Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          RTLFde3tdi5ZH9JVEGgv4SBH5s7IkatnOIog8TV5l6Y=
Subject key identifier:   46:EB:E5:DE:AB:A9:B3:2A:45:C1:03:18:C4:75:D9:97:B6:45:6B:31
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       019659EFE659DB373350D1B5748C1C06B0D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          0310
Signing time:             Mon 21 Apr 2025 20:00:16 +0000
Manifest this update:     Mon 21 Apr 2025 20:00:16 +0000
Manifest next update:     Tue 22 Apr 2025 20:00:16 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: 26UuOuZ1dEhF+1a4SLUo2QVwadzv5XfQOf0RQL39lPY=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:ef:e6:59:db:37:33:50:d1:b5:74:8c:1c:06:b0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Apr 21 20:00:16 2025 GMT
            Not After : Apr 22 20:00:16 2025 GMT
        Subject: CN=46ebe5deaba9b32a45c10318c475d997b6456b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:08:ff:2c:aa:f3:c2:1d:a4:28:b5:05:cb:
                    83:a1:0d:60:c0:8c:0e:4f:2e:34:62:1e:03:a7:56:
                    f3:fc:65:92:4c:dc:1e:4e:85:a6:f3:35:e1:4b:6a:
                    87:f8:92:8e:81:6d:fb:75:eb:f8:7e:9f:27:f9:25:
                    ab:cb:52:cd:53:b9:f0:b7:9b:a9:6a:3d:a0:5c:85:
                    6d:01:dd:7c:dd:45:83:8d:f6:8a:3e:8f:51:5a:31:
                    06:c2:70:0a:8b:8b:69:55:1f:f6:0f:64:f9:26:88:
                    f3:4a:8f:8b:f7:99:ca:f3:d4:da:7e:58:bc:ef:d9:
                    0d:a0:54:1f:60:41:ee:35:d1:0c:e4:59:eb:e4:f0:
                    d9:d9:3b:4f:06:5d:17:81:18:39:14:7d:24:f6:aa:
                    bb:05:21:80:2e:06:3f:36:f1:b8:fe:05:a8:72:ba:
                    c4:86:01:05:fa:24:15:09:b2:dc:21:dc:69:06:0d:
                    46:e4:3c:be:f1:61:92:63:41:80:46:10:d3:d7:6a:
                    60:25:71:e1:d9:47:75:86:06:54:e0:48:92:61:db:
                    49:6d:3b:6d:1b:72:b4:2f:79:3c:8a:23:13:8d:1c:
                    c1:c4:c7:c6:91:61:0e:31:8f:28:33:e4:cb:e1:0f:
                    bb:93:fa:61:0b:eb:f1:42:bc:e6:63:e6:54:d0:45:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EB:E5:DE:AB:A9:B3:2A:45:C1:03:18:C4:75:D9:97:B6:45:6B:31
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:1f:29:a8:c5:f0:fd:9c:dd:9f:8a:e9:ff:82:d8:39:80:
         fe:0d:52:0c:1a:b0:b6:e6:b9:81:83:55:53:a2:45:57:a5:67:
         82:5b:e0:0e:5f:ce:1c:ca:3c:a9:e5:da:7f:da:33:3c:4a:af:
         f5:e1:8f:39:d2:83:91:dc:f9:b3:cd:b3:1c:36:63:7d:7f:52:
         e0:5f:f6:e9:57:f0:8c:2c:ea:df:14:d7:61:cc:dd:6d:92:08:
         ca:ed:93:f9:bb:72:8a:01:17:17:5e:f8:74:e8:60:26:3f:a0:
         80:bd:ca:74:79:08:02:1d:e1:9a:db:a9:05:63:e4:15:dc:51:
         e1:0a:ee:73:50:00:f5:ac:3b:3e:cd:aa:49:b0:10:c6:81:90:
         30:75:2a:4e:64:a6:ed:aa:ec:28:3d:09:c1:0f:cb:f2:31:77:
         24:6b:30:7c:15:78:3c:24:1c:39:aa:75:f5:a4:71:df:cf:3d:
         f0:e9:87:1f:c0:c7:a1:06:c0:2c:a2:bc:23:7c:85:bc:2b:1c:
         9c:ec:74:ee:ae:ee:7a:2d:1e:27:94:0a:85:66:83:fd:b3:0a:
         52:5a:03:b1:c2:08:c5:b3:71:64:c5:ed:4d:4e:a6:ef:f4:8d:
         12:cd:6b:73:ab:2f:3c:88:2a:f6:2e:29:14:ef:fb:ed:8e:df:
         17:2b:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:47:24 2025 by rpki-client