Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File:                     YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier:          DmTwictw/g4dkwCpq3YC8mKBjrC/4hgwf4y3DY+3PEc=
Subject key identifier:   BC:D3:8C:68:89:CA:E5:77:A2:E3:0D:3F:13:E7:4F:53:82:A8:B8:80
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer:       /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial:       0198D5BBBEE6284703A4494FD66C306E7192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number:          0C5B
Signing time:             Sat 23 Aug 2025 07:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:47 +0000
Files and hashes:         1: YJQs11xqugWoEBWoZ3oCcK3sbS4.roa (hash: 9zEKu1Xz7UUzUVy1uRJShcboHyDK7OhgJL2RQwhgJQU=)
                          2: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: LNhbacmYUDHL4KdOqF5X66JwsbuPYElOrdoe0KtuJdU=)
                          3: Ztr2Bhx4AS0t37WiXin1zbXPOD0.roa (hash: DXfe5IwyOXc8tKRY6567slHB3XZ7sa65HYm/P8E9/RM=)
                          4: kVcJYJ6Q63B4lKtQ5vKu6QeoxFU.roa (hash: zBFFe6GTU3Rj12iW+TDrkgjiFgVWN+v43RC3XAW3nrQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:be:e6:28:47:03:a4:49:4f:d6:6c:30:6e:71:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
        Validity
            Not Before: Aug 23 07:01:47 2025 GMT
            Not After : Aug 24 07:01:47 2025 GMT
        Subject: CN=bcd38c6889cae577a2e30d3f13e74f5382a8b880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:b9:04:55:9d:67:be:a7:40:bf:27:a2:c2:
                    3e:07:93:b5:40:47:b2:ec:05:df:69:fb:c2:34:a3:
                    8f:fd:ec:70:b5:2d:6e:21:31:a6:fe:90:fa:1b:06:
                    29:45:ac:ed:85:74:47:07:0c:ce:f9:bf:00:05:38:
                    3a:dc:2f:5c:a9:90:34:3d:1a:bf:f9:8e:a7:b0:83:
                    62:5b:f1:8f:a4:52:bc:78:8a:67:6d:84:64:2f:2c:
                    d7:12:2b:dd:02:45:75:95:3a:2d:33:41:a0:d1:15:
                    b8:5a:14:1e:b8:1f:fb:4c:b6:9c:fe:4c:a3:ce:0e:
                    cf:aa:f3:f3:70:f5:a2:36:c5:8d:7a:b5:cc:3d:b9:
                    0d:ac:98:66:0f:95:75:4e:1c:cf:fa:04:fa:64:87:
                    1e:ff:f0:f4:6c:00:4f:36:73:2f:32:81:90:30:1b:
                    71:d6:72:d2:72:a1:08:c3:56:e8:af:9c:6d:51:1e:
                    95:fe:54:ad:de:ec:5a:14:6a:f6:4c:eb:35:f2:a6:
                    05:d5:67:b9:c1:cc:32:81:a0:5b:24:1c:00:b1:a5:
                    c3:f9:8a:39:fc:bd:f5:9a:a1:17:0a:b6:de:ec:93:
                    9b:d0:96:69:9b:af:32:61:67:21:78:ea:9b:60:ec:
                    51:44:81:34:f8:c8:fd:0a:ef:d5:5f:8f:9e:42:46:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:8C:68:89:CA:E5:77:A2:E3:0D:3F:13:E7:4F:53:82:A8:B8:80
            X509v3 Authority Key Identifier:
                keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:31:4e:c5:74:5c:0c:09:b4:6e:88:f4:4e:98:f0:0d:4a:
         4c:ac:05:ab:1b:df:d4:99:06:9e:f4:dd:6f:c3:97:8d:07:ff:
         58:27:c4:7f:9c:e4:27:af:09:77:a5:bb:5b:0e:3b:5d:b2:76:
         1a:c8:b6:13:07:e8:3f:f8:df:3e:c8:1c:4d:3c:33:ee:c0:d8:
         85:de:28:57:af:38:43:8c:42:35:92:d1:41:ab:96:c5:2e:56:
         d9:03:9d:11:5c:a4:8c:68:8e:8d:c5:5a:d7:79:c0:7b:f7:3a:
         74:13:fe:11:f7:d1:81:9c:a0:66:53:b0:3f:bc:be:31:6f:97:
         a0:78:64:a5:97:0c:97:00:c0:02:7a:57:de:06:8a:ca:10:ad:
         d5:69:99:4c:a2:71:16:96:13:2f:07:07:0c:ca:4f:17:38:12:
         84:f6:4c:68:3d:1f:0f:ba:79:54:41:21:40:07:a2:d1:f1:1c:
         7a:88:74:28:9b:bf:ac:87:ed:2b:29:04:88:e3:9a:db:7a:c2:
         9f:02:22:95:b2:c1:bd:4f:b7:83:93:e7:bc:59:95:37:da:33:
         71:5d:16:5d:e4:f3:c6:3c:3d:e7:15:db:8a:ae:cf:97:02:33:
         32:00:68:2f:e8:5f:a9:c9:cf:44:a3:ef:43:65:3b:50:1c:11:
         90:ef:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:38 2025 by rpki-client