Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
File:                     cyYKr-_i7gcuQGLnvxq42cQghWE.mft (raw, json)
Hash identifier:          bF/wHPanMGsLENeq3yFTlJBBp0twBi6pXzb885UYWxI=
Subject key identifier:   F8:31:1F:B1:B6:ED:2E:C0:B6:2A:A0:08:10:6D:E0:B6:D8:8C:1B:9B
Authority key identifier: 73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61
Certificate issuer:       /CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
Certificate serial:       01974FD7A6208826BF33145203721F748EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 14:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:22 +0000
Files and hashes:         1: Xr6lOU6Tyn_u4v5GW5vdi-zMXGM.roa (hash: 80FIdGSyhpgpiEyJdmuxntmRKHZK2fr3v8thq23exzs=)
                          2: cyYKr-_i7gcuQGLnvxq42cQghWE.crl (hash: aIcCGSluNpQBe1AH7dq7CIlfFwKrtr7pSRiHtFtBQ9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:a6:20:88:26:bf:33:14:52:03:72:1f:74:8e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73260aafefe2ee072e4062e7bf1ab8d9c4208561
        Validity
            Not Before: Jun  8 14:00:22 2025 GMT
            Not After : Jun  9 14:00:22 2025 GMT
        Subject: CN=f8311fb1b6ed2ec0b62aa008106de0b6d88c1b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:c0:6c:ea:2f:26:12:10:6e:64:d6:22:05:
                    ce:44:e8:6c:69:a4:61:a3:30:93:a9:8f:8c:d7:ab:
                    f6:10:80:af:2e:6e:88:0f:29:b9:1d:e7:47:83:03:
                    b1:7f:2d:c5:34:3c:1a:80:80:33:2a:16:9f:c2:91:
                    d0:c6:8c:57:22:73:c1:da:08:0b:40:db:0a:31:b5:
                    b8:b6:04:79:95:35:96:1b:57:f4:7e:40:76:c7:cc:
                    4d:0a:90:29:73:ba:9d:aa:2d:e4:19:a0:af:1e:8a:
                    bf:1b:6d:25:cd:8d:34:04:15:df:e9:ac:68:fe:15:
                    02:eb:ee:44:90:46:60:d7:54:c5:ff:2a:3c:e9:b1:
                    7d:9e:b2:d8:37:c3:bd:5c:fe:b9:2e:7e:cb:cf:5d:
                    ea:52:61:7c:f2:fe:5a:a9:17:61:38:f1:fe:af:cc:
                    8e:0e:45:92:d9:20:dd:62:e0:8f:e9:be:f7:db:35:
                    72:b5:dd:45:57:25:67:b2:ae:54:99:3d:86:62:74:
                    ba:e5:3c:57:b6:64:29:ba:32:65:04:b3:aa:88:50:
                    79:c3:8a:6a:80:72:44:fc:2e:46:72:ed:8c:7b:e4:
                    d0:7c:ff:a7:f2:9d:01:eb:9f:47:4c:30:6f:ee:14:
                    96:28:72:a9:50:14:a6:54:a4:07:74:c6:db:a6:4e:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:31:1F:B1:B6:ED:2E:C0:B6:2A:A0:08:10:6D:E0:B6:D8:8C:1B:9B
            X509v3 Authority Key Identifier:
                keyid:73:26:0A:AF:EF:E2:EE:07:2E:40:62:E7:BF:1A:B8:D9:C4:20:85:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyYKr-_i7gcuQGLnvxq42cQghWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/36c2b8-12df-4552-9a1e-8ad0f068d161/1/cyYKr-_i7gcuQGLnvxq42cQghWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:6f:3a:bf:98:1c:c3:6c:aa:fc:2b:7b:00:d8:49:d7:75:
         76:60:54:cb:74:bf:0a:9b:3e:1e:bb:07:e4:ed:a6:b6:cf:42:
         22:72:0d:98:15:99:1e:26:69:8c:7a:3d:ba:be:8f:9a:0a:35:
         b0:2f:fa:1f:19:08:b8:13:56:44:af:1a:69:bd:5a:29:b1:77:
         7d:90:8f:a3:8d:a3:f5:59:aa:bd:dc:bc:e6:43:4d:83:fc:73:
         34:97:a4:a8:23:e7:74:5c:ad:27:c5:48:3e:e2:12:8f:b0:88:
         6e:a6:49:a1:d0:25:7a:24:b3:bf:3c:c1:66:82:a2:e3:3d:e5:
         c5:e2:e0:70:0f:19:a0:64:20:17:24:42:d8:59:83:8d:80:0b:
         f6:e7:ee:2b:cd:a2:1a:f4:10:bf:d4:a8:ab:8b:ba:dc:00:36:
         89:17:44:7f:41:81:45:bd:74:25:9d:0e:41:8a:57:d4:33:da:
         71:6d:27:4f:f9:8c:e5:57:99:cf:3a:40:52:56:fd:26:52:8e:
         bc:5e:bd:32:fc:02:0a:5e:72:f5:aa:bd:87:e3:1e:25:1c:94:
         bf:09:2d:45:fb:03:29:17:ba:a6:8c:c7:c0:67:94:7d:f6:7c:
         b3:01:93:1d:d4:23:5a:ed:9b:9c:f1:fc:12:b4:c6:82:9d:f3:
         08:5e:6f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:27 2025 by rpki-client