Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File:                     YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier:          2XhaUqwAyyA0Hs2z0YZ7A2dhX8NRzondkS5L/6aUzvY=
Subject key identifier:   EA:92:0E:AA:EB:29:54:29:BA:CC:C4:01:40:F5:D1:B9:27:0B:10:A4
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer:       /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial:       019753B45B8C069874455D8A909CB56C4435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 08:00:18 +0000
Manifest this update:     Mon 09 Jun 2025 08:00:18 +0000
Manifest next update:     Tue 10 Jun 2025 08:00:18 +0000
Files and hashes:         1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
                          2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: yofwrOWHiyAqsxkf5C9NnlBQR8/UYaGfO2NsEMBA/YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:b4:5b:8c:06:98:74:45:5d:8a:90:9c:b5:6c:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
        Validity
            Not Before: Jun  9 08:00:18 2025 GMT
            Not After : Jun 10 08:00:18 2025 GMT
        Subject: CN=ea920eaaeb295429baccc40140f5d1b9270b10a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:c3:65:d6:26:b7:46:81:b7:92:ad:2b:0a:
                    11:2e:01:45:a6:49:54:ce:d6:f4:45:3c:f3:d5:05:
                    26:6e:b9:79:52:32:c9:77:0b:bc:9b:ee:83:99:2d:
                    9c:f7:16:b6:5a:6d:cb:2d:a5:9e:c5:7b:a3:06:4a:
                    49:79:89:de:e8:a3:71:1a:70:85:6a:14:90:b4:77:
                    04:41:7b:98:71:2d:97:26:6c:ce:c3:d7:74:ba:7f:
                    8f:8c:5a:a9:48:59:1a:aa:a8:74:f0:f5:11:2e:d1:
                    d6:08:8e:b5:38:57:48:99:52:04:fe:a1:95:a7:a6:
                    c6:cf:d9:93:51:75:b0:9d:fd:00:09:72:c6:9d:69:
                    6d:99:ba:61:07:74:43:f9:d1:73:14:0b:65:a0:14:
                    26:10:f0:37:c1:8e:68:89:b6:4c:52:34:d0:66:eb:
                    96:ce:6a:a9:0d:fe:5c:d3:0e:14:a7:e7:8e:f0:e1:
                    c8:75:03:cb:24:e4:cc:85:ce:1f:0b:dd:4c:47:c2:
                    44:b8:0f:8d:c7:9a:09:d7:f0:89:4a:9f:4e:aa:f3:
                    6c:45:72:55:9d:f7:a1:1e:37:a5:04:dc:fe:bd:35:
                    39:94:b5:0b:33:96:7b:2e:94:0a:b2:2c:77:f8:9f:
                    d1:6d:66:5c:4c:a2:5c:00:ba:00:9f:05:22:c9:b8:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:92:0E:AA:EB:29:54:29:BA:CC:C4:01:40:F5:D1:B9:27:0B:10:A4
            X509v3 Authority Key Identifier:
                keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:39:d1:ca:88:d3:83:ca:c3:34:37:bb:c6:04:46:40:f8:85:
         bf:d4:ce:7f:be:3e:99:4f:86:98:cc:49:63:4e:be:f0:23:20:
         43:a7:ae:43:b8:0c:3d:e9:25:79:ae:a7:ec:b1:11:f5:2b:5a:
         3b:bd:e2:15:60:20:50:c9:58:dd:86:5e:15:e4:0f:b8:c8:09:
         e1:c3:a5:6b:72:1c:60:e8:6a:85:66:37:39:8d:47:f1:d4:49:
         c8:33:13:4e:28:20:62:7d:2a:69:dd:3b:52:8e:32:d1:94:f2:
         37:9c:40:da:47:da:f4:ff:fb:93:b0:bf:2e:58:85:96:fe:40:
         74:b5:b5:a4:b7:4a:ff:c4:4b:e5:82:f0:cd:4f:64:ce:59:de:
         31:28:45:93:87:cf:2f:2e:6d:ba:e2:a7:8b:52:eb:a2:e1:b2:
         89:c5:16:6e:b5:45:76:30:97:3a:5b:97:a0:c0:e1:9a:6f:b2:
         ac:03:d9:48:62:c4:60:df:db:c5:d7:fa:b3:4a:c5:50:5e:dd:
         f1:85:0a:f7:de:c5:b7:af:f2:90:21:28:b2:7c:33:f0:a4:2c:
         3f:49:c4:82:dd:c9:00:02:e0:d5:dd:48:cf:4f:73:ab:02:c1:
         7f:fe:ef:83:49:66:d6:9e:10:bb:1b:c8:fb:3e:e8:37:6d:63:
         6d:3b:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:00 2025 by rpki-client