Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File:                     yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier:          FUJsT+KCuIojl/6/76VqVvdCr8Y2si1O2awHG3QNJOo=
Subject key identifier:   F9:8E:6B:34:67:28:A6:4C:E3:38:D6:2C:66:8E:19:1A:5D:32:A8:E1
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer:       /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial:       0198D4DFFF026D23C8E4778AD80B8837A8A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 03:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:46 +0000
Files and hashes:         1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: gMUsjadsvoBflVJZFircl35+PhauF9nUDGJPCEqEa8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ff:02:6d:23:c8:e4:77:8a:d8:0b:88:37:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
        Validity
            Not Before: Aug 23 03:01:46 2025 GMT
            Not After : Aug 24 03:01:46 2025 GMT
        Subject: CN=f98e6b346728a64ce338d62c668e191a5d32a8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:89:80:ba:d0:25:34:3b:88:8d:98:de:fe:
                    fc:83:54:23:d7:87:88:69:88:f5:3b:78:53:73:37:
                    9c:1f:de:22:4d:18:c7:28:d1:e6:e7:44:de:50:33:
                    55:c6:c6:c9:1b:6c:5d:9a:ac:98:bd:1f:a6:81:39:
                    a1:61:bd:30:08:67:34:42:f2:d8:9d:42:6b:5d:66:
                    6c:6b:c9:81:f2:3d:a9:4e:eb:7b:a9:e2:d0:36:24:
                    e5:84:21:4a:62:a0:ec:bf:99:94:ec:93:e6:28:4b:
                    7a:41:ee:dc:c3:2c:cb:20:da:88:b2:87:64:6e:42:
                    22:29:d7:6c:58:79:be:cd:5c:e5:0c:5c:e2:19:b5:
                    e1:45:b4:7b:a1:36:fa:cd:04:d2:63:aa:5d:48:69:
                    1f:f5:e3:4b:8a:3a:52:4f:96:22:9b:dd:2d:eb:40:
                    60:23:2c:c4:d2:d2:b5:78:84:44:a2:95:5f:e6:0c:
                    32:2b:d5:2e:48:2b:93:9d:af:27:1e:bb:7d:18:3f:
                    6e:e2:72:9d:f4:d7:69:e8:32:7b:51:34:50:ea:e1:
                    b9:55:79:05:6f:77:f3:89:26:e3:f4:b4:58:12:0c:
                    8c:76:04:eb:c3:e1:14:14:96:ac:f5:d5:ec:8f:c7:
                    af:60:2b:df:3a:95:3b:4d:36:c6:37:2b:ea:7e:74:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:6B:34:67:28:A6:4C:E3:38:D6:2C:66:8E:19:1A:5D:32:A8:E1
            X509v3 Authority Key Identifier:
                keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:70:d5:af:b7:9a:8c:41:b7:87:ca:d6:76:b0:23:1b:9e:de:
         ac:b1:05:3e:9f:ad:f2:e8:18:d3:13:03:fa:05:0d:09:4e:ba:
         47:31:bc:3b:eb:fe:76:5f:fd:f4:04:3b:e3:8f:a9:3f:ee:86:
         db:a4:e9:49:95:8f:91:3e:78:93:c9:97:9f:ee:d8:00:55:ac:
         ba:30:22:9c:ac:7e:8b:f7:b7:f7:ac:56:8c:d1:ae:97:66:62:
         38:17:b7:f6:b9:25:9a:bf:25:3e:a0:dc:bc:45:42:19:eb:22:
         30:95:a2:3c:ec:fd:a0:16:e0:ad:67:34:00:df:27:f5:89:2e:
         24:c5:c1:0a:25:f7:80:02:c9:34:07:2e:97:6e:a9:a1:68:dc:
         66:74:73:28:35:cc:ca:c4:d5:c1:7a:49:8a:49:be:70:6a:50:
         0b:67:2e:3c:30:d1:a7:da:3a:c0:8b:6e:57:01:69:8e:47:74:
         7e:03:90:07:f6:f2:8f:b6:39:17:7e:b6:f0:97:1a:0d:d6:73:
         f3:5c:09:21:92:e3:d4:61:ea:a5:5a:d4:11:df:68:22:27:e3:
         65:4b:e1:47:79:fa:c3:78:e9:00:1a:a5:e8:4d:b2:a3:5e:ec:
         d2:6a:ed:53:6b:7e:8e:87:2b:ee:c2:4a:35:3a:0f:c5:19:90:
         d1:13:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----