Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
File:                     yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft (raw, json)
Hash identifier:          hsuFA/Jh/Eub6DOj6fKN6g6oFQ0XKQr4VKrQ9pXPUhM=
Subject key identifier:   6E:28:8F:09:4B:FD:ED:07:6E:54:EE:93:1F:3F:3C:6F:03:22:22:8E
Authority key identifier: C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03
Certificate issuer:       /CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
Certificate serial:       01974A7AD5812D068132ED4610D10B2C5893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
Manifest number:          107B
Signing time:             Sat 07 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:53 +0000
Files and hashes:         1: yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl (hash: xa6w8MY3EofdQC8Pk35tbhwPl4raa2HnGc29EsrAF+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:d5:81:2d:06:81:32:ed:46:10:d1:0b:2c:58:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c901fc1f91818e48d6fd10ed6f9c539a88854b03
        Validity
            Not Before: Jun  7 13:00:53 2025 GMT
            Not After : Jun  8 13:00:53 2025 GMT
        Subject: CN=6e288f094bfded076e54ee931f3f3c6f0322228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:5c:d5:3c:11:db:18:55:5b:3f:0e:6a:0f:
                    5b:54:b8:0f:82:5c:02:d3:84:8c:fb:63:5f:3d:e7:
                    fa:4a:6d:55:62:86:d0:17:91:da:5c:bd:2e:55:cc:
                    88:ba:5a:1c:b5:50:29:c3:46:9c:44:ba:ce:c2:01:
                    e0:7a:19:18:c9:6c:d8:db:48:84:f2:f9:2f:f5:0e:
                    78:e7:23:dc:99:93:0b:86:e5:92:da:6c:46:c6:60:
                    64:b2:e6:99:cd:26:1c:fd:27:cb:4a:26:c9:63:cf:
                    26:f7:9b:af:36:cf:a4:42:13:69:98:e6:d4:d6:1a:
                    45:ae:83:e3:11:30:b8:0a:6f:ea:6a:95:ab:3c:6e:
                    73:b6:ce:4a:c1:7c:19:10:4a:fc:dc:32:8a:5f:69:
                    8d:8f:cd:f7:46:aa:0b:de:26:14:2b:a4:45:90:fd:
                    17:b8:85:50:e1:73:0c:4b:5f:df:04:07:f1:ca:66:
                    c2:2c:68:73:6c:14:b2:b9:3e:d2:53:28:47:10:42:
                    95:7a:b3:7c:2c:ae:fc:bd:de:48:80:51:1f:41:3a:
                    70:5b:a2:a3:33:7d:72:12:84:17:f7:1d:4f:3c:dc:
                    03:43:03:94:bd:a7:18:77:39:50:fa:51:e3:fd:05:
                    ab:79:1c:51:9d:78:0e:5e:e5:4e:f1:fc:c9:b8:e4:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:28:8F:09:4B:FD:ED:07:6E:54:EE:93:1F:3F:3C:6F:03:22:22:8E
            X509v3 Authority Key Identifier:
                keyid:C9:01:FC:1F:91:81:8E:48:D6:FD:10:ED:6F:9C:53:9A:88:85:4B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQH8H5GBjkjW_RDtb5xTmoiFSwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6f983b-3e56-4c82-9f38-5f1d8562b52f/1/yQH8H5GBjkjW_RDtb5xTmoiFSwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:15:de:55:78:2a:3c:7c:5f:c6:7c:a1:cb:8a:28:fb:ee:
         bf:3b:b0:98:22:31:78:80:2b:11:79:bf:a8:5d:2e:6e:c4:69:
         ea:2a:4b:11:eb:36:b0:d8:f0:ca:ac:3f:88:ec:6e:6d:71:14:
         ab:d2:84:71:04:64:f4:6e:20:08:cc:9e:24:e0:7d:8c:8e:5a:
         b6:eb:d6:71:e6:03:d6:01:e3:3d:c4:56:ba:ee:d2:7d:9a:9c:
         90:e7:bd:1d:07:cd:07:a4:16:2b:d4:db:3b:6f:97:a5:b1:20:
         55:f1:c7:3f:f8:07:2d:da:87:ca:8d:df:1e:f7:d2:05:66:49:
         5c:29:09:66:47:d5:43:08:9e:06:3c:f0:dd:ea:f9:b5:21:5e:
         91:7e:b3:f7:ea:a5:50:21:ad:ea:30:01:44:fb:75:b7:d1:51:
         73:eb:12:85:81:75:aa:cb:88:2c:ed:2b:c4:49:e1:64:f4:24:
         c6:70:7a:18:da:b7:bc:5c:3d:87:19:22:99:20:27:54:9c:73:
         19:34:29:ef:73:32:b8:d8:fe:77:4b:3b:4f:a3:cf:2d:8c:5d:
         d9:64:c1:c9:45:ce:99:a2:94:97:02:fa:85:8d:ee:cf:5f:fd:
         ba:99:8f:e9:1e:a3:9f:4d:3e:ba:6a:10:60:f0:fa:2b:36:bf:
         4f:4f:4e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKetWBLQaBMu1GENELLFiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDFmYzFmOTE4MThlNDhkNmZkMTBlZDZmOWM1MzlhODg4
NTRiMDMwHhcNMjUwNjA3MTMwMDUzWhcNMjUwNjA4MTMwMDUzWjAzMTEwLwYDVQQD
Eyg2ZTI4OGYwOTRiZmRlZDA3NmU1NGVlOTMxZjNmM2M2ZjAzMjIyMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw5c1TwR2xhVWz8Oag9bVLgPglwC
04SM+2NfPef6Sm1VYobQF5HaXL0uVcyIuloctVApw0acRLrOwgHgehkYyWzY20iE
8vkv9Q545yPcmZMLhuWS2mxGxmBksuaZzSYc/SfLSibJY88m95uvNs+kQhNpmObU
1hpFroPjETC4Cm/qapWrPG5zts5KwXwZEEr83DKKX2mNj833RqoL3iYUK6RFkP0X
uIVQ4XMMS1/fBAfxymbCLGhzbBSyuT7SUyhHEEKVerN8LK78vd5IgFEfQTpwW6Kj
M31yEoQX9x1PPNwDQwOUvacYdzlQ+lHj/QWreRxRnXgOXuVO8fzJuOSWrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4ojwlL/e0HblTukx8/PG8DIiKOMB8GA1UdIwQY
MBaAFMkB/B+RgY5I1v0Q7W+cU5qIhUsDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgt
NWYxZDg1NjJiNTJmLzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82Zjk4M2ItM2U1Ni00YzgyLTlmMzgtNWYxZDg1NjJiNTJm
LzEveVFIOEg1R0Jqa2pXX1JEdGI1eFRtb2lGU3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvcV3lV4
Kjx8X8Z8ocuKKPvuvzuwmCIxeIArEXm/qF0ubsRp6ipLEes2sNjwyqw/iOxubXEU
q9KEcQRk9G4gCMyeJOB9jI5atuvWceYD1gHjPcRWuu7SfZqckOe9HQfNB6QWK9Tb
O2+XpbEgVfHHP/gHLdqHyo3fHvfSBWZJXCkJZkfVQwieBjzw3er5tSFekX6z9+ql
UCGt6jABRPt1t9FRc+sShYF1qsuILO0rxEnhZPQkxnB6GNq3vFw9hxkimSAnVJxz
GTQp73MyuNj+d0s7T6PPLYxd2WTByUXOmaKUlwL6hY3uz1/9upmP6R6jn00+umoQ
YPD6Kza/T09O2A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:36 2025 by rpki-client