Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File:                     mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier:          w8FJ6vRWv3wMGlSYE8OvkdtOFpiy/bd8nLCp0zxQcaY=
Subject key identifier:   ED:09:AC:58:27:EC:B5:48:A9:49:E7:69:C8:2D:5F:69:8E:79:9A:68
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer:       /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial:       0198D66172904FB4B36E0182430B6BF7CD49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number:          067C
Signing time:             Sat 23 Aug 2025 10:02:47 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:47 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:47 +0000
Files and hashes:         1: YE7z5Yo-VebSsmgIFpnY-X43QgA.roa (hash: lLUNSeL3GzkU1y5/O/u6QldsICYnJuoTtdixE8gdS+A=)
                          2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: ODBzTawfm/Ft3mTuWZF2aAzGdN/TvUPeu8p9jjQ5/Rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:72:90:4f:b4:b3:6e:01:82:43:0b:6b:f7:cd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
        Validity
            Not Before: Aug 23 10:02:47 2025 GMT
            Not After : Aug 24 10:02:47 2025 GMT
        Subject: CN=ed09ac5827ecb548a949e769c82d5f698e799a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:08:f1:52:52:f0:bf:f0:e8:8f:90:95:73:
                    7b:89:dc:18:0c:57:33:5f:cf:52:95:86:15:c1:42:
                    15:8c:37:a7:f7:b4:4c:8e:41:da:05:dc:88:61:e1:
                    e9:65:e9:8d:a4:5c:9e:73:11:55:2f:34:bd:bc:49:
                    c1:6d:ed:e4:40:7e:f6:d4:7e:29:85:e4:dd:9d:b3:
                    14:4a:f5:f3:5e:08:2e:70:6c:db:f7:ab:37:cf:77:
                    bd:e9:06:b7:fc:bf:a1:72:ac:2d:5a:aa:13:c8:a5:
                    90:c7:c9:d7:a0:e0:7a:7b:5f:b0:78:3e:c3:d8:72:
                    3d:00:ac:7a:ab:48:da:81:78:41:59:bc:cb:f9:38:
                    d5:de:74:8e:e7:9a:b3:a0:15:36:73:ee:31:ed:66:
                    c1:2b:96:e1:27:5e:64:63:df:22:58:f0:eb:0a:17:
                    ac:86:97:1a:fd:5d:cc:c9:bc:94:00:68:df:8e:1e:
                    32:77:f4:4e:73:fa:45:28:31:b2:6e:e2:1d:f7:86:
                    1a:19:d5:29:7d:72:c0:6a:a7:67:a6:4b:71:d7:f4:
                    1f:97:0f:d7:20:59:08:6c:9a:40:e2:12:ba:37:93:
                    47:c6:56:5c:4a:10:1d:83:1e:bc:55:0a:68:4b:e3:
                    a4:f6:9e:38:c6:49:04:16:91:ae:b8:6f:5c:69:39:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:09:AC:58:27:EC:B5:48:A9:49:E7:69:C8:2D:5F:69:8E:79:9A:68
            X509v3 Authority Key Identifier:
                keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:40:05:dc:88:e0:6d:e9:b1:02:69:d9:37:d1:1e:db:44:3c:
         f5:3b:f8:8e:12:26:cb:a7:3c:87:0f:f5:69:a7:65:a5:51:81:
         75:63:01:56:69:ce:00:a5:04:f3:b1:00:0c:74:91:e9:2d:fc:
         bc:cb:81:7e:3b:bf:eb:d2:da:43:84:7a:a8:10:ec:50:5d:a0:
         04:94:ad:2c:06:ac:77:e7:ef:8c:0d:d1:60:ea:86:7b:40:1e:
         31:82:7a:8f:36:2d:16:da:39:2c:33:8c:74:1b:16:17:12:1b:
         ea:44:76:3e:27:d1:e8:ca:5a:85:65:27:bf:e1:a8:34:ad:05:
         93:4d:7c:b6:88:58:fe:fa:1a:49:3e:83:ff:04:56:48:82:10:
         d4:1e:19:cb:e0:d2:b0:71:b2:57:f7:bd:4b:42:bb:f2:2f:76:
         5e:9d:6a:42:08:3e:4e:02:44:8f:d4:36:83:0c:5a:04:a8:1b:
         85:9b:df:26:a1:90:82:10:8a:7b:5f:f6:57:b2:1d:dd:58:0a:
         9a:0b:50:a4:18:59:7f:63:3c:c2:ff:cd:b4:58:6c:55:ee:05:
         c8:5d:67:b5:c8:68:aa:f0:d1:74:0e:e8:f8:91:b7:ed:34:a0:
         54:5f:11:a8:e9:67:69:20:26:6c:ab:ca:ad:ea:d7:29:80:d7:
         63:d8:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:45 2025 by rpki-client