Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File:                     y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier:          qyo9vNpU+DZhsWmqlQdnzis8aayWBCHU8sx7Bnww/MY=
Subject key identifier:   0B:3C:25:BC:35:49:9C:CF:18:4E:F2:D4:9F:98:50:9E:0F:9E:7F:20
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer:       /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial:       0198D4747B765244B0020C9A3567082DBD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number:          09B9
Signing time:             Sat 23 Aug 2025 01:04:20 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:20 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:20 +0000
Files and hashes:         1: 9qNQB_i0eu4jjJmVJKka4rzSK5w.roa (hash: NblnquqC2LajKbqJk5Dgnmv5h35qFu2LGP00XRuQHvU=)
                          2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: hhZ9UHh+QIgVm9UTd/U8s/hsWwCTtsh4QBZQqp8bQCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:7b:76:52:44:b0:02:0c:9a:35:67:08:2d:bd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
        Validity
            Not Before: Aug 23 01:04:20 2025 GMT
            Not After : Aug 24 01:04:20 2025 GMT
        Subject: CN=0b3c25bc35499ccf184ef2d49f98509e0f9e7f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:42:30:00:d6:f8:12:a0:2b:a9:1f:d6:6d:83:
                    e3:88:61:f0:25:7c:99:fb:86:84:b4:16:de:2f:87:
                    05:3f:fc:ef:f5:94:94:8c:2b:54:26:4e:ea:d8:26:
                    a0:55:3f:dd:a0:83:3c:31:28:fc:dd:4b:53:a4:37:
                    53:5d:55:9b:3d:8f:c6:fb:89:e2:b9:9c:32:dd:c2:
                    67:42:25:6a:67:86:5f:0f:79:88:33:7b:a9:14:27:
                    73:c2:3d:21:48:28:11:61:19:50:ce:24:96:6f:58:
                    45:ad:4d:ee:84:71:20:f6:19:3e:9f:70:45:eb:06:
                    cb:71:c9:1a:37:a6:a3:1c:d9:1c:c5:cc:5d:9c:42:
                    0b:f5:15:74:01:35:20:95:83:c2:9d:ac:70:4b:cc:
                    ea:11:c3:e1:ab:fd:3e:ac:67:db:5a:50:d1:a9:5b:
                    94:63:d5:f8:da:fe:a6:9c:b4:24:12:86:b8:98:28:
                    40:c3:a4:8f:cc:eb:62:ce:2c:a8:82:b6:bd:8b:a0:
                    23:20:fd:c1:d2:a5:c4:20:e6:71:03:b9:0b:d0:e4:
                    67:69:0b:f6:df:e6:5b:a3:2a:4d:57:f3:3a:87:bd:
                    32:63:1f:1f:62:88:6d:d4:36:a0:0d:f2:18:a2:78:
                    81:6e:d5:35:ff:ac:4f:37:d4:d1:9b:7e:09:ad:92:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3C:25:BC:35:49:9C:CF:18:4E:F2:D4:9F:98:50:9E:0F:9E:7F:20
            X509v3 Authority Key Identifier:
                keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:db:80:e4:fd:99:bd:23:48:64:af:20:b5:81:f3:76:84:
         7e:ad:0b:8b:fb:9e:b7:00:66:1d:64:6d:d6:b8:73:6b:12:6d:
         ac:ff:ab:f1:7d:7e:3e:1f:f3:ec:ae:8c:af:2e:b6:43:63:d5:
         d4:d4:a8:ed:7c:61:e9:37:6a:f7:d8:ba:c4:8b:cc:07:62:b4:
         6b:22:cb:b3:76:07:e1:d9:fc:87:19:1c:23:8a:9e:35:4c:9c:
         bf:31:2f:17:1f:f7:69:18:4f:77:8f:82:88:5e:51:5d:30:9a:
         96:85:01:7e:05:40:dd:4a:d8:76:e6:66:31:72:62:15:6d:fd:
         a1:9b:db:af:59:75:30:bb:57:a2:32:85:4e:cf:3a:13:6d:ba:
         03:29:ad:f2:48:b4:06:f0:cf:1b:f6:64:17:76:ce:aa:f3:43:
         82:0f:f9:f1:30:73:e2:ea:71:92:c1:ff:39:0c:37:09:eb:33:
         6a:61:2b:d7:7d:aa:f4:da:c2:9c:16:23:de:b5:66:c7:4e:24:
         55:bc:91:46:43:1a:7a:9c:c9:d9:a8:c4:60:53:f2:10:e5:9b:
         d9:35:7f:bc:75:cd:df:46:a4:4d:19:20:6e:73:b2:c5:fb:c7:
         70:2d:10:0e:c5:8e:a1:03:4c:18:17:31:53:6a:b1:ac:fd:1c:
         9c:d7:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:30 2025 by rpki-client