dc:2c:ce:04:a1:53:07:1b:5e:83:
         d8:25:84:c5:8f:1d:85:8d:4c:15:40:d3:23:09:16:33:97:10:
         f2:c0:b7:b4:4f:10:57:3c:0d:91:fd:46:eb:8f:1c:a2:77:f7:
         79:ae:c8:eb:5b:30:9f:c0:8a:0b:4b:d6:4c:77:b1:c5:af:6e:
         b0:55:26:6f:43:08:89:1a:d9:2a:2f:cf:21:22:4c:12:e0:32:
         88:48:02:df:ef:ed:a8:9b:e1:2a:fb:c4:5f:b5:38:0b:8a:e3:
         1b:2a:a8:e6:25:bf:94:62:fe:6e:82:2f:76:2b:27:e5:46:9e:
         78:16:33:c8:7c:c1:fb:34:c9:19:98:bb:66:06:ed:77:f5:64:
         04:2b:14:65:4f:37:3a:4d:34:0b:06:1c:e3:fa:02:dd:df:84:
         db:7d:d1:81:1e:20:13:bf:01:92:67:0c:f2:f8:38:9c:43:b9:
         d8:a9:76:e7:e2:17:1a:4d:50:3e:35:41:18:3b:94:48:9c:f4:
         bc:4c:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:26 2025 by rpki-client