Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          1cK4MrTDrfuZniz+mTk5HK6RzjyiTdq8VBlg7REZ8bY=
Subject key identifier:   84:86:87:A3:D0:BB:B7:12:D0:5D:9B:E0:50:25:72:BD:B7:0B:06:47
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       0198D58399E9DFF51DE978F01EF35B07761B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0ADA
Signing time:             Sat 23 Aug 2025 06:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:28 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: WR8rtIKB8dyKI9zoXVxHYD9DMEox5JQUPAyp7lDAvu4=)
                          2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:99:e9:df:f5:1d:e9:78:f0:1e:f3:5b:07:76:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Aug 23 06:00:28 2025 GMT
            Not After : Aug 24 06:00:28 2025 GMT
        Subject: CN=848687a3d0bbb712d05d9be0502572bdb70b0647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dc:55:54:b8:5f:ad:f1:5f:c1:00:d6:cb:82:
                    b9:79:cf:a8:30:7c:19:15:16:7e:74:d7:c3:77:bc:
                    64:f3:d5:05:44:4e:88:55:32:cf:4c:4b:f9:70:c4:
                    f5:b3:71:f1:84:19:e5:58:58:55:b9:41:9b:5a:a7:
                    4f:cd:71:5f:0d:ef:d9:b7:a4:01:a1:41:47:58:f2:
                    d8:ac:2d:5f:7a:fa:d2:a9:41:fe:dd:05:d4:05:12:
                    69:0f:f7:4c:61:21:49:df:35:52:69:c9:f3:b4:f6:
                    96:38:c0:aa:e4:53:c9:60:d6:06:00:84:75:9f:9c:
                    5f:55:81:39:fc:6a:64:4f:93:8d:b1:b5:03:d1:4a:
                    66:b1:18:a6:aa:f6:d4:ab:b3:7d:6b:92:eb:98:cc:
                    08:9d:00:b7:ab:26:0f:f0:f5:32:d9:1a:4e:42:2a:
                    f7:e1:1a:4b:f5:e3:f7:7c:d5:9b:7a:5a:ad:e4:f7:
                    20:91:b9:bd:e8:c3:d7:1a:d5:80:10:13:3f:1b:f9:
                    e8:16:4c:2e:1d:83:9d:7e:bb:fa:3c:2e:01:da:18:
                    3b:6a:ab:ef:c6:d1:d8:ba:6d:01:d2:72:13:c0:10:
                    ac:3d:6e:0c:a5:56:56:7f:8e:22:94:40:d4:ef:46:
                    22:f1:bf:a3:e5:33:19:e5:49:f7:f8:af:c6:f2:c3:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:86:87:A3:D0:BB:B7:12:D0:5D:9B:E0:50:25:72:BD:B7:0B:06:47
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:56:fb:b6:0b:ea:f5:e2:47:ff:88:92:61:9a:84:84:e4:53:
         d9:8d:73:de:3f:26:31:f5:44:a7:97:2e:d6:cc:d0:d6:58:3e:
         7a:33:af:9c:5b:4e:cd:16:69:e5:07:7e:bb:06:b6:e8:47:6e:
         c6:7b:e6:b8:6c:c6:18:8d:b7:67:7c:c5:23:49:a8:e2:03:1d:
         04:b5:aa:38:f5:a3:59:a0:fd:3e:71:49:5b:69:82:70:16:7b:
         c5:88:a2:e9:20:3e:75:b5:7b:3f:b4:d8:84:8f:6a:78:b8:a5:
         c2:12:1f:9a:13:13:35:a0:a3:39:19:4a:24:5f:b6:88:13:1b:
         73:68:2b:62:ff:8e:15:71:c9:a7:bf:f7:0f:3e:43:86:42:c9:
         83:b0:c5:22:a9:3c:ea:ab:0f:f2:71:11:7d:95:85:97:af:33:
         3b:99:eb:f4:e7:f2:0b:a7:ee:27:82:d1:2c:21:65:b1:f1:90:
         85:ae:01:22:42:a5:cf:8e:53:18:de:07:66:a7:44:53:2e:ca:
         ea:05:c8:3f:d5:92:1c:7c:6b:05:c6:1a:ad:5c:16:54:7a:72:
         ad:70:ba:a7:18:80:1b:b4:f2:19:70:16:d5:70:36:24:64:4e:
         53:ef:da:3b:aa:df:8f:ae:08:d4:26:e3:31:7e:51:48:4c:99:
         5f:4a:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:09 2025 by rpki-client