Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File:                     YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier:          +IPcG5DiQbn4lpk0U5e63mAw7NLWOah3dQ/gFR0PKfA=
Subject key identifier:   FE:EB:EF:91:2C:AF:2D:0F:A6:1B:A0:16:3D:ED:B2:9E:65:EB:00:FB
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer:       /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial:       019765BAB88941FAB93596E304077B24754D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number:          0249
Signing time:             Thu 12 Jun 2025 20:00:25 +0000
Manifest this update:     Thu 12 Jun 2025 20:00:25 +0000
Manifest next update:     Fri 13 Jun 2025 20:00:25 +0000
Files and hashes:         1: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: 2bRwh0f+/mBjlhyom+e1WMuimJQ/eTr1mFo9tdW3VSQ=)
                          2: kGTMJp8YWdhCRnyfOKgxhKChBJQ.roa (hash: ZVU5RQX8MRgj32JsdxWQo2xXu6d3VcvuzIOlJ8aVzuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:ba:b8:89:41:fa:b9:35:96:e3:04:07:7b:24:75:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
        Validity
            Not Before: Jun 12 20:00:25 2025 GMT
            Not After : Jun 13 20:00:25 2025 GMT
        Subject: CN=feebef912caf2d0fa61ba0163dedb29e65eb00fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:70:f6:cd:c7:1f:74:c4:b6:ca:ea:f0:bf:
                    eb:d6:08:03:d6:74:82:fd:59:9e:3e:ff:7b:df:d5:
                    ef:c9:0e:6e:8a:37:87:7d:8c:6e:8b:a1:fc:66:41:
                    25:00:aa:e6:63:27:ef:f9:04:1c:34:b4:bc:a2:47:
                    3c:61:13:94:43:b7:53:35:d2:12:5d:ea:f3:1a:e8:
                    6a:40:c4:17:b0:11:de:0f:15:9d:e9:1c:03:e7:a7:
                    e9:1a:03:43:17:64:52:44:c4:b1:76:1e:ac:65:7e:
                    ea:1e:4d:76:51:c3:2c:1e:b3:98:4f:6a:31:e2:fe:
                    51:10:a6:e5:b3:ff:8c:59:ad:52:0d:c6:06:97:61:
                    7f:60:35:df:87:83:13:14:08:b5:52:97:e0:1a:0a:
                    77:d5:61:86:24:47:59:cb:94:69:da:48:37:78:39:
                    6e:00:23:ea:d3:e8:e0:96:d5:0a:e6:16:b6:59:09:
                    21:44:3b:da:2c:06:d9:dc:c7:6d:d1:4e:63:75:3f:
                    1d:b3:95:85:77:dc:40:d0:d5:44:9e:17:e6:41:34:
                    ab:96:51:ff:af:42:f4:72:a2:be:5a:9d:a8:0c:67:
                    53:5f:1d:3d:ce:68:25:20:31:ec:b1:95:fb:ab:48:
                    96:15:74:80:b6:3e:f1:73:25:b1:e7:17:51:02:21:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:EF:91:2C:AF:2D:0F:A6:1B:A0:16:3D:ED:B2:9E:65:EB:00:FB
            X509v3 Authority Key Identifier:
                keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c5:7d:44:d1:ee:84:c9:df:c6:a5:a1:4a:2a:97:c3:1e:ff:
         2c:54:b4:92:47:f1:53:31:ac:e7:09:2b:d9:66:b7:d7:b2:2b:
         35:1b:fc:4d:6b:ff:fc:ad:1c:29:a4:d2:4b:f7:82:e6:c2:1d:
         14:35:3f:c3:bd:68:a2:56:08:12:2a:b3:8b:64:28:b1:55:4b:
         c4:f9:bd:33:02:c0:3a:9c:20:7e:3c:7c:98:ab:b2:38:30:5d:
         87:ce:02:43:1e:39:48:9b:cd:85:5e:36:fb:c6:cf:69:14:d9:
         69:21:06:d8:f5:32:a8:cd:ac:6b:e9:bf:f2:6d:f3:e7:fb:8d:
         0e:18:8a:f5:0d:35:15:03:d1:0a:da:3b:a4:88:e0:ad:89:42:
         4c:7d:83:fc:c9:17:0a:85:0c:a2:14:86:96:5a:60:6a:46:7b:
         5e:9e:db:58:fc:22:8b:fe:8f:b3:80:0d:33:97:a8:ee:87:6a:
         4c:85:f1:c5:e1:f9:9a:b3:a6:8e:f5:8a:71:dd:f4:95:e3:c5:
         ee:ee:01:1d:4f:80:b1:17:2f:99:b7:3c:b4:3e:c5:2e:de:a9:
         98:d4:f2:2e:9b:f2:bd:54:2a:29:f0:35:96:73:fd:f6:3f:bb:
         d1:19:2a:2e:01:07:dd:a7:ca:c4:d7:43:7e:b7:f1:00:1b:85:
         eb:36:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:55:23 2025 by rpki-client