Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
File:                     Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft (raw, json)
Hash identifier:          csSPVaUcamtcFkCAnq4/bFs2MZy0/zu2kGfUQ7tABcU=
Subject key identifier:   6C:CE:B8:21:D8:F5:47:B8:96:6C:95:AD:BC:26:4F:37:72:FF:B5:4B
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Certificate issuer:       /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial:       01974C69C3BD310E532FF99AC301CEFE2ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
Manifest number:          1474
Signing time:             Sat 07 Jun 2025 22:01:29 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:29 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:29 +0000
Files and hashes:         1: Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl (hash: 2JYhQESzp+VyjvAbOGmrVK6UlM4PUW88jZvKItZJtWQ=)
                          2: cEfVPR5BCH6wIIt0Scz-CewioBQ.roa (hash: uAMhXs6DpT0RTpQCmLK6tpFYd7c3BBCguRMW7ETBwj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:c3:bd:31:0e:53:2f:f9:9a:c3:01:ce:fe:2e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Validity
            Not Before: Jun  7 22:01:29 2025 GMT
            Not After : Jun  8 22:01:29 2025 GMT
        Subject: CN=6cceb821d8f547b8966c95adbc264f3772ffb54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:71:8b:9f:c7:61:47:94:2c:83:2b:54:f7:15:
                    2f:02:06:cc:98:31:56:b7:5b:5f:50:44:64:77:bb:
                    70:6e:10:99:59:80:74:82:92:a2:38:d8:ec:41:4d:
                    d8:50:8d:76:82:a9:28:7f:6b:4e:ef:bb:0e:ed:22:
                    eb:5f:5d:77:d7:58:8e:a8:40:ae:91:4c:21:e4:fd:
                    38:4c:1d:5f:a6:c5:62:e6:c0:8f:4e:46:ac:d2:26:
                    d6:8e:12:52:fc:6c:ba:3d:d6:8f:71:21:02:e6:39:
                    9a:c1:80:69:be:31:68:69:0d:dc:18:9a:4b:c9:37:
                    3b:de:02:53:34:e4:48:77:30:c2:b9:24:63:33:8c:
                    3e:1e:7d:ff:27:4a:77:0f:e9:73:dd:4c:58:4b:a4:
                    c5:ec:72:bf:4a:b3:5e:3a:8f:f4:24:12:0c:73:88:
                    f8:11:e4:6a:66:2a:3a:45:e8:88:ec:19:fe:35:96:
                    36:e3:83:ef:48:aa:4e:e2:fb:de:2f:c2:dc:b0:fc:
                    40:08:2f:f3:bb:fd:c7:2c:a1:8d:cf:9a:83:b6:54:
                    01:e8:48:6f:90:88:6e:b5:93:bb:b0:88:a3:b4:a4:
                    29:14:f7:69:f0:fc:4d:40:e2:8c:a6:f9:3a:e7:ed:
                    49:43:15:87:c6:67:b5:94:b3:2e:9b:a2:e9:34:b8:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:B8:21:D8:F5:47:B8:96:6C:95:AD:BC:26:4F:37:72:FF:B5:4B
            X509v3 Authority Key Identifier:
                keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:76:36:ef:93:40:b6:3c:3a:71:0b:89:8a:ff:a9:b1:71:
         87:0d:a1:c6:50:51:cd:c8:d9:ab:fb:38:4e:79:d2:d9:4a:33:
         da:03:37:0d:33:41:7e:c2:f7:ef:33:86:22:54:64:6e:60:96:
         e4:b3:0c:15:e9:6d:ef:02:e8:a3:a9:16:b2:36:a1:c4:3e:f0:
         bc:42:bf:24:fc:88:0d:6f:0b:2f:ce:3d:af:6f:4c:1d:0a:88:
         ff:f7:25:d1:b8:30:33:d0:15:df:65:a4:3a:49:f6:7a:7a:ea:
         86:63:35:8f:03:aa:a8:ad:c3:68:fd:03:ed:7c:4e:d6:69:4e:
         5a:58:0c:49:47:c1:85:b7:8d:6f:7d:e5:4d:8a:44:cf:68:6a:
         9c:5a:e4:6b:c2:6e:03:81:7b:ef:64:37:a2:23:0b:7f:6c:6b:
         5e:f8:ff:ac:e2:c3:30:a7:8f:7f:66:30:de:95:66:85:2c:cc:
         17:7e:ed:ca:d8:2f:03:e3:87:c1:ed:79:e4:55:e1:67:b1:cd:
         32:df:58:fa:0b:58:86:85:72:4c:bb:2c:06:d9:3a:d8:79:28:
         ee:63:bf:53:42:11:9d:31:40:c1:08:94:d1:86:ee:90:04:80:
         da:04:9b:b4:e4:bd:1e:b3:b8:da:bc:85:52:2d:d0:7a:27:1a:
         57:05:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:31:42 2025 by rpki-client