Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          0wrTChs74hRqF1x52V+Gr3QPZ9wN/4VbHw1bLKQFrlA=
Subject key identifier:   40:0D:69:CE:A6:44:B0:78:80:A0:33:91:E8:30:EF:7B:86:42:1A:0E
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       0198D7A8B33BCB729A5A8BAA17CE4B68693C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 16:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:13 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: zALGsTN4RyS3tiZUTUWrInSyHe2T6jjb685l/8zrfOs=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:b3:3b:cb:72:9a:5a:8b:aa:17:ce:4b:68:69:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Aug 23 16:00:13 2025 GMT
            Not After : Aug 24 16:00:13 2025 GMT
        Subject: CN=400d69cea644b07880a03391e830ef7b86421a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:fd:48:51:a2:a2:32:7d:dc:0d:49:62:7e:
                    e0:5f:2d:85:14:31:a3:ed:0f:45:a1:1f:0c:03:b3:
                    06:5c:bd:06:ab:e6:55:c7:c5:a1:5f:30:ab:31:a2:
                    b3:a9:62:6d:a7:e1:4f:ba:01:5a:01:56:35:24:de:
                    6a:62:e8:ea:86:e0:71:ab:17:6b:78:8b:4c:85:62:
                    c3:7b:81:77:68:42:8c:06:07:79:5a:4b:5b:3f:c3:
                    12:a6:26:64:e4:45:82:95:17:c4:a3:21:98:be:bb:
                    40:a6:61:98:89:12:a4:85:58:9e:50:90:d1:29:19:
                    5d:14:57:8c:f5:bd:5c:70:46:cd:8f:32:b6:2e:a4:
                    b1:9a:93:de:7b:91:dd:b7:d5:a7:45:fc:c1:0a:cd:
                    72:1d:8c:c0:c6:61:4b:07:20:4e:95:93:cc:dd:fd:
                    8b:1e:8c:6f:f0:1b:11:03:fc:bd:8a:e7:04:f6:08:
                    e4:9e:48:72:af:9b:5d:82:2b:03:fc:40:67:42:0c:
                    ff:cd:67:1b:d6:c4:23:32:f7:bd:62:2e:dc:13:78:
                    7e:2e:8c:55:76:d8:90:83:c9:b9:2c:66:a0:2c:4e:
                    b5:e9:d8:bf:22:e3:38:28:7c:54:fd:fe:50:69:9c:
                    8a:a3:7a:a5:4c:aa:1f:d7:57:09:fd:ab:7d:df:bc:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:69:CE:A6:44:B0:78:80:A0:33:91:E8:30:EF:7B:86:42:1A:0E
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:46:b4:10:3a:f5:92:96:92:3d:99:42:e2:19:d0:62:35:51:
         77:a3:58:e2:29:77:92:e9:6f:da:98:13:f4:c0:3a:c0:2b:06:
         bf:2c:3e:60:21:0b:7f:be:a7:dc:07:2e:01:ab:ed:9a:84:bf:
         4e:0d:88:5d:16:0d:d7:e1:e0:32:74:e8:1c:fb:7b:63:cc:74:
         d2:a3:a2:4a:7a:e5:22:a0:44:2b:52:fb:f9:22:a8:21:d0:a6:
         cf:29:61:42:2f:10:c6:e1:cf:49:1a:62:30:0b:c6:e0:dc:2e:
         5b:dd:25:81:c8:24:79:69:c3:54:10:3d:8e:ad:3b:3d:c8:b3:
         06:1f:69:32:e9:50:b6:a7:5c:16:a9:07:ca:ff:c8:a6:c7:f0:
         c2:a8:07:26:64:fb:4d:42:1b:35:de:1a:40:0e:1b:5c:a8:ce:
         1b:c5:63:48:be:55:0e:7c:8c:a3:b6:32:29:f0:f0:8f:82:8b:
         f8:fd:0e:28:14:54:75:20:92:a4:a0:39:61:d6:aa:21:06:16:
         ae:1f:36:a8:5d:f3:02:a0:10:30:36:76:af:dd:17:8e:dc:b7:
         a1:29:4e:bf:50:49:9f:61:82:6d:4f:5a:4d:e8:a3:7b:0a:9e:
         00:7f:e1:16:28:de:9c:fa:1d:80:fc:a5:ef:13:76:47:ac:6c:
         7c:fd:9a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:54 2025 by rpki-client