Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File:                     Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier:          HW5RQVY9NMXfs1rrLpdYp+1tYBqDzieiqQPGyllBaBc=
Subject key identifier:   A1:27:19:EA:F8:6E:39:3A:7B:63:14:38:52:30:56:B3:D1:84:66:DA
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer:       /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial:       01975A5C4017A5C8E2745EAE812FC0359B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 15:01:24 +0000
Manifest this update:     Tue 10 Jun 2025 15:01:24 +0000
Manifest next update:     Wed 11 Jun 2025 15:01:24 +0000
Files and hashes:         1: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: 0N+rjWvuR1lAZp0Q1TAd1x0d1MD1Nnb8JerMk1ipcM0=)
                          2: wsNRODSlq_nh1GDEKdmia3PTMko.roa (hash: oJgNuBgkHwRy1QBN/xCPFqgneU9FqbAO/DZOxkV4624=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5c:40:17:a5:c8:e2:74:5e:ae:81:2f:c0:35:9b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
        Validity
            Not Before: Jun 10 15:01:24 2025 GMT
            Not After : Jun 11 15:01:24 2025 GMT
        Subject: CN=a12719eaf86e393a7b631438523056b3d18466da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:f9:d7:6c:c0:0c:13:5f:b4:bd:ab:8f:5e:
                    73:f7:8e:0b:2f:4a:bf:19:88:95:50:fc:08:d9:66:
                    1a:00:dc:5a:cf:5d:3e:55:95:7e:2d:1d:b9:75:0a:
                    0f:ab:57:0f:63:ff:07:f1:cc:91:d7:31:a6:18:70:
                    12:d4:5e:d2:56:15:27:0c:b1:f7:6d:c1:ec:9d:66:
                    30:09:f7:53:3e:88:02:93:88:47:ad:ce:1b:c0:9c:
                    09:56:15:a7:33:62:31:db:6c:3b:a6:e2:aa:9d:af:
                    19:62:a2:79:bf:1c:d2:4d:db:e0:a4:96:a3:a7:6f:
                    d5:0f:da:c9:14:3d:70:c3:8a:de:fa:4e:2b:07:73:
                    67:40:f3:50:a2:7f:04:48:d9:c4:8f:85:0e:13:0a:
                    0f:14:9b:6b:f7:58:75:10:55:b4:ec:e0:df:a2:65:
                    48:93:4c:01:0e:ae:77:f2:c1:8f:ae:27:6d:d9:07:
                    6e:28:f7:b3:00:33:c7:41:e0:a6:f8:a2:81:1f:95:
                    6a:9f:a9:65:3b:5b:48:f0:58:fe:88:36:5e:ee:a7:
                    36:ee:4d:7d:0b:d4:c1:1e:95:b0:f0:1b:f3:31:48:
                    da:9b:c3:6c:77:23:64:df:6e:02:9b:ac:4b:f1:e6:
                    1f:8e:bb:ab:43:fb:11:4d:c1:07:00:4f:4a:42:e8:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:27:19:EA:F8:6E:39:3A:7B:63:14:38:52:30:56:B3:D1:84:66:DA
            X509v3 Authority Key Identifier:
                keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:cc:f9:8b:db:2b:fe:5e:e0:80:4f:6e:e0:85:c2:89:cb:
         77:0d:f9:57:95:26:b1:56:26:d5:c0:94:3f:e5:00:88:74:23:
         ee:26:59:3e:b7:90:2c:dc:fe:15:da:b9:ca:8d:df:1e:fe:ec:
         0f:0c:df:5d:d1:14:5d:a7:78:86:43:83:2b:7c:e4:9a:dd:4f:
         18:86:9e:11:b0:74:97:dd:33:98:12:c7:08:a2:f5:7d:4a:cc:
         d9:79:fe:b9:f5:c2:41:e1:31:b4:c1:65:22:c2:df:78:ef:1e:
         0a:24:b8:00:93:01:48:1f:d2:a0:a6:bd:ee:df:a3:a7:6e:49:
         68:24:2e:d2:4f:08:68:23:7c:04:51:9c:76:48:4d:84:1c:3e:
         f6:b0:2c:52:28:28:bf:e1:64:4c:de:20:65:e9:44:7d:9a:f9:
         99:f6:b2:4f:2d:67:22:51:45:fb:cb:8b:60:40:44:6e:05:9c:
         b2:45:99:23:85:31:86:fd:88:89:21:39:6b:6b:1b:5f:c3:0a:
         d8:d1:d9:af:f7:95:df:91:a4:bc:95:91:33:bb:4a:3a:55:dc:
         e0:de:ee:d3:12:bb:0a:7c:07:1b:42:99:00:38:d2:ea:44:a4:
         2b:fe:2e:e6:60:7e:d4:92:05:56:8c:d1:fa:c8:e8:e9:57:72:
         96:b3:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:47:47 2025 by rpki-client