Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File:                     yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier:          SO79sZpzsc3OPXE00BsNazW5t/AUpl/7N9MV2bkcHJo=
Subject key identifier:   61:26:0A:CA:C5:98:8A:37:A3:95:B5:D6:45:87:D0:21:20:BD:2A:7D
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer:       /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial:       0198D69884FDDA2B2FE4323CE5D204EA7FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number:          03F0
Signing time:             Sat 23 Aug 2025 11:02:56 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:56 +0000
Files and hashes:         1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
                          2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: uQUwkCjxLAdrvo916fnw5/8U7i9NcqjqXKhR8uYAf+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:84:fd:da:2b:2f:e4:32:3c:e5:d2:04:ea:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
        Validity
            Not Before: Aug 23 11:02:56 2025 GMT
            Not After : Aug 24 11:02:56 2025 GMT
        Subject: CN=61260acac5988a37a395b5d64587d02120bd2a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:d8:19:5d:a3:36:3d:f1:ce:da:7c:41:09:
                    e1:22:b8:24:79:11:18:03:af:eb:12:68:d3:2e:68:
                    90:4b:9a:92:30:09:11:37:5c:c7:77:58:c5:b9:e1:
                    ad:d8:6a:52:98:5a:37:47:6b:54:72:32:90:03:be:
                    2f:d3:3b:46:29:9c:d5:c7:7e:34:14:87:e6:aa:39:
                    ad:bc:dd:03:14:4f:0d:85:c6:58:92:56:b7:ca:8d:
                    6f:df:ff:33:ba:9f:fb:a3:8f:66:83:4e:96:24:9f:
                    89:5e:13:68:a1:59:62:c1:5d:ee:2a:6b:30:54:b8:
                    d2:4b:85:b0:d0:1d:48:e4:2a:9b:07:95:62:db:a0:
                    1a:dd:02:18:46:74:c1:04:7e:12:fa:1a:9a:37:28:
                    21:2f:8a:c9:3e:fe:45:f1:67:6d:09:3e:da:51:e4:
                    45:04:0d:3f:a1:7e:89:8b:3b:46:cf:cb:02:68:b0:
                    74:f1:2e:19:16:65:f9:6d:69:b2:71:d4:b2:c8:30:
                    0f:1e:8f:f7:a8:bd:9f:f0:0b:f8:bb:7d:a0:8d:70:
                    73:01:92:a4:4c:d0:bf:9f:05:39:95:a3:75:5d:aa:
                    3c:f7:d8:2c:ea:53:3b:bb:7b:c4:62:d9:92:7f:d6:
                    28:45:99:48:94:2e:df:47:94:db:c5:72:48:f5:4e:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:0A:CA:C5:98:8A:37:A3:95:B5:D6:45:87:D0:21:20:BD:2A:7D
            X509v3 Authority Key Identifier:
                keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:97:b5:4a:46:83:9d:5c:b1:70:cb:1b:ae:8b:e0:4a:2c:51:
         41:01:60:94:11:6c:64:d0:1d:a4:2b:2c:77:d8:5c:28:03:e7:
         88:07:85:3d:2a:fa:53:8a:f5:1a:42:19:87:b4:41:2a:78:02:
         0d:55:bd:b4:ee:f2:27:bf:85:c2:8f:73:ef:b2:25:78:b6:13:
         f1:c0:5b:69:73:c4:f4:d2:59:37:b2:6b:f1:ba:d9:94:9a:da:
         9d:56:c4:4f:0a:c8:f1:4f:7e:7c:2d:ab:61:32:bc:00:e7:96:
         b8:02:dc:c7:d9:ae:c5:75:b2:05:68:56:02:21:84:b5:4c:95:
         cf:b1:8e:15:5d:58:d5:f8:96:07:85:6f:81:8a:54:18:af:cc:
         e6:35:d9:32:1c:ad:ca:78:54:ff:af:05:77:ff:cd:a7:9f:56:
         5f:48:d5:17:bb:8b:a5:bd:ea:8b:01:de:2c:0e:d2:ae:13:50:
         19:61:33:cd:1d:25:e2:62:e5:d1:02:25:d9:29:78:c0:31:ff:
         1e:a1:0c:bf:b9:89:00:a9:22:51:7b:af:39:8f:27:ba:11:07:
         73:7f:df:db:96:82:e9:71:5f:39:9b:d2:27:be:7b:c8:4d:35:
         3e:e0:fe:43:cc:19:65:80:4f:4a:90:23:77:79:9c:9e:c7:94:
         24:f3:37:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmIT92isv5DI85dIE6n/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTJkOGJhMmUwODk0ZGQwNmNhMTQzYTU1MTcyMzRlNTg0
YWY4YzcwHhcNMjUwODIzMTEwMjU2WhcNMjUwODI0MTEwMjU2WjAzMTEwLwYDVQQD
Eyg2MTI2MGFjYWM1OTg4YTM3YTM5NWI1ZDY0NTg3ZDAyMTIwYmQyYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaPYGV2jNj3xztp8QQnhIrgkeREY
A6/rEmjTLmiQS5qSMAkRN1zHd1jFueGt2GpSmFo3R2tUcjKQA74v0ztGKZzVx340
FIfmqjmtvN0DFE8NhcZYkla3yo1v3/8zup/7o49mg06WJJ+JXhNooVliwV3uKmsw
VLjSS4Ww0B1I5CqbB5Vi26Aa3QIYRnTBBH4S+hqaNyghL4rJPv5F8WdtCT7aUeRF
BA0/oX6JiztGz8sCaLB08S4ZFmX5bWmycdSyyDAPHo/3qL2f8Av4u32gjXBzAZKk
TNC/nwU5laN1Xao899gs6lM7u3vEYtmSf9YoRZlIlC7fR5TbxXJI9U5NxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEmCsrFmIo3o5W11kWH0CEgvSp9MB8GA1UdIwQY
MBaAFMsS2LouCJTdBsoUOlUXI05YSvjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMt
MzRlMjI3OWJlNzY1LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZDE2OTYtMzM0MS00ZGRiLThlMjMtMzRlMjI3OWJlNzY1
LzEveXhMWXVpNElsTjBHeWhRNlZSY2pUbGhLLU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJe1SkaD
nVyxcMsbrovgSixRQQFglBFsZNAdpCssd9hcKAPniAeFPSr6U4r1GkIZh7RBKngC
DVW9tO7yJ7+Fwo9z77IleLYT8cBbaXPE9NJZN7Jr8brZlJranVbETwrI8U9+fC2r
YTK8AOeWuALcx9muxXWyBWhWAiGEtUyVz7GOFV1Y1fiWB4VvgYpUGK/M5jXZMhyt
ynhU/68Fd//Np59WX0jVF7uLpb3qiwHeLA7SrhNQGWEzzR0l4mLl0QIl2Sl4wDH/
HqEMv7mJAKkiUXuvOY8nuhEHc3/f25aC6XFfOZvSJ757yE01PuD+Q8wZZYBPSpAj
d3mcnseUJPM3/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:55 2025 by rpki-client