Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
File:                     ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft (raw, json)
Hash identifier:          jmuM0bIg1kwz3ren0UUUAcokc4Mnq44jQVdstVZeaKU=
Subject key identifier:   72:B3:BA:E5:0C:B2:C0:C3:F9:EA:0B:CD:87:E6:76:B9:11:66:F5:FF
Authority key identifier: CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1
Certificate issuer:       /CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
Certificate serial:       0197488C07814F175250A36CD0C5BD9DBF3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
Manifest number:          68
Signing time:             Sat 07 Jun 2025 04:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:25 +0000
Files and hashes:         1: ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl (hash: m2WNxI0blbHfJaCPsLWOxMPeDT2Cw75E6UiXeemMdHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:07:81:4f:17:52:50:a3:6c:d0:c5:bd:9d:bf:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6ceea2c32be0386ce07af1fe63d22485c12ef1
        Validity
            Not Before: Jun  7 04:00:25 2025 GMT
            Not After : Jun  8 04:00:25 2025 GMT
        Subject: CN=72b3bae50cb2c0c3f9ea0bcd87e676b91166f5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:f0:56:14:f5:98:67:8d:da:e7:29:2c:e9:
                    85:c0:22:36:00:00:25:b2:61:16:40:e4:af:a5:00:
                    11:f5:5e:c8:9d:db:0d:59:ae:f7:89:8c:f4:79:38:
                    07:14:b7:cc:dd:72:41:93:4c:77:b7:57:c5:79:cf:
                    8a:44:ea:ff:e4:71:43:85:97:b8:9b:ab:ce:ca:bd:
                    d9:51:f9:a5:c2:3c:5d:bb:1f:31:b0:0b:5e:fd:cb:
                    00:fa:d0:bf:df:0c:cd:fb:f1:b2:8d:3b:f2:ae:8e:
                    5e:77:dd:86:5a:17:bd:61:e2:db:3e:9e:c2:0e:6e:
                    5e:a5:a6:f4:68:88:be:cc:99:68:dd:b4:3c:59:57:
                    43:a0:95:89:3e:11:eb:08:12:a9:a3:2f:0c:cf:81:
                    ad:08:c4:75:93:55:44:fc:43:cf:e3:fe:84:f5:c1:
                    9d:02:ca:6e:7c:95:79:15:3d:f6:f8:cf:8e:b7:ca:
                    a9:bf:6c:b2:57:4f:3c:6f:e6:4c:20:54:dd:3e:57:
                    16:15:0f:bb:fe:ee:f6:92:44:7a:12:ed:1b:19:eb:
                    e7:b4:df:01:31:58:5a:16:ef:65:d7:c7:b6:36:4c:
                    59:b7:ef:9e:7d:85:ca:e2:0f:e3:74:63:fb:f3:50:
                    fa:d7:76:e5:73:3b:16:49:72:6d:93:6d:2b:92:73:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:BA:E5:0C:B2:C0:C3:F9:EA:0B:CD:87:E6:76:B9:11:66:F5:FF
            X509v3 Authority Key Identifier:
                keyid:CA:6C:EE:A2:C3:2B:E0:38:6C:E0:7A:F1:FE:63:D2:24:85:C1:2E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ed06f3-b1dc-4f8e-b84d-e109aa952f6c/1/ymzuosMr4Dhs4Hrx_mPSJIXBLvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:e5:a9:07:f4:84:88:de:34:9c:4b:9f:0f:63:04:56:d2:
         ad:43:9a:2a:bd:06:65:75:67:48:5e:09:89:c4:89:8a:6e:12:
         3e:02:4a:04:3b:63:f8:34:af:38:36:3b:82:31:d3:5d:11:00:
         b9:a6:e1:32:29:f3:0f:17:af:89:f9:d3:0f:2e:c2:d4:7b:d9:
         4f:0b:98:53:4f:1c:93:51:e2:d2:f9:79:ad:c2:09:c4:e6:67:
         05:5e:ae:fc:24:fe:34:ed:d0:c6:7b:82:4e:6a:e6:f8:e6:99:
         71:7a:8f:86:5b:4f:f8:e3:ac:cb:23:fc:4f:d0:a9:2e:81:7a:
         f4:51:99:ea:c8:8f:e1:2c:85:87:b1:4a:72:21:4c:bc:5a:03:
         2e:7e:5b:c1:0a:a8:b4:8a:85:9b:d0:4f:1d:60:36:16:10:57:
         b4:96:dc:40:2d:df:3f:8c:a6:e3:23:42:a4:d8:34:ed:f6:37:
         55:27:fb:f6:46:8a:04:36:bf:a4:9d:49:b4:03:ec:6f:7d:e0:
         7a:95:39:56:2f:0d:65:47:83:ff:39:a6:50:2a:85:63:4c:e6:
         03:46:82:0c:f0:de:24:38:a5:db:63:d2:68:93:f4:8b:fb:23:
         33:21:78:0b:fe:8f:8f:ea:1c:9b:63:f9:f5:a1:60:19:7f:16:
         fc:57:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:07 2025 by rpki-client