Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          3KTIpIDwFGLfx/52XPFyqKbQEeMjR4IZBdDRiDBeJQ8=
Subject key identifier:   B9:F8:90:B5:78:B6:1B:7A:C5:3C:D9:C6:5D:3D:87:04:8A:F0:7E:C3
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       0198D5F17B7463AA752DE47A012ACAE78B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          04FA
Signing time:             Sat 23 Aug 2025 08:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:29 +0000
Files and hashes:         1: 2zI93eWS4MAq1q_HzWCmHMK0vvc.roa (hash: OPrS0FrS6pSekQT7FXidaqihz4eIxPAHQ00wl3WWNU8=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: 8KWzyvzcFYI8NJ9A3ashBFkxG6pHWVrqRWuRxmfpVRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:7b:74:63:aa:75:2d:e4:7a:01:2a:ca:e7:8b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Aug 23 08:00:29 2025 GMT
            Not After : Aug 24 08:00:29 2025 GMT
        Subject: CN=b9f890b578b61b7ac53cd9c65d3d87048af07ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:d6:44:e0:ed:e9:c4:5a:e9:7f:6b:46:dc:
                    35:4f:25:1d:a9:fe:f5:4e:83:47:12:71:92:8f:8d:
                    0e:87:b4:f2:97:91:69:ed:99:bf:13:e5:f7:b2:56:
                    f7:63:0b:1d:5f:d6:ad:d5:09:88:c5:b4:d6:47:3f:
                    21:34:40:cd:42:60:92:08:96:6e:27:65:78:89:f5:
                    a1:cf:3e:7d:75:f7:dc:80:ef:d4:7e:cd:c4:82:16:
                    a7:ce:74:33:c8:aa:ab:04:96:5a:ae:39:d4:78:01:
                    55:81:ce:f5:1e:cf:9b:4f:38:ca:e6:b2:f6:a4:ff:
                    49:4e:b4:c7:8f:4e:3f:e8:2c:ad:c0:35:e4:f2:f6:
                    ab:f4:91:99:e9:c3:31:9f:9a:01:29:30:52:72:dc:
                    e0:ee:28:56:a6:95:6e:7d:41:07:9e:57:7b:63:46:
                    25:6f:0d:1f:8a:02:dd:ed:0a:45:08:ae:f3:d4:73:
                    13:dc:d8:b8:23:d4:bc:46:e7:e0:15:41:1a:68:8b:
                    e9:f7:6d:00:88:bd:93:c6:25:64:2f:00:5b:d1:87:
                    bd:6c:d4:91:d3:0e:58:6f:0e:7a:11:1f:d4:1a:21:
                    fd:d0:31:0e:b1:b5:8b:cb:6d:a0:1a:87:fb:da:b4:
                    e3:d7:ea:d9:50:d4:c7:64:4e:9f:98:69:4f:da:63:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:90:B5:78:B6:1B:7A:C5:3C:D9:C6:5D:3D:87:04:8A:F0:7E:C3
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:89:58:a8:73:a7:ba:a6:5a:43:65:64:23:36:22:ab:9e:01:
         f5:28:1f:f1:ac:43:4c:70:3f:94:64:6a:c8:96:d6:e0:b5:ec:
         d5:9b:1d:8c:8b:a3:97:ff:b4:64:52:48:d0:05:89:68:99:0e:
         4f:a8:9f:b7:47:7f:99:d9:62:cb:e3:13:75:ed:fe:2f:25:26:
         dd:c1:13:2b:aa:fd:6b:e5:f5:72:10:82:6e:22:b1:9b:91:34:
         2f:a2:97:a7:42:44:71:ca:61:99:94:79:38:8d:22:7f:0a:66:
         82:a4:be:a8:f7:bc:b4:f0:8a:1d:3b:06:42:44:9d:2e:dd:69:
         cc:b2:3e:1b:bf:c4:ac:de:83:9f:06:4b:df:91:e1:fd:ee:5e:
         70:8c:62:b0:d8:72:34:50:5d:32:0b:b1:4e:fb:f2:4a:78:71:
         ea:98:10:b0:b8:cd:e5:55:aa:e9:73:63:3a:f5:a0:58:ba:88:
         de:6e:19:68:24:0e:66:96:69:c2:58:bb:cf:b7:dc:7a:c9:07:
         0a:72:92:17:cb:98:20:7c:4b:9e:d6:64:e6:cc:56:7b:3d:32:
         ce:03:dd:c1:29:d8:5f:33:da:71:6e:24:d2:d0:ef:52:7c:32:
         d4:15:1a:a7:bb:d5:8b:68:92:2f:1e:04:8c:34:d3:9b:aa:32:
         b9:c1:d7:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Xt0Y6p1LeR6ASrK54tuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNDA3MzJmZGJjYWE1MjkwMGRiMjQ2MjA3NWJmNGVmMTUx
NTk2OTUwHhcNMjUwODIzMDgwMDI5WhcNMjUwODI0MDgwMDI5WjAzMTEwLwYDVQQD
EyhiOWY4OTBiNTc4YjYxYjdhYzUzY2Q5YzY1ZDNkODcwNDhhZjA3ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmPWRODt6cRa6X9rRtw1TyUdqf71
ToNHEnGSj40Oh7Tyl5Fp7Zm/E+X3slb3YwsdX9at1QmIxbTWRz8hNEDNQmCSCJZu
J2V4ifWhzz59dffcgO/Ufs3EghanznQzyKqrBJZarjnUeAFVgc71Hs+bTzjK5rL2
pP9JTrTHj04/6CytwDXk8var9JGZ6cMxn5oBKTBSctzg7ihWppVufUEHnld7Y0Yl
bw0figLd7QpFCK7z1HMT3Ni4I9S8RufgFUEaaIvp920AiL2TxiVkLwBb0Ye9bNSR
0w5Ybw56ER/UGiH90DEOsbWLy22gGof72rTj1+rZUNTHZE6fmGlP2mPSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLn4kLV4tht6xTzZxl09hwSK8H7DMB8GA1UdIwQY
MBaAFGBAcy/byqUpANskYgdb9O8VFZaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUt
ZDJiNjk4MmJjNDg0LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81Njc2YTMtOWMzOS00ZGIwLTk1MWUtZDJiNjk4MmJjNDg0
LzEvWUVCekw5dktwU2tBMnlSaUIxdjA3eFVWbHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4lYqHOn
uqZaQ2VkIzYiq54B9Sgf8axDTHA/lGRqyJbW4LXs1ZsdjIujl/+0ZFJI0AWJaJkO
T6ift0d/mdliy+MTde3+LyUm3cETK6r9a+X1chCCbiKxm5E0L6KXp0JEccphmZR5
OI0ifwpmgqS+qPe8tPCKHTsGQkSdLt1pzLI+G7/ErN6DnwZL35Hh/e5ecIxisNhy
NFBdMguxTvvySnhx6pgQsLjN5VWq6XNjOvWgWLqI3m4ZaCQOZpZpwli7z7fceskH
CnKSF8uYIHxLntZk5sxWez0yzgPdwSnYXzPacW4k0tDvUnwy1BUap7vVi2iSLx4E
jDTTm6oyucHXBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:22 2025 by rpki-client