Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File:                     YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier:          R4Qq1Y3fY6Wk2YiBXxuan+CaYB8xOzyAvbfX5d6vg7E=
Subject key identifier:   ED:62:93:8E:A8:EB:83:CF:30:80:51:A5:68:42:C1:10:31:46:B4:3D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer:       /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial:       0197D285B1C53205E3F8F97C0BE0B87BC0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number:          07A5
Signing time:             Thu 03 Jul 2025 23:01:06 +0000
Manifest this update:     Thu 03 Jul 2025 23:01:06 +0000
Manifest next update:     Fri 04 Jul 2025 23:01:06 +0000
Files and hashes:         1: 1-dSr_bwrsUwvfc9qQEvsXILMv3w.roa (hash: SF5ovM+mleomLfSZp/NHDAE5s82AVbxDbWTJFXrQrE0=)
                          2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: z/60axp2tQDo0qe1Vw+9sygATeVGhFo0MR9Nr0EE3e4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:85:b1:c5:32:05:e3:f8:f9:7c:0b:e0:b8:7b:c0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
        Validity
            Not Before: Jul  3 23:01:06 2025 GMT
            Not After : Jul  4 23:01:06 2025 GMT
        Subject: CN=ed62938ea8eb83cf308051a56842c1103146b43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:23:b0:33:a8:d8:3a:5c:e5:28:6f:0b:3d:
                    c9:8b:b8:16:31:7e:1f:00:3c:62:ef:76:02:04:9c:
                    30:49:74:ad:13:cc:73:ab:c4:c6:0e:bd:08:c9:c1:
                    d1:4a:1b:b1:8e:f4:51:0b:07:10:a0:e1:e5:ae:35:
                    16:9a:df:97:cf:aa:ff:cb:e4:89:35:ac:4e:e5:01:
                    81:da:f7:a1:9a:cb:b3:2d:13:7b:28:da:cf:5b:65:
                    ec:99:c9:fc:ad:7f:30:42:08:d7:62:70:3d:6c:75:
                    96:10:c8:c3:15:ce:8c:06:3f:44:55:7e:a3:06:4c:
                    b9:c6:44:13:fb:3a:0b:34:61:1f:3e:aa:57:b7:7d:
                    a7:a7:79:48:74:eb:b4:f5:21:e8:c5:2e:8a:0d:d9:
                    ef:6d:6f:39:c4:79:85:cc:5d:0e:f8:23:e4:7b:3e:
                    e5:92:08:c8:47:d9:5e:08:c9:98:10:fc:27:9a:92:
                    e4:a4:ec:b4:2e:a2:96:55:eb:85:ec:b0:f2:82:d8:
                    d3:00:54:8c:89:13:5e:73:90:84:af:4c:48:90:ea:
                    17:7e:52:f0:8b:3a:d0:6a:69:ec:7b:7d:b8:80:e4:
                    d6:b2:9f:e7:6a:e1:62:d4:84:bc:e2:79:ae:7b:2a:
                    ef:93:9b:6e:5b:9e:ea:f5:6d:a9:8d:9c:c2:d2:c2:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:93:8E:A8:EB:83:CF:30:80:51:A5:68:42:C1:10:31:46:B4:3D
            X509v3 Authority Key Identifier:
                keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e5:d3:9c:0a:b2:4c:7f:d0:39:ff:33:6d:55:15:06:c3:c9:
         ca:67:f6:8f:5d:22:e9:d4:84:09:ff:5a:62:2e:4f:f6:fd:ec:
         53:d9:71:02:86:ef:8d:d5:3d:84:17:2e:2f:3a:21:bf:dd:1c:
         9d:04:50:3b:62:0e:ad:ae:e8:d5:8e:3b:d3:f8:c6:80:08:88:
         a1:be:6d:cb:74:5b:d1:71:d3:d9:48:57:f3:81:93:c6:38:5b:
         45:56:98:f6:c1:47:cf:62:be:37:12:d7:f5:8e:f3:21:b3:e1:
         6e:39:93:9f:c1:3a:d5:ae:de:56:68:e8:35:3f:22:a8:c7:4e:
         c9:39:89:a8:3f:d9:ff:a9:33:7b:c7:bf:91:dc:08:6e:a1:54:
         4b:ab:04:c1:86:f1:42:48:6f:6c:6f:20:da:70:08:d3:fd:77:
         0c:ad:e3:7f:ce:d2:16:e0:df:e4:7f:e6:b4:f6:d4:a8:57:85:
         02:9a:c0:37:4f:b9:ca:ec:d6:02:b9:73:09:c5:50:e8:86:40:
         12:bb:cd:40:2e:3b:db:4f:2b:5d:dd:9d:e7:cb:53:72:33:15:
         51:0b:9b:22:e0:44:9f:8c:63:6d:ef:e1:ba:a9:3f:f5:a8:21:
         4e:be:48:67:33:56:ce:75:41:1d:17:5e:0c:c1:c7:96:06:c2:
         b8:92:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:16:55 2025 by rpki-client