Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File:                     yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier:          tlaptjwGHtVXb8GY+AS9cxOq2JNgbH/4h7qb9ehjSyE=
Subject key identifier:   69:19:E8:99:22:09:B8:E6:16:5D:15:A7:E5:4B:6C:68:DC:C2:1A:BB
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer:       /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial:       019764033DE7020513656687B143143E6463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number:          0FD2
Signing time:             Thu 12 Jun 2025 12:00:23 +0000
Manifest this update:     Thu 12 Jun 2025 12:00:23 +0000
Manifest next update:     Fri 13 Jun 2025 12:00:23 +0000
Files and hashes:         1: 3PSx9dotZYAyDtqMkmvWnodExOo.roa (hash: vk6bcm3rilt5w+/C+Ma6CzJC2WgKxVja0T1kBgt8Mfo=)
                          2: YC3-xixw4XeW0DEnxSoXSA3y9I0.roa (hash: g2+qW4cdB8k/DANIZo5brjTh6TFBwg+CXUq3jLsJYWU=)
                          3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: E/fV+fCP+iSTPCYB3YzkP/xvALlXGBrt7J8svxcwPWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:03:3d:e7:02:05:13:65:66:87:b1:43:14:3e:64:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
        Validity
            Not Before: Jun 12 12:00:23 2025 GMT
            Not After : Jun 13 12:00:23 2025 GMT
        Subject: CN=6919e8992209b8e6165d15a7e54b6c68dcc21abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:f4:69:a6:86:e7:6b:21:76:d8:81:5b:3e:
                    0a:30:9d:d3:e7:e6:95:c7:31:ab:01:b2:70:07:86:
                    40:1b:c8:1b:5c:b4:34:86:18:69:a3:f8:bc:a6:99:
                    61:ae:84:7a:5d:ba:a3:70:d7:32:5a:f2:ca:56:97:
                    c5:c0:5b:db:75:75:4c:1b:b6:e2:c5:c7:9a:8b:08:
                    9f:9c:52:8e:40:08:41:56:f2:78:20:3b:53:b2:df:
                    6b:c7:d4:cc:e7:35:7b:58:89:db:4b:5c:5e:5f:f7:
                    3c:e1:b0:d3:7f:e5:40:98:1f:a1:6d:72:8c:6e:e0:
                    cc:57:39:4e:c1:39:70:3e:7a:af:bc:5e:31:65:55:
                    68:b2:e3:03:a0:74:e3:bc:7b:28:05:d5:23:55:a4:
                    e9:c6:fc:ae:ac:b8:e6:ed:74:3b:fe:f0:f9:48:e0:
                    9a:70:39:55:b6:e2:90:49:a9:ba:f1:05:d0:39:40:
                    ba:95:83:e4:ed:69:15:80:05:5c:00:6f:da:86:dc:
                    99:c4:b4:55:cf:46:28:57:f6:ad:ea:4b:dc:c6:31:
                    83:23:59:c2:8b:7d:5e:e4:39:24:12:44:28:61:4e:
                    12:91:0f:1f:db:92:4a:68:03:c0:71:ed:25:9f:af:
                    b6:ca:88:51:63:59:d8:95:c1:18:79:74:d5:e3:aa:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:E8:99:22:09:B8:E6:16:5D:15:A7:E5:4B:6C:68:DC:C2:1A:BB
            X509v3 Authority Key Identifier:
                keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:ec:92:bc:67:33:2a:39:8e:be:a9:fb:2f:74:7f:6a:fe:
         4b:45:6a:59:ad:e5:04:73:18:ff:5b:2b:de:c3:54:cb:20:60:
         23:80:55:68:ad:12:17:1e:90:51:cb:3e:ec:05:cc:76:11:72:
         f8:1a:60:82:67:b7:03:48:e3:bf:30:d2:b9:fb:07:bf:cf:89:
         6e:8d:23:ec:2c:3b:c5:df:c2:fd:c4:61:b4:2a:68:28:9f:dd:
         a8:2b:f2:a7:90:8e:f4:b2:ce:17:4f:8a:8c:23:b5:e3:50:59:
         07:20:52:b6:e4:78:46:a8:39:f0:25:63:74:b8:2f:76:5f:8c:
         ea:00:03:e1:08:75:7c:3f:2f:57:3d:7e:ff:38:b2:e0:89:20:
         be:7f:88:d8:88:81:aa:e6:52:c1:9c:bd:31:74:98:5f:a6:6e:
         b5:42:48:f3:da:c0:21:38:d8:9c:76:49:2d:eb:7d:8f:28:c4:
         87:87:26:d5:c3:26:d0:54:2a:8e:82:c9:a7:12:d4:dd:14:60:
         e5:c3:30:4f:12:7a:e0:14:4f:8e:5e:64:dd:cb:9f:a2:33:20:
         a1:b7:2e:83:bc:3f:ca:5a:cb:6c:6f:2e:41:96:80:5d:64:0a:
         27:1b:d7:f5:42:2b:78:eb:b7:fb:61:64:09:96:72:9d:b6:26:
         7f:57:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:45:39 2025 by rpki-client