Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File:                     yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier:          30S3Z2wK2Ijxf7tfDlzW6RWRCKw5hoWw8K64WItDucg=
Subject key identifier:   BA:B3:36:BC:81:B4:7B:EB:86:3A:43:C6:53:66:75:D6:50:5E:A5:76
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer:       /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial:       0198D4A7CA989C6D089023DB7D7A6100F2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number:          0275
Signing time:             Sat 23 Aug 2025 02:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:22 +0000
Files and hashes:         1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
                          2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: uCsL5lPMaD6/BjsFcgYBzeK5Gnwzk23V7GnsUqFNZyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:ca:98:9c:6d:08:90:23:db:7d:7a:61:00:f2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
        Validity
            Not Before: Aug 23 02:00:22 2025 GMT
            Not After : Aug 24 02:00:22 2025 GMT
        Subject: CN=bab336bc81b47beb863a43c6536675d6505ea576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:48:45:38:ae:67:67:3c:52:7d:41:8f:1f:
                    34:a5:8f:08:49:50:18:02:01:9c:54:c7:1b:52:59:
                    44:8e:c3:e4:d8:ee:a9:a3:75:71:39:43:00:5d:c6:
                    51:be:2d:0d:43:9b:da:33:6c:56:7a:f1:4e:84:2b:
                    21:32:4e:0f:9e:91:86:66:36:25:e1:e6:9f:73:0b:
                    b8:b2:c9:ea:4a:05:d8:dc:b2:ab:a9:ca:aa:46:3c:
                    8b:45:18:15:69:dc:f8:ce:22:b4:3c:68:b0:6c:41:
                    e2:dd:6c:a7:18:6e:4a:dd:3d:8b:0a:cd:e5:20:0b:
                    d0:4b:53:c8:48:f6:9f:18:ee:81:fd:da:de:b6:e0:
                    07:2e:da:c3:ff:6d:11:17:7e:2e:bc:de:3e:da:5b:
                    32:41:7b:f4:ec:66:6e:f1:be:d2:70:66:1f:65:1b:
                    07:3c:b3:71:cf:94:82:74:79:78:25:99:a4:09:8d:
                    50:03:39:58:69:d9:75:e2:bf:f8:c8:67:eb:01:ca:
                    94:c7:2b:c7:b0:d0:e3:ad:8b:da:78:de:68:93:f8:
                    7d:de:26:76:05:8e:12:8c:f6:7b:69:51:0d:89:c6:
                    d1:95:7e:63:56:04:cf:10:0f:db:a0:bd:39:43:49:
                    20:c0:82:93:fa:8f:d2:87:cf:77:df:b1:59:96:a5:
                    92:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:36:BC:81:B4:7B:EB:86:3A:43:C6:53:66:75:D6:50:5E:A5:76
            X509v3 Authority Key Identifier:
                keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:57:d7:23:66:5b:09:3b:c4:aa:90:ef:f1:9e:d4:33:0b:f3:
         57:2f:9c:d4:54:50:8c:ce:a5:34:c2:cc:1b:c1:d6:51:43:bb:
         7d:e0:91:68:0a:67:e3:19:fb:49:39:73:80:56:b4:89:2c:c4:
         49:ae:d9:e5:e6:ca:66:80:26:7b:18:40:b0:dd:2b:31:dd:19:
         23:86:23:1c:7e:79:d9:6e:cb:0a:d4:03:45:a0:e4:e2:f1:f4:
         85:76:b6:d5:da:3c:c6:2c:fe:97:ed:78:e4:c6:87:33:a7:16:
         73:cc:9a:86:08:41:d5:3d:48:0b:1b:01:22:18:65:22:8c:aa:
         b4:11:8e:bc:d2:7f:05:9e:0c:b2:6c:e8:6d:c1:48:6f:f4:50:
         4c:8e:e8:58:02:e8:39:2c:d7:25:dc:37:a9:cf:d9:2a:fd:ac:
         b6:3e:b6:1c:9a:e3:e8:ee:b1:25:74:8e:ef:cb:e8:cc:66:6b:
         e6:30:96:4a:49:57:60:d3:04:a0:0f:9c:21:1a:4b:a7:57:39:
         da:4e:97:3b:ef:c6:74:59:fc:6f:e9:09:48:ca:c4:d3:0c:7b:
         5b:5d:59:47:18:cc:d3:4b:d6:7f:4d:de:9f:1f:bf:68:fc:c4:
         35:e1:42:d2:26:e1:70:91:0b:a4:74:32:51:dc:d3:5c:ab:ef:
         13:23:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:49 2025 by rpki-client