Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          c4Mj/jYC2WV5BlWn82HubwXh5Xcz67jr2C2RVpxfFTs=
Subject key identifier:   FF:2E:06:A2:17:B9:55:61:92:AB:59:C6:A9:C4:76:47:D4:C9:77:02
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       01958F2A1B71C6E4C7353D5065B65DCF918A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          06FC
Signing time:             Thu 13 Mar 2025 11:00:56 +0000
Manifest this update:     Thu 13 Mar 2025 11:00:56 +0000
Manifest next update:     Fri 14 Mar 2025 11:00:56 +0000
Files and hashes:         1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=)
                          2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: PqHOvviL0fLU3JP5Wj67lJ7RVERaFPAkmVzYm7lPKRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:2a:1b:71:c6:e4:c7:35:3d:50:65:b6:5d:cf:91:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: Mar 13 11:00:56 2025 GMT
            Not After : Mar 14 11:00:56 2025 GMT
        Subject: CN=ff2e06a217b9556192ab59c6a9c47647d4c97702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:b5:cf:38:ba:b0:93:65:96:e9:27:81:32:
                    9b:0c:2b:8f:ba:c5:b3:f5:99:d6:3e:31:fd:b7:f7:
                    43:7e:51:be:ef:21:67:4e:6e:54:62:4f:91:a8:f6:
                    18:ca:cc:bf:7b:39:20:02:2c:81:36:46:89:ff:6a:
                    76:91:e6:28:e2:fe:43:17:12:d5:44:57:98:2b:42:
                    c2:2d:dc:f7:a5:c9:13:69:f4:c3:d9:cb:19:fa:c9:
                    ac:10:1d:52:2c:26:b7:e7:64:64:59:26:68:0d:bb:
                    e1:09:a5:a3:85:43:c2:60:c0:86:74:54:ff:2a:a8:
                    21:74:fc:2b:fb:c8:f0:f3:45:7b:9e:7c:be:18:4a:
                    c9:6a:7c:8a:3d:c4:5d:d2:c9:09:7c:78:cb:35:9c:
                    ff:27:93:5f:89:5f:43:92:26:83:fe:22:40:43:c7:
                    26:f6:68:92:07:6b:9b:f0:d5:a6:ea:ca:61:f1:50:
                    30:1d:cd:08:68:49:8f:d4:35:53:1e:63:3a:64:66:
                    79:15:6d:59:a0:59:1e:32:62:ef:03:a1:6f:3f:f7:
                    c4:50:55:4f:38:5d:6c:22:1f:02:b0:69:49:5b:56:
                    4e:57:7d:aa:43:9e:d5:62:fd:7d:35:04:50:ff:ad:
                    b2:fe:92:65:fd:6a:01:07:ae:32:59:df:b7:6e:3e:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2E:06:A2:17:B9:55:61:92:AB:59:C6:A9:C4:76:47:D4:C9:77:02
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:1b:74:19:1a:52:d2:50:fb:ca:2f:2d:bd:6a:a3:fa:5a:
         6c:06:38:c6:cd:5c:7a:fb:21:ff:43:49:33:71:70:e2:d6:3c:
         3d:36:82:ab:52:54:4e:c6:15:e5:2b:a3:bf:a6:da:25:0c:f0:
         aa:a6:f0:07:20:98:7d:8e:50:22:94:0d:ec:5e:2e:71:d6:19:
         eb:22:fc:c6:c4:9f:f1:80:96:b7:b0:27:80:0c:57:42:22:1d:
         c5:9d:96:94:ff:37:97:53:dd:bb:f9:1e:fc:92:12:3c:f5:1e:
         b8:43:3f:b4:70:8b:58:64:0c:82:41:55:1f:fb:de:33:67:b0:
         43:6c:b0:18:21:52:dc:4c:7a:a6:76:f2:20:98:5a:99:a6:c0:
         94:5b:56:ce:8f:92:72:7c:e3:26:3d:21:a7:ea:fd:71:9e:ee:
         ad:38:40:06:0f:a5:12:66:ea:87:40:8f:2f:b0:8d:dc:f8:67:
         91:98:0c:cd:d6:7f:20:2d:b6:b2:1b:73:fa:bd:3e:97:10:65:
         58:0f:bf:b3:a0:b2:dd:a4:40:a0:1a:a4:2f:b8:bc:cc:bd:e2:
         bb:41:ba:31:ae:37:43:ea:53:5f:da:7d:7f:36:1e:12:f4:c6:
         18:ba:17:f4:56:a1:1b:ea:92:8c:2c:b5:2c:c9:0c:80:bf:86:
         19:24:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:01:58 2025 by rpki-client