Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File:                     bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier:          z0D2OgMi0lDW6XWnIA8Cs6Gt8z+fm6u3UfVmsVs8J5k=
Subject key identifier:   F8:31:C2:DA:5B:E8:9C:56:93:F7:4B:04:F2:5B:F8:3B:70:21:DA:F7
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer:       /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial:       0198D65EF72C3A5B6160296A93A8C7751617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number:          56
Signing time:             Sat 23 Aug 2025 10:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:04 +0000
Files and hashes:         1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: 1i93h9n0NJ6JsiP+ulkvVaNWRs9C/q6VW03K62vD4o0=)
                          2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5e:f7:2c:3a:5b:61:60:29:6a:93:a8:c7:75:16:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
        Validity
            Not Before: Aug 23 10:00:04 2025 GMT
            Not After : Aug 24 10:00:04 2025 GMT
        Subject: CN=f831c2da5be89c5693f74b04f25bf83b7021daf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:dd:b8:d6:16:c9:1e:f2:1a:11:27:34:f3:
                    72:29:2e:8e:06:98:e6:ad:a6:8b:1d:af:e4:50:1a:
                    69:77:0f:55:fa:90:2c:31:d1:ea:2b:b9:fd:ad:a2:
                    c5:60:b4:dd:9d:bf:0b:9b:78:65:d6:ff:f2:87:74:
                    52:f6:5c:18:d8:0e:e2:7d:fc:1d:88:82:ff:ba:99:
                    ec:29:a7:06:73:ff:bf:db:7c:97:eb:35:4a:dc:86:
                    25:13:e7:c6:ab:2f:da:f5:95:b9:5f:8b:75:c0:ec:
                    68:24:c7:38:a5:0b:0b:de:45:0c:bb:6d:cd:68:43:
                    fd:90:46:b7:77:c9:2a:17:eb:a1:55:d2:fb:e8:39:
                    ad:aa:50:e9:00:b4:ac:9a:a7:5f:71:36:d5:03:64:
                    fd:8c:a5:c2:b5:15:a5:9a:71:40:aa:2d:d4:a8:57:
                    88:a2:b3:dd:a6:94:23:59:22:33:88:4e:9a:58:fb:
                    06:10:ba:9d:a7:3f:1a:27:3e:81:c5:c6:64:a9:0a:
                    cf:28:37:23:d8:41:57:b2:73:be:80:20:1d:41:cf:
                    42:9e:ac:69:f4:12:d1:ce:06:2b:3e:00:97:5b:c9:
                    83:e9:aa:b0:a7:57:af:a6:22:9e:b6:8b:7b:47:63:
                    de:36:db:2c:9c:06:42:06:8b:35:8e:7e:c4:76:b5:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:C2:DA:5B:E8:9C:56:93:F7:4B:04:F2:5B:F8:3B:70:21:DA:F7
            X509v3 Authority Key Identifier:
                keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:92:9b:81:60:55:08:f5:99:da:cb:1d:38:4e:61:5b:25:
         25:b9:6d:9e:53:b3:40:8f:82:c6:07:bb:e5:b2:45:0c:2c:08:
         b6:50:6e:99:08:a8:52:41:2d:23:c8:45:36:7a:93:f6:af:ec:
         b5:43:03:f8:01:bc:64:ee:4b:bb:42:8a:40:ae:ef:05:62:61:
         ba:3e:bd:9f:6d:a4:14:eb:eb:b9:1e:80:61:01:83:f6:32:27:
         47:55:8f:de:94:20:5f:6a:47:75:02:88:64:58:57:49:a2:ee:
         ee:45:a4:fb:73:ac:2d:86:99:cc:fe:e4:63:03:8a:5e:83:7f:
         45:f3:f9:28:e5:c6:f5:81:0f:ab:46:f9:2b:8c:45:9e:36:b9:
         a7:d5:bc:df:df:de:f7:2c:f0:67:ee:5b:b5:36:fe:f3:dc:e3:
         e0:80:a5:91:ff:4a:27:c5:3c:1e:fd:e6:31:b3:0c:fc:e3:5e:
         00:13:9d:13:8d:4e:a4:aa:ab:ca:82:8c:50:11:19:cf:0e:e9:
         cb:05:12:9e:88:b7:0c:f8:7c:ed:95:97:85:27:db:6f:c2:d5:
         18:64:bf:ae:4e:be:ea:34:01:b1:e2:4b:45:dc:11:7a:e0:84:
         0c:27:b2:cb:5f:cf:e8:50:b7:21:83:fb:94:09:dd:19:c5:fd:
         49:72:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:31 2025 by rpki-client