Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          ERVFok9Ee3gO3vV06zNEs2ECfhNj1mQzR3ogDAYXZT8=
Subject key identifier:   0B:89:19:7F:37:41:15:9B:DF:BD:1F:FF:5A:6A:B7:3A:5E:E3:EE:C3
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       019738AB85D8994273D5D6D422528ED1D667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          1425
Signing time:             Wed 04 Jun 2025 02:00:54 +0000
Manifest this update:     Wed 04 Jun 2025 02:00:54 +0000
Manifest next update:     Thu 05 Jun 2025 02:00:54 +0000
Files and hashes:         1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
                          2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
                          3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: S/Nv45VTMfnwYdqZFI+un8k9oTdCGsymuhbxPhCsD9Y=)
                          4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
                          5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:38:ab:85:d8:99:42:73:d5:d6:d4:22:52:8e:d1:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: Jun  4 02:00:54 2025 GMT
            Not After : Jun  5 02:00:54 2025 GMT
        Subject: CN=0b89197f3741159bdfbd1fff5a6ab73a5ee3eec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:6c:69:5f:2c:2c:34:ba:22:cb:0e:77:9a:
                    9e:72:7a:01:60:b1:26:97:59:28:52:41:04:4c:6a:
                    48:5f:03:fa:2a:14:1b:48:48:72:55:a6:52:1e:dd:
                    4f:e5:59:00:da:c4:80:69:ad:94:a7:27:72:1c:59:
                    70:89:d0:02:f1:34:68:cf:a8:ab:b7:22:f9:23:4a:
                    98:e8:07:8e:0f:64:3a:ac:ea:55:37:de:be:bb:21:
                    72:03:16:75:bb:ca:26:af:58:b1:27:c7:d4:fb:32:
                    cb:b7:73:5a:ab:cf:34:3b:bb:87:76:10:59:55:a4:
                    64:f1:a9:44:72:f1:3d:fa:c2:34:9a:33:01:22:a3:
                    bb:17:c3:41:62:d2:af:29:ca:f7:93:2b:e7:6d:a8:
                    88:35:ee:13:67:30:4d:a6:4f:73:5a:86:66:06:a5:
                    bc:47:d6:66:59:6c:44:f8:8f:da:b4:e9:dd:46:78:
                    0a:d1:56:49:0a:29:13:34:5f:d2:aa:7e:b0:ed:0d:
                    66:3a:1f:fb:70:22:4c:78:39:8d:ad:99:75:6e:42:
                    63:be:f2:66:3c:76:68:f9:3a:75:11:ad:97:af:36:
                    70:e9:71:27:ec:44:64:7c:b3:5e:dd:3b:3b:10:5f:
                    02:33:67:92:05:6d:24:1d:26:06:73:f6:af:0d:fd:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:19:7F:37:41:15:9B:DF:BD:1F:FF:5A:6A:B7:3A:5E:E3:EE:C3
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:61:58:03:81:6f:3e:4e:ec:21:14:13:50:8d:1b:cd:e3:99:
         e3:1e:4c:f5:c7:19:91:c7:22:f0:b2:49:73:71:99:21:1f:b1:
         a3:5b:63:50:7b:2a:a5:2a:bd:73:bc:e3:81:48:3d:13:98:02:
         5d:3c:d7:0f:b8:f8:78:56:17:e2:96:4d:55:25:48:c5:f8:70:
         0e:93:47:84:9c:b1:4c:39:f2:21:6e:d9:15:a8:db:05:2c:6e:
         fb:97:ac:6b:02:38:b1:8b:ee:72:c8:6c:8f:43:c6:5e:6c:f8:
         d2:1f:d9:69:36:de:bf:39:22:b3:42:e1:fa:08:c1:11:92:8a:
         58:c1:d9:06:2e:ae:dd:ca:ab:01:60:81:be:c8:5d:60:4f:47:
         87:64:51:2c:f1:40:bd:28:cf:d3:2b:54:a2:3d:93:ca:9f:3a:
         08:0e:cb:b7:f6:9b:78:41:18:99:3b:55:b5:d8:f9:63:ad:a4:
         58:05:a9:91:16:05:fe:c6:5f:4a:4c:ad:0e:1b:91:7d:df:7f:
         0a:1d:a7:e3:0c:d0:6c:4a:4a:9a:58:92:ab:af:35:dc:c8:e7:
         b5:06:a7:1c:53:18:d1:53:de:da:31:e3:dc:96:4f:bb:fe:ef:
         9f:83:cb:27:ff:9a:fd:5b:a9:3f:a8:73:f2:f4:d2:53:21:e4:
         6b:02:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:59:11 2025 by rpki-client