Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
File:                     YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json)
Hash identifier:          c//7S7ZdGTmfGz6PskGpXkpcLdAMQVEB7tAOrX2nVlI=
Subject key identifier:   09:5B:FD:7B:D7:D6:E8:19:3A:2B:D8:02:65:AD:9E:41:54:27:B8:C7
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Certificate issuer:       /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial:       0198D705C891A9CABDD4FAACB7C5A2F8F24B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
Manifest number:          107F
Signing time:             Sat 23 Aug 2025 13:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:17 +0000
Files and hashes:         1: M9EtDFxlEJ9A-FmeV5HNDDZqAp0.roa (hash: WI4ltzw0D8SzP8YIN3g88mLVBUuOvksyWitDll+8J8M=)
                          2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: sNjIKO8fzRWN9vkqXiy4zkJcIcaCPwDMN9bHG/C1RuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:c8:91:a9:ca:bd:d4:fa:ac:b7:c5:a2:f8:f2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
        Validity
            Not Before: Aug 23 13:02:17 2025 GMT
            Not After : Aug 24 13:02:17 2025 GMT
        Subject: CN=095bfd7bd7d6e8193a2bd80265ad9e415427b8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:7c:01:98:b1:ae:a1:5b:17:7b:89:51:d2:
                    4c:71:11:16:fd:fa:ca:d6:4c:2b:47:2f:a8:dd:29:
                    6d:52:2d:4a:b2:bd:ac:19:80:43:a0:1a:cd:ce:3d:
                    d6:2e:66:84:10:64:76:f2:9c:0b:90:47:23:67:1b:
                    ab:36:03:1f:60:fd:60:e4:a2:e0:ce:1a:2c:d9:a1:
                    2d:3e:ad:93:d6:98:fe:1a:bc:c7:38:56:ca:a5:23:
                    9c:b7:90:20:76:3f:31:5d:7b:7d:a0:48:fd:ee:e2:
                    48:8f:0c:d6:ff:69:08:97:4e:af:df:ed:7d:35:7e:
                    e2:7d:af:58:f2:41:1d:86:fe:4b:ec:13:a6:8d:91:
                    41:dc:09:83:92:77:65:ba:58:43:d8:49:94:e9:5c:
                    51:10:45:c8:38:b5:68:0b:eb:70:c7:2c:53:97:47:
                    71:8f:b5:a4:67:66:bd:e3:79:95:6b:40:3a:1b:ba:
                    b4:47:08:7b:6c:ce:80:b8:7b:25:9d:3e:fc:81:60:
                    51:07:2b:37:b9:b8:e6:8a:2d:e3:fe:2f:0a:ec:66:
                    6f:29:c5:a5:8f:21:0d:d2:7a:d4:b4:c6:ef:da:28:
                    ef:c3:10:e1:f0:c4:a5:fb:c8:7f:fc:df:49:ea:0a:
                    4d:e9:39:c0:fb:de:3a:54:31:0c:7d:41:89:c0:04:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5B:FD:7B:D7:D6:E8:19:3A:2B:D8:02:65:AD:9E:41:54:27:B8:C7
            X509v3 Authority Key Identifier:
                keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:fc:39:97:4a:0c:51:26:ca:79:bf:c9:1f:73:8e:92:ab:
         cf:de:3d:9e:88:f5:af:88:05:c7:b2:b0:05:da:b7:ec:5b:71:
         7b:a6:bd:51:89:72:73:85:ae:45:0c:ec:f7:82:0e:c1:06:7b:
         24:da:19:40:be:6f:8a:46:b0:ed:3e:f4:44:27:c1:4c:99:43:
         fa:a6:1a:01:c9:ac:32:39:41:09:a6:ec:96:ff:08:9f:9b:b5:
         42:77:e7:7d:72:dd:d8:5c:54:b6:e9:40:bd:93:29:2b:7a:23:
         f5:32:a3:a9:1e:31:50:5e:57:f5:ba:55:dc:43:2d:c3:52:34:
         9b:fc:a5:0d:fc:bc:24:80:3a:46:18:c1:4a:54:d8:c1:58:03:
         39:74:58:d5:3a:23:9a:6d:c8:40:0d:3c:d8:9f:15:b2:cb:0a:
         9d:b0:88:21:4a:61:a1:95:60:a6:52:f4:48:17:13:3f:39:52:
         69:a4:98:34:a7:c4:cd:5f:de:66:ef:3a:2e:b3:c0:92:49:01:
         97:0b:28:3b:b2:96:1f:c8:5e:28:8a:2b:6a:2c:4f:62:cb:90:
         bb:3c:d5:08:cc:ed:28:e8:07:64:5d:2c:a4:73:b3:f3:b4:a6:
         e7:47:d3:d4:d5:32:de:e1:5d:eb:46:92:8b:b1:a2:17:19:1e:
         8a:7f:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:23 2025 by rpki-client