Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          cllUFgJwOW8vpNydUZ5/mKGVAcPK6//Jphdt3urZuKE=
Subject key identifier:   F4:2F:48:48:6F:38:F7:8F:F2:5A:E9:21:24:65:33:A8:53:20:B2:70
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       0198D660AFA0EB226EB8C43FC87CD0A90FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          094F
Signing time:             Sat 23 Aug 2025 10:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:57 +0000
Files and hashes:         1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: atcp+ropbfhyFw2mdQvK9VfLjN1UYowph0nTmjxTPVk=)
                          2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:af:a0:eb:22:6e:b8:c4:3f:c8:7c:d0:a9:0f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Aug 23 10:01:57 2025 GMT
            Not After : Aug 24 10:01:57 2025 GMT
        Subject: CN=f42f48486f38f78ff25ae921246533a85320b270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:77:72:4d:4b:2e:d1:43:47:b1:3b:65:39:
                    76:d7:b1:4e:fd:2a:15:18:d6:49:66:9d:90:33:86:
                    63:f9:f9:c1:be:1e:5f:e2:82:f9:ea:38:e4:01:5e:
                    04:98:26:54:96:9d:6b:69:2b:cb:35:ad:b2:a6:e4:
                    5d:f1:e4:3c:4d:d1:55:fd:28:8e:97:cd:b9:b4:a6:
                    a1:b0:54:1a:86:30:fe:17:f9:93:87:c0:c1:bc:cf:
                    5f:35:59:f6:f4:17:9b:92:c5:db:30:1a:a1:a8:01:
                    9b:3b:a2:44:c2:49:1c:ab:c3:90:64:6d:78:4b:ad:
                    17:ac:dd:e8:76:c0:37:80:06:6d:64:3c:4f:38:cf:
                    c6:78:01:3e:9e:ae:c5:36:c5:c6:2a:f0:4f:f9:3c:
                    21:80:16:05:24:7a:2b:76:54:e6:a8:d9:93:e3:80:
                    36:c6:37:55:db:76:c6:c4:06:13:3c:81:2a:55:94:
                    12:91:45:4e:bc:c9:2e:9d:55:17:34:d4:3f:e2:ea:
                    1d:93:7e:5a:47:ac:94:3f:dc:6b:7b:b8:38:0f:ee:
                    88:91:a5:12:12:74:5a:72:81:aa:ac:f7:a9:08:c0:
                    d6:f3:cd:cc:90:76:e1:c2:c8:68:67:4f:7d:8f:a8:
                    5d:da:c7:e9:65:04:56:4f:e5:04:31:d2:a0:fb:e3:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2F:48:48:6F:38:F7:8F:F2:5A:E9:21:24:65:33:A8:53:20:B2:70
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:23:80:ea:60:d2:6d:7e:9d:e0:a1:f4:0a:df:ac:71:78:58:
         a2:70:a7:17:c8:f5:46:47:b8:c1:63:32:21:18:3a:d6:67:50:
         ba:22:95:a6:0c:fe:b9:88:a1:38:c5:39:e4:e7:4d:2a:ac:32:
         b5:71:39:cc:ab:37:fd:28:e1:01:89:93:58:7f:06:d5:e5:26:
         5d:7a:7e:4e:ac:f7:99:c7:86:74:6d:14:62:ac:98:bd:41:dd:
         52:db:85:af:fc:ec:84:41:9d:89:d9:67:9b:c0:1f:8c:3a:43:
         9f:3f:75:2f:8f:46:c8:d6:de:5b:dc:63:25:24:a2:5c:ee:fe:
         27:51:78:19:04:a7:8d:46:9d:c0:ae:c1:55:80:03:d9:91:ff:
         5a:d3:ca:ba:4f:70:17:f2:7b:21:f3:a0:e2:00:46:15:e4:6b:
         45:99:9e:13:7d:fc:0d:01:6d:d4:33:fc:b7:15:3d:59:33:2f:
         64:cc:21:63:f1:9d:56:fa:38:e4:d6:01:79:36:d2:40:be:f4:
         d1:a8:5f:ac:04:b7:17:88:a2:32:06:21:76:7a:a0:85:56:2b:
         29:66:88:8e:45:82:2e:13:6d:45:0d:ed:f9:56:fc:4c:de:05:
         36:5f:88:67:64:55:33:59:2c:65:51:c0:bb:22:54:e8:7e:01:
         84:56:04:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:36 2025 by rpki-client