Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File:                     yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier:          qxy6q0vgMXfKuNA7alr93Lvrz0K1CP7tzEC5lmTs3kc=
Subject key identifier:   06:71:0F:19:35:DE:C3:30:A3:8A:4A:34:F3:8C:E6:E8:FE:B4:20:FE
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer:       /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial:       019654250D0FCD3D940A36DD1C6990D41803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number:          0B93
Signing time:             Sun 20 Apr 2025 17:00:36 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:36 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:36 +0000
Files and hashes:         1: 3DeOifSeLxMUCM20VxHQS5cXQE4.roa (hash: 783WmkyHs/Bvag8AxFOjFyrEJCCbAmS83HXavAaPMKY=)
                          2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: PFHvv5ef4lefDUTswWsE+Og/2TisUoTcVcedKPhBrso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:0d:0f:cd:3d:94:0a:36:dd:1c:69:90:d4:18:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
        Validity
            Not Before: Apr 20 17:00:36 2025 GMT
            Not After : Apr 21 17:00:36 2025 GMT
        Subject: CN=06710f1935dec330a38a4a34f38ce6e8feb420fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:ad:99:c1:11:da:4f:8b:7e:4a:3f:77:00:
                    0d:e6:8a:b8:2d:80:3e:78:01:84:41:f3:a3:51:cd:
                    60:70:b4:78:ca:0d:a1:4c:ae:c6:27:0b:ce:12:cd:
                    2e:43:1a:76:07:b5:35:95:53:69:31:c6:40:0b:c1:
                    c4:b9:81:aa:f7:3b:5b:3b:0d:17:cb:c8:34:e5:20:
                    0d:09:5a:9a:7c:8c:52:b6:d6:df:a8:73:b9:eb:33:
                    fd:25:42:ca:e9:e3:94:76:db:64:64:39:c2:0c:27:
                    e2:c5:c3:a6:60:90:f4:81:50:4d:f7:50:ac:e2:27:
                    1e:44:68:ab:e9:ae:90:e9:e1:95:29:3d:34:d8:5b:
                    52:b2:9c:51:69:4f:e6:84:9f:b4:99:30:6e:30:fe:
                    73:35:ef:d7:81:06:8c:dd:1b:5e:a4:29:a5:6f:8c:
                    3c:d8:22:a5:8c:c4:5d:83:25:74:cf:81:bd:56:13:
                    78:22:5d:a7:30:5b:7e:90:b7:2c:e0:bf:7b:ae:cd:
                    40:c9:01:54:c3:99:c8:65:69:a4:db:41:62:68:f3:
                    69:db:05:1e:ae:95:2e:d2:e6:25:e5:c0:77:9d:25:
                    d3:3a:ba:81:fb:21:86:5f:9e:d6:1e:43:db:12:db:
                    ab:9e:0b:cd:60:18:a5:49:d4:6f:62:ce:d6:49:db:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:0F:19:35:DE:C3:30:A3:8A:4A:34:F3:8C:E6:E8:FE:B4:20:FE
            X509v3 Authority Key Identifier:
                keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b4:67:40:85:eb:fa:50:9c:71:ae:96:ca:9e:93:62:12:1d:
         04:b9:bb:0b:bd:62:a4:43:d4:51:48:3a:ae:b4:a6:99:27:11:
         15:a0:cb:6f:35:9b:df:0e:29:db:ae:2a:f1:f1:a4:d2:29:8a:
         54:94:54:62:d7:e2:22:96:89:b1:ee:c1:45:0c:29:6d:a1:3f:
         0d:11:33:1a:f0:e4:40:4c:09:4b:95:5c:00:ee:22:c4:cf:85:
         c3:46:d8:d2:52:1a:70:cf:2d:b8:d4:bd:1b:7f:b4:ea:f7:db:
         dc:50:c6:66:69:07:fb:2f:80:93:2d:ea:79:3a:22:7f:90:9f:
         1e:59:65:fb:ff:b9:74:cc:ce:22:e7:c0:48:05:5a:5b:f2:d3:
         a7:ac:f0:d4:cf:c8:4a:2c:9c:9e:3b:d0:28:0c:72:cb:dc:7f:
         c4:c3:d1:f6:91:f3:b7:42:f7:af:aa:7e:ef:37:58:50:f3:10:
         44:10:1f:72:47:a2:06:1d:bd:ec:4a:da:6b:58:ab:fe:d1:f9:
         6c:89:cc:fe:8b:bd:ee:d8:4a:d2:52:e7:f5:71:d9:bf:a5:bf:
         a3:16:4b:bd:43:ec:44:ca:91:c0:c4:2c:c9:d0:ee:87:48:77:
         23:83:97:f3:7f:b2:f2:b7:84:4b:45:46:21:26:cb:05:69:b5:
         37:7b:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:30:34 2025 by rpki-client