Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File:                     Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier:          BWZ9dRb1VaxWV4Cenz9/ZPyp7/v+5R7VxyEd5hb8JQQ=
Subject key identifier:   1C:AA:24:7B:E0:7D:D8:30:75:C0:92:CC:7C:01:E7:E2:C6:F2:8D:58
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer:       /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial:       01974CD6F4948C83BD52BD85316DAC671105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number:          157D
Signing time:             Sun 08 Jun 2025 00:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:45 +0000
Files and hashes:         1: PaAAUO_ixJ6swm7tE4jKyNdYpk0.roa (hash: TfUDJUozwqa+GvnOHe7awC0XZSqVbUNsIbWR0csLcfM=)
                          2: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: LFUZ5GvL2yJoReudS+xNY4zMwpR4lR2sc3MRFUONT+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:f4:94:8c:83:bd:52:bd:85:31:6d:ac:67:11:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
        Validity
            Not Before: Jun  8 00:00:45 2025 GMT
            Not After : Jun  9 00:00:45 2025 GMT
        Subject: CN=1caa247be07dd83075c092cc7c01e7e2c6f28d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:41:63:6e:5b:6c:88:38:76:34:6f:ac:06:
                    05:e7:d1:df:61:2d:c2:e9:af:de:ee:6c:fa:08:c7:
                    dd:29:d2:cf:1f:91:11:f9:0b:5e:de:88:c4:df:e8:
                    e5:3e:cd:f8:3b:09:3d:b9:70:f5:68:52:c8:28:89:
                    d0:01:5d:7f:1c:f5:16:90:3d:38:fe:4d:c2:ac:1d:
                    2c:a7:2a:94:0c:0f:be:1f:c4:f6:2e:57:a5:37:15:
                    24:e6:c3:a7:9f:8a:ca:8d:50:fa:86:87:11:c5:fb:
                    d9:9b:d6:c4:2c:5c:f9:2c:cc:a1:20:59:ab:38:e6:
                    d5:07:3d:dc:2e:1a:0f:15:30:5c:a2:ad:cc:cd:89:
                    ee:cd:db:f6:13:c6:41:49:05:84:84:23:2f:d0:94:
                    fb:7e:8b:df:18:23:80:9c:88:d9:75:33:97:85:60:
                    fd:5c:6e:1c:0b:0d:1e:5b:d8:74:80:c1:31:c9:89:
                    5d:53:31:02:ef:54:a6:4e:49:cf:f9:b2:42:8f:2b:
                    ad:f0:eb:67:3f:e3:57:40:2b:cf:97:e7:fd:02:5d:
                    3c:3c:7c:53:fe:53:c1:8a:54:0c:b9:77:86:bb:67:
                    bd:d2:51:19:31:88:8d:fa:32:eb:5f:39:ef:4d:26:
                    2a:6b:32:e5:1b:60:4e:8f:20:8c:66:f1:68:c0:41:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:24:7B:E0:7D:D8:30:75:C0:92:CC:7C:01:E7:E2:C6:F2:8D:58
            X509v3 Authority Key Identifier:
                keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:ef:20:24:b6:15:7e:31:52:2b:3c:8d:1d:76:9e:35:6b:
         20:22:e0:86:2c:40:24:be:cb:d8:7e:4c:14:d7:a8:e7:89:52:
         a5:1e:ac:0a:30:00:7b:21:18:f8:54:67:f1:23:9b:3f:01:df:
         a3:39:06:5c:30:48:0b:2b:c2:55:0f:bf:4d:d5:49:88:18:7c:
         91:be:f4:90:10:46:a0:23:04:36:1b:30:68:99:20:76:c8:7e:
         f5:b9:42:fa:69:d4:99:fb:d9:3b:2b:42:89:00:bc:cb:60:ab:
         2d:ad:c5:72:5a:2c:40:a4:22:53:a5:47:ea:03:aa:d7:67:a2:
         4f:8b:e0:e8:f6:62:20:a0:95:5d:88:14:ed:22:c0:49:aa:46:
         ae:f5:f7:d1:0e:9c:95:f3:a7:7b:b4:db:4b:ec:a6:f8:47:98:
         46:06:fd:5c:33:79:37:0a:e1:b1:f8:b2:c0:10:cd:6c:8c:2f:
         40:b8:eb:d5:56:8b:68:41:eb:b8:12:19:b8:d7:b9:c8:bf:b2:
         d0:d5:a1:21:9c:b6:6d:95:e3:d6:22:57:4c:3b:fc:4b:65:49:
         40:56:94:62:04:94:80:63:9d:98:8d:6f:26:41:52:16:d4:7e:
         d9:14:2d:15:5d:17:21:f2:53:ae:66:56:d6:d0:d8:50:eb:14:
         43:95:ee:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1vSUjIO9Ur2FMW2sZxEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2YzNDRmZDRhOTFiZmFkMTM4MzA4ZDUyNzE1NWJiY2U1
MmFmNmUwHhcNMjUwNjA4MDAwMDQ1WhcNMjUwNjA5MDAwMDQ1WjAzMTEwLwYDVQQD
EygxY2FhMjQ3YmUwN2RkODMwNzVjMDkyY2M3YzAxZTdlMmM2ZjI4ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxRBY25bbIg4djRvrAYF59HfYS3C
6a/e7mz6CMfdKdLPH5ER+Qte3ojE3+jlPs34Owk9uXD1aFLIKInQAV1/HPUWkD04
/k3CrB0spyqUDA++H8T2LlelNxUk5sOnn4rKjVD6hocRxfvZm9bELFz5LMyhIFmr
OObVBz3cLhoPFTBcoq3MzYnuzdv2E8ZBSQWEhCMv0JT7fovfGCOAnIjZdTOXhWD9
XG4cCw0eW9h0gMExyYldUzEC71SmTknP+bJCjyut8OtnP+NXQCvPl+f9Al08PHxT
/lPBilQMuXeGu2e90lEZMYiN+jLrXznvTSYqazLlG2BOjyCMZvFowEE2iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByqJHvgfdgwdcCSzHwB5+LG8o1YMB8GA1UdIwQY
MBaAFGI/NE/UqRv60TgwjVJxVbvOUq9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAt
YTM0ZTg2NzlmMzc0LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAtYTM0ZTg2NzlmMzc0
LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepLvICS2
FX4xUis8jR12njVrICLghixAJL7L2H5MFNeo54lSpR6sCjAAeyEY+FRn8SObPwHf
ozkGXDBICyvCVQ+/TdVJiBh8kb70kBBGoCMENhswaJkgdsh+9blC+mnUmfvZOytC
iQC8y2CrLa3FclosQKQiU6VH6gOq12eiT4vg6PZiIKCVXYgU7SLASapGrvX30Q6c
lfOne7TbS+ym+EeYRgb9XDN5NwrhsfiywBDNbIwvQLjr1VaLaEHruBIZuNe5yL+y
0NWhIZy2bZXj1iJXTDv8S2VJQFaUYgSUgGOdmI1vJkFSFtR+2RQtFV0XIfJTrmZW
1tDYUOsUQ5Xu5A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:01 2025 by rpki-client