Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          GgOEDpCmUxArWTp84kc9ncUYXEMpNmRCAOWk1+Xe3Mw=
Subject key identifier:   BF:99:26:19:B9:E9:B1:DB:DD:64:06:D8:EE:92:9A:EA:A2:2D:58:94
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       0196504852F7C2E874B0D3E63D05B6431EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          09AD
Signing time:             Sat 19 Apr 2025 23:00:38 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:38 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:38 +0000
Files and hashes:         1: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: KX+ZUZPBWvUQmJn1A2mRI7RXo73m/dM8GUpP1yZ5Sgw=)
                          2: fAKnpTzt0oxsrzvaA1bygJJ8CWQ.roa (hash: cdf+GHG9jpY7S3hS2aX03Crb7b2Au3gPgbB6NvaxmuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:52:f7:c2:e8:74:b0:d3:e6:3d:05:b6:43:1e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Apr 19 23:00:38 2025 GMT
            Not After : Apr 20 23:00:38 2025 GMT
        Subject: CN=bf992619b9e9b1dbdd6406d8ee929aeaa22d5894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:70:b5:3b:da:bb:7c:15:38:71:40:f6:46:
                    e4:b6:5c:ca:cd:e6:a6:2a:e1:65:0b:2b:78:22:43:
                    25:de:9a:fb:2c:d2:cb:ea:67:7d:2a:35:a2:b5:4c:
                    fa:4f:2f:34:a5:c8:fa:70:70:71:8f:6a:16:78:16:
                    1d:76:ba:0c:e7:85:02:7a:7c:df:d5:23:86:6b:43:
                    18:b7:fd:15:32:cb:05:24:93:38:e4:3a:78:77:97:
                    f5:0e:3a:11:b7:2b:4c:84:43:36:c8:17:01:ad:1e:
                    7f:3f:e9:23:ef:57:ff:54:0a:ec:30:18:fe:a3:8f:
                    84:ea:3f:39:4c:2a:0e:88:57:e5:2c:e7:8d:59:79:
                    ba:08:b6:11:42:7d:66:cc:76:a3:ec:69:3f:35:8a:
                    19:c8:55:fa:7c:19:af:d6:53:71:cf:b0:0e:6d:5f:
                    f0:6c:7d:72:7a:f6:8c:a9:48:7b:d8:75:0e:0d:21:
                    ad:21:5b:93:ea:5a:22:55:0e:57:c3:3b:92:21:c9:
                    1a:da:8b:a3:26:7a:7a:14:48:57:c8:ec:5d:9c:0d:
                    57:2e:1c:42:35:f4:a0:85:47:d5:68:3b:1c:8f:db:
                    0d:80:31:0e:4a:7f:4a:fe:59:66:02:b4:6c:26:67:
                    08:61:ed:6f:7a:39:54:bc:8a:5d:13:69:e5:6a:ff:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:26:19:B9:E9:B1:DB:DD:64:06:D8:EE:92:9A:EA:A2:2D:58:94
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8e:f9:37:ed:e4:43:48:c2:1d:36:e0:7f:10:66:42:9a:45:
         b8:7d:0d:3b:26:20:4e:1d:65:f4:06:64:df:49:bf:cd:2c:24:
         ae:ad:1c:9b:ba:10:20:42:da:ec:1c:be:b3:bb:24:3e:c2:93:
         9d:d2:e2:ad:ed:2e:5c:28:67:b7:23:2f:df:3f:2c:1c:80:8d:
         74:77:58:93:27:fa:d9:71:2d:de:bd:ba:2a:36:8c:67:5c:e5:
         da:f9:93:55:79:7b:f5:25:12:07:ad:45:1f:bb:69:35:8c:ef:
         c1:79:0b:88:00:36:29:d9:7f:ea:5d:f0:e0:df:5b:64:15:af:
         ed:f7:49:a1:82:42:08:59:d8:ad:0d:65:5f:fe:ae:3d:57:ad:
         ac:10:16:69:bf:0d:be:a8:ef:5d:c1:af:49:13:76:fd:6d:56:
         8c:5d:63:5b:fc:04:84:21:23:29:c7:76:3b:3e:89:8c:48:23:
         70:d6:a1:17:df:86:b1:f1:7e:3e:d4:3b:21:4c:0c:af:05:49:
         b0:51:82:6b:5b:b9:dd:20:82:3c:c8:0f:a5:f5:a3:af:e6:8a:
         ba:5b:2f:a6:a7:8a:aa:63:b6:1e:f3:82:b1:d9:ca:48:7f:44:
         0f:d5:0e:12:b1:d8:fd:6a:71:84:5d:6e:b5:7c:13:d9:03:da:
         92:c8:ed:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:52:28 2025 by rpki-client