Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
File:                     YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft (raw, json)
Hash identifier:          dHVX6lswJDgxj5yjpBwiPSTA5o4VWHnhY7RiNiWAb3o=
Subject key identifier:   2F:16:57:7A:D1:DE:CB:71:DF:78:0C:4A:8B:03:93:A1:32:44:C1:B2
Authority key identifier: 60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E
Certificate issuer:       /CN=602dc2478a4bdde4c440bb58802410d2340a490e
Certificate serial:       0197624C0E62E479B018B599B7EB9907FF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
Manifest number:          0319
Signing time:             Thu 12 Jun 2025 04:00:40 +0000
Manifest this update:     Thu 12 Jun 2025 04:00:40 +0000
Manifest next update:     Fri 13 Jun 2025 04:00:40 +0000
Files and hashes:         1: YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl (hash: PtyIf9YzQvoJ1Z/TcQCfEb6ENGsO9IZ6oBpG1lCHh/U=)
                          2: smYq7tWRQmDSDcZOZxN4k09kn3E.roa (hash: 1xSS1KTZCTSL9vZ9IsBObZKtAhuEJnmAaQ1yOo8feWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:4c:0e:62:e4:79:b0:18:b5:99:b7:eb:99:07:ff:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602dc2478a4bdde4c440bb58802410d2340a490e
        Validity
            Not Before: Jun 12 04:00:40 2025 GMT
            Not After : Jun 13 04:00:40 2025 GMT
        Subject: CN=2f16577ad1decb71df780c4a8b0393a13244c1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:d9:01:c4:fd:71:6c:16:fa:a8:24:aa:98:
                    32:4c:20:f8:84:03:d7:57:04:02:3b:89:4c:20:20:
                    d1:15:b1:2b:fd:15:32:61:eb:96:04:41:bc:b5:ef:
                    c8:f2:b5:44:2d:bc:75:73:03:1b:65:b4:54:be:87:
                    02:3f:1d:64:22:ea:9b:61:34:53:e3:3d:e3:24:46:
                    66:d4:6b:b1:6f:a5:b5:4a:61:82:e8:91:7d:cb:44:
                    11:88:63:44:74:37:23:01:86:94:6b:e3:5f:0a:5e:
                    91:c3:25:d7:1e:d5:da:a2:3b:45:1d:ec:23:bc:73:
                    02:c9:76:2f:4e:77:e2:d5:48:c2:53:12:2d:78:e1:
                    a1:32:e1:ca:a7:03:e6:10:d0:3d:6f:4c:e5:4b:ed:
                    26:fd:f7:10:22:1e:c6:d8:8b:19:5c:55:ae:ec:92:
                    40:4e:73:9a:c0:14:ef:6b:47:56:df:fb:ec:29:2b:
                    57:64:a0:ec:71:fe:d3:b9:dd:14:17:e2:17:0d:f4:
                    c0:b8:7b:8d:0d:f5:73:17:8d:34:20:9d:1b:73:98:
                    2b:ad:b1:d7:67:f5:d7:d9:a9:3a:59:bf:4a:0b:60:
                    d8:e1:0b:e9:c6:a3:04:98:aa:ee:ee:f0:6e:ee:c4:
                    21:fc:91:d6:e6:8c:4c:54:73:14:f3:b2:57:cc:1f:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:57:7A:D1:DE:CB:71:DF:78:0C:4A:8B:03:93:A1:32:44:C1:B2
            X509v3 Authority Key Identifier:
                keyid:60:2D:C2:47:8A:4B:DD:E4:C4:40:BB:58:80:24:10:D2:34:0A:49:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b81390-1023-450d-8ad3-5f713dfff114/1/YC3CR4pL3eTEQLtYgCQQ0jQKSQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:99:f0:d8:5f:5d:dc:c7:f1:2c:2b:30:bd:d6:2a:23:29:1c:
         24:b4:96:0d:ac:76:e6:07:5a:a3:c2:e4:2a:c7:81:a6:87:20:
         10:26:33:3d:5b:82:d1:c1:24:be:a7:aa:23:b8:18:9f:e4:50:
         86:cc:8d:0d:ad:9c:e9:c6:8b:58:7a:d7:28:60:dc:aa:11:ca:
         dd:5c:08:8f:49:dd:8e:48:bf:ee:bb:0c:b5:13:fa:b4:f5:01:
         ff:22:58:17:b7:cb:95:8c:fd:d3:99:11:ea:5c:f4:ea:9d:61:
         a3:d2:48:94:df:ac:a5:b9:40:5a:52:41:0c:05:34:eb:1f:12:
         40:62:7d:f8:e1:9c:85:2f:18:9d:3c:f4:99:db:ab:5f:6b:e3:
         c7:a9:15:57:ed:7a:7b:30:73:ba:ee:b0:46:cc:72:8e:a9:e6:
         5a:28:ce:07:6e:6e:3c:df:7c:fb:82:86:6a:24:bd:77:62:7f:
         e1:0c:5e:2e:c8:e1:f3:b4:30:5e:ac:78:2b:b6:b2:5b:74:c0:
         e0:81:e9:c7:ea:30:c7:e7:62:f8:e8:fa:69:88:ae:ce:db:98:
         0b:a4:35:b7:5a:49:70:6d:c2:0a:08:f0:ff:b5:8e:af:f2:14:
         66:98:bf:8f:72:6c:e2:90:96:d5:e6:bf:18:9d:8f:de:a9:e3:
         3f:c7:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:55:26 2025 by rpki-client