Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File:                     rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier:          A6pwAqP0efiWAoBBs1VxB7wraRyrg699S19s+tq+EAk=
Subject key identifier:   F0:47:DB:0B:47:13:4F:66:57:39:6B:5D:0B:3F:76:EE:2E:00:05:37
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer:       /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial:       01974E576DD574EAF59DDCB26CB9F365A19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number:          07CE
Signing time:             Sun 08 Jun 2025 07:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:41 +0000
Files and hashes:         1: od7ExObCxDqzHqRis0nMtXmus2Y.roa (hash: WoaJOBOnB6iTsR77zkPSuoVOWwQU/LjcUNKKgIIFfv0=)
                          2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: vlxK9ROnjzHVzHzRS20s0qdC2mopK0PRTAevd4GhYx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:6d:d5:74:ea:f5:9d:dc:b2:6c:b9:f3:65:a1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
        Validity
            Not Before: Jun  8 07:00:41 2025 GMT
            Not After : Jun  9 07:00:41 2025 GMT
        Subject: CN=f047db0b47134f6657396b5d0b3f76ee2e000537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:67:d1:81:f7:68:85:44:5c:04:01:84:66:
                    94:12:6a:11:91:1c:7b:10:31:6d:08:b8:5c:46:37:
                    aa:ad:58:83:44:1c:b6:b1:56:4e:10:c7:c9:cd:62:
                    5e:ca:09:b1:03:af:34:29:d9:ee:23:60:7e:77:5a:
                    dd:fc:d2:72:47:5f:f5:39:07:da:3f:ec:c8:08:7d:
                    57:86:3b:ed:7d:e7:2d:c1:e6:6e:f8:20:8f:11:bb:
                    d6:15:36:9b:3d:70:cb:1b:eb:c0:61:a7:cb:78:b5:
                    f2:6c:4b:f0:ec:8c:8b:cf:3f:91:69:42:59:89:40:
                    76:e2:3c:30:af:d2:85:ec:c0:21:03:71:0b:d8:0f:
                    cd:2b:44:c1:8d:4b:0d:2e:47:c5:b8:27:39:89:c0:
                    61:2f:2f:52:33:e0:c3:ce:0b:d0:05:e9:68:c5:ab:
                    c8:96:f3:94:b2:60:bf:af:49:58:db:c6:0f:08:25:
                    be:86:ad:56:d8:15:98:bf:d2:8c:2d:bb:51:b2:9e:
                    8e:cb:06:bb:66:55:2c:4a:8b:20:41:e6:df:eb:1f:
                    8c:9f:6a:35:65:97:56:92:56:59:6c:70:1f:50:00:
                    68:3b:ad:3a:e5:4c:a9:17:64:d9:73:2c:b5:dc:71:
                    f8:e8:6e:66:bf:b5:cd:73:96:5f:16:c3:1a:f6:78:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:DB:0B:47:13:4F:66:57:39:6B:5D:0B:3F:76:EE:2E:00:05:37
            X509v3 Authority Key Identifier:
                keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:f7:8c:0d:ed:ad:7b:f7:b3:2e:3c:6e:5e:10:7a:df:7d:
         ee:2e:18:2f:9a:11:bb:bc:a3:89:7a:74:5c:67:78:a9:d7:0f:
         74:5b:32:81:51:b6:3e:82:36:04:f2:6a:ed:30:8f:89:75:80:
         10:a8:43:c8:8b:13:70:43:78:7f:a2:0d:03:c6:cd:5f:b1:58:
         89:f4:5c:b2:58:06:2f:f8:27:c4:e8:8d:09:2a:52:4b:53:ca:
         d3:16:64:85:11:1a:61:48:15:35:5e:ae:69:cb:ac:e9:5b:de:
         e6:d5:d4:eb:fd:84:58:85:aa:39:98:d7:87:d9:dc:58:a8:f3:
         02:ed:49:bd:02:96:80:88:d9:16:87:73:11:fb:7b:f0:0c:b7:
         33:ad:9f:8e:9e:c1:1b:33:f2:b1:2c:41:a0:2f:cf:5c:3a:d1:
         d1:37:8d:e3:e5:9f:f9:eb:20:70:85:43:3f:8e:0b:dc:27:14:
         06:36:01:91:85:2b:1f:e7:d8:f7:5c:a8:bb:3d:85:f0:28:97:
         f4:fc:51:41:15:4c:3a:61:aa:bd:1c:f4:d4:6f:87:e0:f5:65:
         35:44:e0:0d:a1:f2:ef:ae:3b:b7:29:13:e1:15:b2:cf:1a:cd:
         11:33:ec:9f:6d:dc:f5:76:39:82:ea:5c:4a:a3:8a:19:67:f8:
         77:36:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:23:57 2025 by rpki-client