Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          kA0wmPw6K1dP/vEe6mzCqzQkwpDGr6TtNC3pYwlraRQ=
Subject key identifier:   AB:60:C7:60:63:B9:8C:E6:A5:78:B2:E0:BC:71:E6:A4:C5:47:F8:37
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       01964F6CD356AC694C428AE91955B39E1CAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          14FE
Signing time:             Sat 19 Apr 2025 19:00:54 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:54 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:54 +0000
Files and hashes:         1: Dgp_AOmS7Fq7Svk1_RSdkge-WRU.roa (hash: XElPs3TOIl+9rQ8JyrSUuMPNVVzSc0FqVwMF6uHpiQw=)
                          2: YjZtnY0hwobRgnsV2f9G0AiMGUo.roa (hash: VzgVMuv6Yb2cNnoSl6IpoOV4YANe5vJZIFylZalnneM=)
                          3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: 87eV7VWVwKPKc93uBRMCyQxKlLjF1YxQK8uV9yJm20M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:d3:56:ac:69:4c:42:8a:e9:19:55:b3:9e:1c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Apr 19 19:00:54 2025 GMT
            Not After : Apr 20 19:00:54 2025 GMT
        Subject: CN=ab60c76063b98ce6a578b2e0bc71e6a4c547f837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:f0:70:10:c1:13:b0:bb:d4:d2:bf:e2:e1:
                    c9:25:0f:46:d7:31:85:f8:11:82:69:9d:95:69:cf:
                    e7:de:74:5f:c1:6d:db:1c:30:07:20:42:41:21:a5:
                    87:46:53:ce:87:58:63:b2:c7:18:0c:00:b4:7c:73:
                    cd:50:27:9a:f5:7d:74:d8:3a:25:0c:3a:27:14:95:
                    d4:c9:ab:11:6c:b9:a9:63:a3:a8:41:ad:ae:2d:63:
                    c8:2c:e5:ff:7b:5c:e5:fb:81:24:c2:fe:d3:6a:02:
                    d0:e6:62:05:c8:38:b8:c8:2f:f8:43:ff:60:c3:78:
                    7c:c6:dc:8d:d6:d4:3a:89:cf:fb:5e:31:49:52:08:
                    59:af:ab:0e:55:06:88:fa:37:8b:7a:5a:35:02:73:
                    13:2f:3c:ef:56:7d:23:c0:5c:33:6e:a2:a0:3f:68:
                    e1:18:c9:9a:47:ef:39:79:dd:9c:97:04:0a:e9:9f:
                    28:c6:a0:00:0f:34:16:22:54:03:8a:05:8e:32:d3:
                    ac:37:9d:ea:13:09:26:3a:25:55:fc:b8:c7:79:f1:
                    06:a6:26:be:80:e1:30:55:8f:be:9c:82:37:ed:f4:
                    1d:45:ba:15:ef:43:d5:cc:6e:d3:96:32:20:52:80:
                    87:d6:3e:cc:99:8c:37:ab:12:a2:61:0c:56:68:71:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:C7:60:63:B9:8C:E6:A5:78:B2:E0:BC:71:E6:A4:C5:47:F8:37
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:11:26:3a:8a:fa:65:8d:5a:36:33:50:67:62:8d:3b:f4:
         d0:8c:9b:dc:39:ef:ab:37:fd:15:b6:fe:5c:b7:f7:5b:72:6a:
         cc:34:fb:1f:30:23:2d:e1:e5:5c:77:66:de:86:87:a6:28:fb:
         00:c6:ec:9e:cb:dc:e8:1d:83:32:db:dc:9b:fd:80:2a:19:3e:
         dc:9f:83:b5:07:b2:ff:58:ac:52:af:31:ed:74:67:9f:6b:ce:
         14:b1:58:84:fa:01:12:5c:96:fd:d9:5a:b4:22:5e:c5:5d:76:
         d1:68:e6:ca:37:28:d2:46:e3:ff:49:7a:78:ca:fd:c3:3e:28:
         d7:81:18:b4:86:08:e0:bd:c5:a1:43:e2:04:e4:f4:18:10:52:
         5d:db:c1:9a:5b:32:28:7b:98:3a:18:23:f8:27:0b:c2:7a:94:
         9a:cb:e7:0d:e6:bb:22:ab:90:e9:69:24:a9:04:7d:01:b2:c1:
         23:70:1a:2a:5b:8e:95:2f:e3:8c:d1:ab:2c:5b:33:36:08:87:
         33:49:03:8b:86:56:9d:ed:59:ae:a0:6d:37:83:52:66:b0:b4:
         20:0e:66:ae:ba:6f:59:f8:5c:ab:28:27:4f:9d:76:a0:cf:4f:
         bb:0e:d5:e4:bd:d5:1e:1e:55:36:5b:a2:6a:ee:b2:00:f4:59:
         c3:64:98:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:57 2025 by rpki-client