Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File:                     yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier:          u/4qgIUFFWypYFfbasYRA6L4rE5aJiy6G0RXoaRd8BM=
Subject key identifier:   23:10:F6:99:54:71:60:C6:CF:CB:DE:36:39:12:A4:53:B5:B0:25:41
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer:       /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial:       01974D4469CF7F9FF630488F843F367895B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number:          0C50
Signing time:             Sun 08 Jun 2025 02:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:18 +0000
Files and hashes:         1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: YCk0vkPPbpPPYM/vYb9XDHnPeE3dS1H3Jg8eBoFQrdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:69:cf:7f:9f:f6:30:48:8f:84:3f:36:78:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
        Validity
            Not Before: Jun  8 02:00:18 2025 GMT
            Not After : Jun  9 02:00:18 2025 GMT
        Subject: CN=2310f699547160c6cfcbde363912a453b5b02541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8d:bb:cc:38:06:15:20:e9:4c:0e:92:e8:f2:
                    a1:f9:c4:73:64:7a:21:f1:df:b4:ab:18:f5:75:c9:
                    9d:d5:bb:ff:f8:d1:a3:fd:54:cf:1f:2c:b6:eb:28:
                    3d:25:3d:55:dd:bf:53:a4:5a:db:1f:5f:34:c6:ed:
                    eb:e3:84:3d:e1:d4:be:56:e4:38:cf:22:3f:d0:d1:
                    58:aa:31:34:3b:0f:7e:0e:13:9d:80:df:d2:02:e8:
                    4e:bc:45:8a:b8:cb:75:5f:55:d4:06:a5:19:a5:51:
                    67:b3:ec:dd:27:7d:51:80:d1:24:82:01:99:8e:5f:
                    5f:bc:59:02:78:62:6a:5a:9b:d3:63:84:03:61:8c:
                    2f:81:58:3c:7d:23:a3:67:b3:19:64:dd:d4:29:b5:
                    bd:e2:a8:c5:13:ac:49:5d:65:a0:ce:a6:70:c6:f8:
                    a4:5a:ce:be:66:ec:f2:c4:76:3a:6f:dc:0f:73:b3:
                    74:ae:04:18:09:66:57:e9:65:d7:54:28:0b:2f:17:
                    87:7a:fc:b4:58:f7:15:ff:3f:b8:68:17:be:f0:bc:
                    07:d2:87:fc:82:fb:ad:1c:7e:c9:0e:1d:f0:1b:98:
                    e2:63:8a:35:50:8d:06:63:58:9f:13:25:7e:ac:cf:
                    cc:34:50:fa:02:a6:ac:31:a8:ea:3b:e3:d3:f0:85:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:F6:99:54:71:60:C6:CF:CB:DE:36:39:12:A4:53:B5:B0:25:41
            X509v3 Authority Key Identifier:
                keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:38:2b:b0:b6:fc:ed:dc:0e:53:ab:1d:fb:f7:d9:e0:7b:
         47:44:7a:78:10:ec:a7:87:d5:75:1d:bb:46:0c:96:d4:07:2c:
         5e:45:e5:0d:5e:9c:8a:a4:ba:62:d5:73:4c:b3:29:7a:2d:6f:
         bf:71:8e:f8:8c:cd:80:be:02:e9:2e:c0:bb:72:3e:52:e9:e9:
         77:15:7d:db:90:75:2e:77:6f:af:bf:be:51:b7:d3:8b:eb:34:
         ab:e0:27:2c:b5:38:10:06:d1:30:0a:cb:ba:dd:4b:ee:79:32:
         82:ee:86:18:3d:99:53:85:bf:18:24:27:ae:61:fc:8a:7e:13:
         a6:94:80:2e:7a:5b:fa:a5:78:4a:48:33:c4:10:66:4d:38:89:
         b7:99:d9:e7:50:fa:b3:5b:e7:4b:46:6d:02:6b:c5:fe:37:8f:
         c6:f2:d9:6c:ac:f0:28:c7:84:83:a7:6a:be:55:d3:18:92:dd:
         57:88:bc:ac:6e:2f:47:0f:15:22:6e:af:90:6e:4e:e7:37:54:
         a7:ea:3e:fd:cd:ae:ff:c2:2f:ec:0a:fe:58:a6:e4:53:51:8b:
         14:fc:5a:ab:8d:3a:1b:7c:ab:08:a0:8c:95:3c:f1:be:e9:83:
         9a:41:17:0d:a4:28:f8:e4:4b:cc:df:9f:81:9c:2d:14:bf:7b:
         5a:5f:0e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRGnPf5/2MEiPhD82eJWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWI1YjI5Njk5ZTJkZDQxODA0MGMwZWRmNzUwMDg1ZDg3
MjA0NDIwHhcNMjUwNjA4MDIwMDE4WhcNMjUwNjA5MDIwMDE4WjAzMTEwLwYDVQQD
EygyMzEwZjY5OTU0NzE2MGM2Y2ZjYmRlMzYzOTEyYTQ1M2I1YjAyNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Y27zDgGFSDpTA6S6PKh+cRzZHoh
8d+0qxj1dcmd1bv/+NGj/VTPHyy26yg9JT1V3b9TpFrbH180xu3r44Q94dS+VuQ4
zyI/0NFYqjE0Ow9+DhOdgN/SAuhOvEWKuMt1X1XUBqUZpVFns+zdJ31RgNEkggGZ
jl9fvFkCeGJqWpvTY4QDYYwvgVg8fSOjZ7MZZN3UKbW94qjFE6xJXWWgzqZwxvik
Ws6+ZuzyxHY6b9wPc7N0rgQYCWZX6WXXVCgLLxeHevy0WPcV/z+4aBe+8LwH0of8
gvutHH7JDh3wG5jiY4o1UI0GY1ifEyV+rM/MNFD6AqasMajqO+PT8IXS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMQ9plUcWDGz8veNjkSpFO1sCVBMB8GA1UdIwQY
MBaAFMibWylpni3UGAQMDt91AIXYcgRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEt
Njc1NzU5YTNiMGI3LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81ZWMzODEtN2M1NC00YmE0LWI5YzEtNjc1NzU5YTNiMGI3
LzEveUp0YktXbWVMZFFZQkF3TzMzVUFoZGh5QkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnk4K7C2
/O3cDlOrHfv32eB7R0R6eBDsp4fVdR27RgyW1AcsXkXlDV6ciqS6YtVzTLMpei1v
v3GO+IzNgL4C6S7Au3I+UunpdxV925B1Lndvr7++UbfTi+s0q+AnLLU4EAbRMArL
ut1L7nkygu6GGD2ZU4W/GCQnrmH8in4TppSALnpb+qV4SkgzxBBmTTiJt5nZ51D6
s1vnS0ZtAmvF/jePxvLZbKzwKMeEg6dqvlXTGJLdV4i8rG4vRw8VIm6vkG5O5zdU
p+o+/c2u/8Iv7Ar+WKbkU1GLFPxaq406G3yrCKCMlTzxvumDmkEXDaQo+ORLzN+f
gZwtFL97Wl8OmA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:56 2025 by rpki-client