Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          c6XPZN/A+oroASCmrnw0CBQ+beRpPqUH+vXI/tgQpHs=
Subject key identifier:   16:C9:69:5F:F7:9C:4F:24:42:A3:73:7E:F8:C7:2F:23:DB:02:32:E0
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       01963F1DAF56C5244462ACF9EF540B3AE0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          10B5
Signing time:             Wed 16 Apr 2025 15:00:31 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:31 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:31 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: auhowLq6RSvBOXdM8n18I2rQbZaT3KQcdlumvwPzz3M=)
                          2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:af:56:c5:24:44:62:ac:f9:ef:54:0b:3a:e0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Apr 16 15:00:31 2025 GMT
            Not After : Apr 17 15:00:31 2025 GMT
        Subject: CN=16c9695ff79c4f2442a3737ef8c72f23db0232e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:6a:f9:21:40:5a:16:ea:ca:02:c2:2b:f5:
                    83:f7:31:93:80:6e:96:90:62:6a:43:89:0c:04:a6:
                    db:51:45:b2:4f:b6:4d:37:b9:01:f1:2e:b4:62:62:
                    ae:cb:ce:1e:a5:59:00:ce:fc:e6:0b:fc:da:0d:de:
                    26:4a:d3:78:42:c4:4e:66:6f:ce:5c:5b:c1:f4:ee:
                    26:6c:59:df:bf:d3:e9:80:9e:77:6e:14:50:ba:b2:
                    ee:1a:1e:30:c5:77:f3:f1:82:04:99:bc:82:0b:eb:
                    86:6b:b7:7e:3a:06:d5:a4:53:50:8d:41:0b:a1:1e:
                    36:f8:b6:ff:45:df:d8:b1:75:e1:a8:07:e1:de:f9:
                    44:d4:61:c2:f4:98:44:fe:06:cd:66:40:e1:21:be:
                    ac:05:c9:ab:08:9c:4e:65:c1:01:61:e3:7d:b6:2e:
                    05:ee:ba:6a:f8:d7:92:53:c3:6d:33:b4:1c:78:92:
                    cc:1e:7c:17:08:a5:ee:da:c8:01:47:47:cf:ae:87:
                    7a:2d:27:f0:6a:99:92:c8:4a:9c:d7:a9:51:0f:cc:
                    ff:de:cd:1d:48:55:5b:ce:65:45:f6:eb:4e:a5:f5:
                    21:a2:0f:ed:35:f6:9f:e7:40:d3:f5:b5:c8:23:28:
                    d3:02:54:d6:37:7d:46:15:b4:f0:24:6c:59:35:d3:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C9:69:5F:F7:9C:4F:24:42:A3:73:7E:F8:C7:2F:23:DB:02:32:E0
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:3e:6f:6c:6a:d8:b3:11:43:a9:bd:14:de:05:89:a3:4f:
         a1:b5:b3:bb:69:f7:84:59:af:a8:e5:e4:5b:27:25:df:20:77:
         64:0c:06:11:f7:2a:9e:f7:0b:86:98:31:a2:d7:ca:0d:14:7f:
         9a:e4:fa:39:26:34:85:ca:63:a9:d3:ee:51:7c:11:6b:a4:81:
         a6:d3:84:58:ae:1c:d1:f9:c3:1e:6f:3a:24:10:6f:ec:44:21:
         f2:0b:9f:65:5b:eb:49:45:06:65:90:63:ec:f6:38:8b:8b:00:
         bf:09:1f:d5:52:94:70:b5:ca:50:89:5d:d2:9d:5b:60:28:a8:
         d8:9a:80:75:42:65:8b:49:f8:ab:f7:b0:b7:f0:f8:66:ff:2d:
         4f:3b:5d:4e:8c:18:20:ce:ff:f3:a4:84:d5:b3:7e:1f:0d:67:
         f1:96:5f:40:78:58:1f:d9:0f:78:89:31:3e:f0:25:81:22:9a:
         6b:f0:21:06:64:fd:eb:33:9b:73:49:6a:27:86:83:ef:f2:08:
         02:ad:41:9f:d2:0a:8d:73:ea:1f:2a:f8:4d:08:d7:62:c6:11:
         ea:94:07:63:b0:af:38:fc:ec:44:ed:56:4e:e6:f8:2c:64:c9:
         13:54:0b:84:71:d6:a0:0f:d4:f4:3f:69:71:b0:4b:6c:cc:87:
         65:52:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:04:00 2025 by rpki-client