Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File:                     yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier:          fOeA4b9FuJj1DzaComrXv7YIkrAg8C94B5pKvS/iR08=
Subject key identifier:   C6:6F:C2:4D:8B:BC:53:0F:E0:7D:BA:EB:E3:85:88:4A:7A:75:EB:8E
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer:       /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial:       019759801D0FF9EB356B6D4C5EFFD118A8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number:          0A06
Signing time:             Tue 10 Jun 2025 11:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 11:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 11:00:57 +0000
Files and hashes:         1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
                          2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: TKJxSCpPdA0CVgULDP0CWaRaGZ7qxNMInBEoj+RFCMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:80:1d:0f:f9:eb:35:6b:6d:4c:5e:ff:d1:18:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
        Validity
            Not Before: Jun 10 11:00:57 2025 GMT
            Not After : Jun 11 11:00:57 2025 GMT
        Subject: CN=c66fc24d8bbc530fe07dbaebe385884a7a75eb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:a7:90:92:cc:73:0c:12:9e:98:09:ee:5a:
                    09:30:78:49:cb:f9:ff:ae:35:c1:77:35:62:a7:99:
                    57:e7:88:15:66:36:62:1e:d9:d2:b1:ee:52:03:10:
                    76:ae:60:8e:b0:4d:e2:45:06:cb:1a:62:63:15:6e:
                    5f:a9:86:2a:f6:1d:ec:28:ed:22:e7:69:a8:c4:a3:
                    01:12:81:c7:aa:3e:ec:51:30:3c:53:e5:c9:b4:80:
                    c2:2a:24:a5:1a:e4:bc:be:08:29:25:9b:b5:23:17:
                    2f:46:7c:e6:78:5e:ab:82:29:23:c4:db:10:d4:f8:
                    27:bf:be:e7:10:a5:32:89:50:84:18:b7:7e:5d:b5:
                    74:a8:48:53:b7:7e:23:9b:0e:61:a7:54:56:21:61:
                    b1:78:f1:7a:8d:49:ab:6b:62:fa:f7:38:88:06:bc:
                    04:78:a3:3e:34:6f:4b:c9:4d:d7:fe:f0:41:43:62:
                    1f:68:e1:0c:3e:46:00:bb:97:95:f2:4d:5d:c6:d3:
                    d5:b3:ed:e1:46:e2:66:6c:c7:8b:82:63:86:45:22:
                    93:d4:e1:06:bd:4a:9f:99:21:00:b5:d9:71:2f:61:
                    46:ac:16:ab:54:01:bd:25:dc:c0:32:b1:b1:82:2a:
                    c6:5a:24:93:53:60:27:96:fa:03:89:db:a1:00:54:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6F:C2:4D:8B:BC:53:0F:E0:7D:BA:EB:E3:85:88:4A:7A:75:EB:8E
            X509v3 Authority Key Identifier:
                keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:5c:c9:4a:7a:7a:bc:eb:8a:eb:bd:d5:95:bf:d8:19:4c:
         52:56:30:1f:98:cf:ff:62:1c:23:09:08:92:2b:98:e0:c9:5d:
         c4:24:73:f0:7f:4a:7c:d7:26:01:84:a3:f1:65:14:76:65:7b:
         a8:ff:c3:6e:b4:c1:eb:6c:55:41:ad:e7:d5:6f:59:f1:24:5e:
         f3:15:2f:d6:40:d2:53:af:2c:e6:f6:4f:2a:5d:a7:b9:e1:3c:
         b0:e2:59:20:5d:0e:a2:f5:0d:83:f1:b1:8f:4a:21:e1:c4:4e:
         85:2e:02:7a:d8:f4:fe:fd:e6:1d:3d:f0:57:36:99:d6:e8:63:
         b7:ff:5d:d3:fa:04:bf:b3:54:54:12:ba:e0:12:2e:6a:c9:33:
         2d:99:65:51:54:5c:8e:dc:1e:21:a1:1c:c0:27:08:02:61:e5:
         1b:32:54:be:36:4a:7d:6a:90:78:e3:f4:4b:8b:9f:ae:90:e9:
         da:61:82:09:ff:6c:98:78:e3:75:80:63:15:6a:c8:b2:b9:63:
         08:8c:a3:11:a0:e3:9a:21:bd:2f:f2:f2:ce:fb:1b:a5:da:1b:
         bf:c3:68:2c:37:71:a7:6b:f1:8d:e3:63:4c:7f:09:d8:d4:6b:
         49:47:89:49:cf:d2:28:9e:75:a3:2b:7c:f1:83:3a:7f:0f:db:
         27:d4:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:13:39 2025 by rpki-client