Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File:                     YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier:          wi4xWEKP6EklyGQ7Ezst7XBfBmNs1SkvoDeCpGslLNQ=
Subject key identifier:   33:68:E9:9D:9E:3B:05:D2:97:1A:63:6A:61:BA:B1:CD:58:4F:95:CF
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer:       /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial:       019757C8B12D8DD6D336DD966563E0697DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number:          0B81
Signing time:             Tue 10 Jun 2025 03:00:59 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:59 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:59 +0000
Files and hashes:         1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: +pFT/xOWxkOZVEMroRPvakVZCyktKMuOhII9dhx/QUU=)
                          2: u6XKWkJxCFpT3xG3nAznfYy70cs.roa (hash: RjT1DRB5vp2FEimDEIdIqCiEf85N8q2cRNXUGa1kwyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:b1:2d:8d:d6:d3:36:dd:96:65:63:e0:69:7d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
        Validity
            Not Before: Jun 10 03:00:59 2025 GMT
            Not After : Jun 11 03:00:59 2025 GMT
        Subject: CN=3368e99d9e3b05d2971a636a61bab1cd584f95cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:65:35:10:71:1f:40:0e:8f:a6:f0:6c:a5:
                    3c:88:72:78:72:ba:eb:17:88:6a:87:a0:01:4f:ad:
                    80:88:fb:24:8e:63:7b:25:55:c0:b9:ba:39:28:46:
                    17:dc:18:fa:5c:97:25:d9:01:95:61:7e:71:8d:c2:
                    20:54:f8:27:06:24:66:64:9f:27:31:64:42:a2:47:
                    98:af:8f:64:d6:4f:04:e6:b7:df:17:95:fd:6a:0a:
                    0a:f4:2a:22:d3:2f:5e:18:80:c9:7b:ad:77:a5:eb:
                    0e:0b:9b:8b:15:f8:47:c1:25:7e:50:7e:1d:2a:af:
                    9a:5a:4b:e1:4a:04:27:15:c0:7a:05:44:ef:8e:19:
                    62:ae:fb:05:15:8c:c2:ce:68:ff:66:8c:05:d0:53:
                    70:2f:2e:9e:be:e8:32:85:ad:57:fa:0a:11:03:76:
                    42:fc:2f:6e:a7:5e:25:38:e4:93:2e:16:7d:0e:e5:
                    63:cd:9d:28:06:ce:6c:35:fa:7f:79:aa:53:50:4a:
                    14:fb:8f:b7:e0:d8:df:11:87:73:3f:1f:de:6e:8c:
                    2e:c2:79:4e:08:94:e7:e2:0c:92:d5:25:6c:d9:ad:
                    f3:bc:49:3f:42:ae:b2:1b:bc:1c:87:3a:31:5b:31:
                    ec:f9:17:4c:6e:70:31:91:00:ac:1d:ad:65:bd:f7:
                    99:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:E9:9D:9E:3B:05:D2:97:1A:63:6A:61:BA:B1:CD:58:4F:95:CF
            X509v3 Authority Key Identifier:
                keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:96:6a:c7:d6:1b:1c:2f:4f:52:b8:1b:ca:f4:87:6f:cc:fa:
         cc:a7:9d:de:87:bb:bc:be:10:d3:d3:c2:c7:11:c6:42:0e:e9:
         81:18:7b:26:95:68:50:89:27:06:81:b3:cf:3d:2c:75:71:f8:
         67:b6:8f:39:11:2c:03:10:3f:14:2b:07:bb:9a:89:1b:11:2e:
         a0:8a:04:9d:88:16:94:00:8e:7f:17:0b:43:3f:28:ed:f3:1a:
         be:f3:68:ce:bf:f4:60:d1:17:7d:f8:a8:25:0b:55:7d:95:f6:
         fc:aa:46:39:49:8f:50:8f:4b:ef:85:c2:4a:e1:21:9c:10:09:
         c0:ea:a3:05:40:ca:6c:4b:37:53:fb:fc:4d:f3:d8:e2:15:89:
         46:fb:d3:6e:80:12:6e:27:f8:50:58:55:1c:e7:a3:76:81:3e:
         32:eb:83:99:78:98:a1:d9:57:e5:32:0a:3c:4b:30:f9:ff:11:
         03:df:30:86:62:e7:d9:a9:f6:df:3f:1b:2a:c7:83:aa:83:77:
         a0:3d:d5:c6:d6:ef:98:5b:4d:d1:77:70:b4:5c:94:2e:1b:16:
         3c:7b:d4:ff:b9:b1:18:61:cd:27:5e:65:5d:b1:eb:b8:0a:e8:
         7c:40:66:27:05:3c:70:ee:51:f3:85:3b:40:79:2e:19:7c:aa:
         69:aa:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:03:52 2025 by rpki-client