Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
File:                     YV-738kB6OsOzQ3T9AhcEonP7fc.mft (raw, json)
Hash identifier:          yGWZMkl2b42uZBfzR//TBcbf8b4/EsHiCy+V9Ga6y/U=
Subject key identifier:   99:59:58:BE:D1:F0:28:4F:85:F1:3D:A0:21:32:29:BB:E0:F5:05:11
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Certificate issuer:       /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial:       01975158D70B8BD064FA3026F0C25262A4B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 21:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:06 +0000
Files and hashes:         1: YV-738kB6OsOzQ3T9AhcEonP7fc.crl (hash: bvsGLOGhfP1Gju96O6lvdLU/Vdb01nCaTa8HSa6mRwU=)
                          2: zUm1UcOkH8VnWPvUTxzaQHBNg6s.roa (hash: YZzvXulBT76YYOeLZF1dhxyHao92MWHlpmNInJlWXUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:d7:0b:8b:d0:64:fa:30:26:f0:c2:52:62:a4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
        Validity
            Not Before: Jun  8 21:01:06 2025 GMT
            Not After : Jun  9 21:01:06 2025 GMT
        Subject: CN=995958bed1f0284f85f13da0213229bbe0f50511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:02:47:2d:ab:9b:24:38:8d:6b:c5:1f:cf:
                    a7:94:eb:27:20:22:c0:fb:23:87:99:96:5d:4f:9e:
                    eb:f4:d3:e9:f3:fa:bd:cb:6e:59:79:40:73:ac:ef:
                    9f:42:96:08:7a:d2:f2:ab:29:ca:25:7c:ac:f8:06:
                    82:32:ad:e4:9e:c7:fc:16:88:eb:4b:cd:08:e9:bf:
                    1f:46:b8:cb:86:95:04:7c:7a:87:7c:36:ed:61:6e:
                    56:cf:b4:f0:f7:3a:dc:a0:77:4a:f8:ae:e4:f8:39:
                    82:2b:ee:84:55:c6:36:a6:ff:37:8e:b3:8e:2f:ee:
                    04:8e:f7:d8:9e:b4:82:75:28:50:09:8f:d1:3f:76:
                    53:ec:e1:ff:6e:d6:21:14:b1:98:59:2b:a8:b3:e9:
                    e8:c3:75:c1:fe:eb:53:4b:45:a5:c8:f0:f3:07:28:
                    a4:7b:65:6c:8d:81:69:ea:95:b2:78:1b:61:df:df:
                    40:66:81:b2:7a:39:66:c3:81:72:ce:cd:eb:ff:ca:
                    89:d1:8c:7f:c3:40:63:cc:d1:10:f4:85:49:0e:de:
                    0d:85:54:99:00:a3:22:17:25:ee:c1:dc:86:74:64:
                    a9:bd:f8:92:dc:7a:24:ca:22:d4:fb:f8:98:75:3b:
                    75:19:2f:eb:45:af:56:9b:5f:97:cb:a4:88:25:15:
                    15:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:59:58:BE:D1:F0:28:4F:85:F1:3D:A0:21:32:29:BB:E0:F5:05:11
            X509v3 Authority Key Identifier:
                keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:79:c6:d5:12:00:5d:b8:f8:6e:a6:a7:24:42:4b:4b:f9:ab:
         90:f8:10:b4:be:51:3b:64:ef:a4:05:61:19:d0:c1:36:2b:42:
         4c:6e:05:ac:b4:53:34:17:51:b3:0b:35:98:46:57:9d:7f:e2:
         a3:3e:4b:54:1e:44:c0:78:0f:35:d9:9f:37:42:1c:6c:d0:08:
         c1:6f:d9:ba:06:f7:f3:3c:c8:a9:1c:b5:06:d6:c6:c3:d3:1e:
         1a:41:57:cb:6b:ac:46:66:37:9b:57:7c:34:a4:a8:d4:c8:f6:
         a1:a7:2c:7d:8c:2d:ce:52:95:3d:c6:39:ed:d5:50:07:4d:b2:
         21:1d:e4:89:ee:22:33:2c:52:6d:68:2f:e9:ab:0e:61:b8:31:
         70:a5:1e:1b:bd:a6:51:d3:b0:0b:b5:b2:3e:90:c7:a4:a8:bf:
         c2:0f:c8:2f:58:76:e7:43:57:9c:28:64:69:78:09:0c:a5:9a:
         f9:c1:a7:2b:f9:45:0d:9e:b2:3d:d3:78:da:12:c0:e9:a2:ec:
         f8:16:40:27:56:d6:e4:ad:17:7a:15:3c:1b:10:43:67:e4:d1:
         76:77:6c:31:72:ac:60:16:ad:f8:f3:33:cd:69:67:f6:47:b8:
         62:6e:3a:c9:6d:55:ed:d7:af:97:14:87:22:01:4f:16:49:68:
         a8:eb:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:20 2025 by rpki-client