Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
File:                     Yefv0ZrydUeUJswZJcW8Ls7ums4.mft (raw, json)
Hash identifier:          5uIXyMV0avZnE4zQGrt5wxCOFFRfoqC8hzFUnSQyijg=
Subject key identifier:   96:DA:A6:5B:FE:DC:54:56:84:A1:16:69:C3:54:44:E1:25:BC:A3:11
Authority key identifier: 61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE
Certificate issuer:       /CN=61e7efd19af275479426cc1925c5bc2eceee9ace
Certificate serial:       0198D5BBD06228A31514E4E4562AC2DAF7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
Manifest number:          155B
Signing time:             Sat 23 Aug 2025 07:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:52 +0000
Files and hashes:         1: Yefv0ZrydUeUJswZJcW8Ls7ums4.crl (hash: E4rC/WgP3E808HZdDHhT6csj3u3dHq8YFJUiuJBzI2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d0:62:28:a3:15:14:e4:e4:56:2a:c2:da:f7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7efd19af275479426cc1925c5bc2eceee9ace
        Validity
            Not Before: Aug 23 07:01:52 2025 GMT
            Not After : Aug 24 07:01:52 2025 GMT
        Subject: CN=96daa65bfedc545684a11669c35444e125bca311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:64:84:50:24:09:2a:8b:eb:93:8d:17:27:
                    f7:59:32:8b:b5:0a:9f:d7:f2:79:d5:6c:ed:17:41:
                    ca:22:9e:17:e0:ac:92:c5:53:da:45:89:54:b9:74:
                    68:a7:bc:c3:75:af:85:fd:17:80:a8:5d:ec:16:98:
                    d6:cc:f3:fd:53:9d:53:6f:54:86:4f:89:74:54:84:
                    b6:0a:52:97:9e:0b:08:40:0d:2d:d2:f6:46:b8:79:
                    4e:ff:88:7c:88:63:4a:24:8a:53:8c:24:e6:5d:a8:
                    79:bd:a4:0f:77:8c:b1:b7:e2:1e:87:85:0b:89:6f:
                    c3:fa:a9:d6:15:d2:32:c2:dd:15:e0:c2:6c:68:90:
                    e7:15:14:1c:d7:02:b5:50:86:c7:7c:e6:48:65:01:
                    bf:af:da:ab:c2:16:a2:6b:15:b3:df:2c:52:21:b1:
                    ce:6d:c1:84:6d:c6:99:3d:43:f1:59:b7:b6:e9:db:
                    15:1e:45:5d:0c:b0:64:17:7a:f4:0e:f3:d8:c9:11:
                    bf:bc:fc:21:2f:cd:4b:d7:73:ea:b3:dd:5b:15:59:
                    36:64:01:d9:d9:c9:03:d8:55:b8:77:bd:a6:81:7f:
                    30:c9:3e:50:29:d7:54:84:05:83:02:2a:0b:ce:16:
                    eb:64:4f:82:f1:76:05:40:0f:a6:72:88:86:b4:1a:
                    5d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DA:A6:5B:FE:DC:54:56:84:A1:16:69:C3:54:44:E1:25:BC:A3:11
            X509v3 Authority Key Identifier:
                keyid:61:E7:EF:D1:9A:F2:75:47:94:26:CC:19:25:C5:BC:2E:CE:EE:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yefv0ZrydUeUJswZJcW8Ls7ums4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/e3c390-e475-4024-ac7f-08740df87106/1/Yefv0ZrydUeUJswZJcW8Ls7ums4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:aa:fd:24:e1:44:6e:ee:5f:59:2c:58:86:ae:16:f6:50:
         79:42:c4:8b:69:70:34:ff:a3:e9:c0:ac:38:e1:aa:5c:ae:06:
         3e:e0:7f:7c:82:c1:32:57:be:8e:72:2f:80:4d:b7:4f:84:56:
         01:ba:46:b4:11:db:06:67:22:35:b7:ca:d1:a1:a5:f0:df:1f:
         b3:c3:5c:43:bc:31:11:cb:d3:4f:ab:b7:cc:4c:2e:62:53:c4:
         fc:d4:ed:b0:62:44:6b:df:f5:8d:dc:84:1e:f4:4c:a7:d6:7c:
         49:0e:7f:6b:72:fb:56:90:8a:c9:4d:39:d0:c1:4a:a0:ef:42:
         4a:63:3f:4f:d5:97:49:45:31:f1:7e:ad:cd:7e:9f:39:02:df:
         2a:98:f6:70:db:ec:0d:4d:59:fb:87:e1:68:bb:ba:cd:ff:25:
         cf:3d:f5:66:b8:83:b3:f6:b3:54:a0:bf:12:4f:36:48:36:83:
         ec:54:c1:53:7a:14:c4:bc:a8:1e:10:58:a1:10:8a:65:c6:1d:
         1d:c5:64:43:e9:91:39:16:6b:2a:f3:c7:4e:07:b6:75:e9:5b:
         3c:17:da:40:c8:92:6e:28:75:6a:c9:78:d0:bd:e6:4e:87:67:
         43:a8:b4:43:03:dc:bc:f6:c3:8f:83:c0:f2:12:d1:75:dd:95:
         2d:62:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:36 2025 by rpki-client