Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
File:                     YHZWuPfoG1FJtIYPgSex1OO0h9w.mft (raw, json)
Hash identifier:          aRv2Zf/3ite6qX0/SCEDSXlm0HbNN4jcTgU+10Tg1mY=
Subject key identifier:   27:E5:66:AA:D3:97:26:B6:DE:52:90:26:5B:9B:FA:12:F9:81:9C:9F
Authority key identifier: 60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC
Certificate issuer:       /CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
Certificate serial:       019748F9F228E05D2243D5AF2CC0EE3881BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
Manifest number:          0B8D
Signing time:             Sat 07 Jun 2025 06:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:29 +0000
Files and hashes:         1: 7-uxb2sVoc0kcAT2m9SP5qVnZ8E.roa (hash: acdZUKxa+ye22RHZ+hlpmz4eeOUGVIjJiD1cAB8HEbo=)
                          2: YHZWuPfoG1FJtIYPgSex1OO0h9w.crl (hash: 0ieO3o3kWTtbQnAgGNJYpOdm9tW/cE43/vSJ50Xx1Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f2:28:e0:5d:22:43:d5:af:2c:c0:ee:38:81:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607656b8f7e81b5149b4860f8127b1d4e3b487dc
        Validity
            Not Before: Jun  7 06:00:29 2025 GMT
            Not After : Jun  8 06:00:29 2025 GMT
        Subject: CN=27e566aad39726b6de5290265b9bfa12f9819c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:68:26:eb:1b:0a:43:8a:90:42:2b:46:a5:
                    ca:38:bd:ff:cb:f0:cb:a5:33:03:10:a0:98:83:ac:
                    0a:43:7f:cd:0e:99:c7:38:15:e6:1d:0d:47:d3:c5:
                    02:40:e5:89:e9:5f:23:7a:57:be:2f:e4:0d:d8:36:
                    cf:de:a5:87:c7:06:8a:53:0d:ea:5c:f5:46:e4:49:
                    bf:9a:34:1d:d2:cd:69:ab:77:6d:af:12:77:19:a1:
                    6a:92:b3:cd:a3:53:24:58:6b:41:77:fb:a5:10:e7:
                    7b:bc:0d:ac:9c:51:00:2e:ab:8f:e4:03:31:12:da:
                    94:02:53:98:02:a4:8c:3b:a4:59:6e:a1:dd:9e:a9:
                    6a:5c:12:b7:d6:d0:a0:a8:86:1f:41:40:ad:4f:d0:
                    04:fc:41:54:61:7c:df:03:40:e0:21:0d:58:4b:ff:
                    01:fa:76:64:6b:70:e7:b9:d0:e1:0c:65:cc:0b:a5:
                    95:56:fa:f8:d1:5f:df:cb:cc:4a:76:0d:f4:c3:5d:
                    f2:db:0c:04:f8:34:a0:70:c6:fd:56:b5:51:d3:69:
                    e5:9a:2b:e0:4a:6a:a3:6c:72:70:ba:ca:8e:b4:7a:
                    53:01:a1:91:b8:b3:a1:f8:90:24:4a:a8:37:d4:ff:
                    22:00:99:d4:0b:dd:b9:eb:f1:2a:6f:40:6b:98:4a:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:66:AA:D3:97:26:B6:DE:52:90:26:5B:9B:FA:12:F9:81:9C:9F
            X509v3 Authority Key Identifier:
                keyid:60:76:56:B8:F7:E8:1B:51:49:B4:86:0F:81:27:B1:D4:E3:B4:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHZWuPfoG1FJtIYPgSex1OO0h9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cee55d-985a-4e36-8e39-82bc8a3180c6/1/YHZWuPfoG1FJtIYPgSex1OO0h9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:1f:fe:b3:67:1b:a0:65:28:c0:6a:d0:4c:72:b5:50:21:
         7d:8e:1f:b1:28:7c:95:20:26:d5:9f:2f:b3:b6:86:de:47:a4:
         33:d9:1c:db:e3:68:29:f1:f3:0f:ef:c2:89:67:c4:5e:8a:65:
         97:b0:73:ef:61:a7:91:b9:c0:6c:a8:e0:05:86:56:ee:8d:93:
         cd:86:3e:09:32:e7:6d:4d:a9:cc:f4:13:3a:0e:5e:b2:a2:09:
         c1:e3:6f:9d:83:2a:5b:23:a4:90:7b:5c:8c:22:62:ef:aa:00:
         ab:2c:8e:85:25:4a:b5:58:49:10:f9:c0:cc:53:fb:c9:19:0a:
         37:ba:da:98:21:d4:97:3a:42:71:07:9c:27:c1:1f:bd:a7:28:
         a5:6a:7d:27:1a:21:d8:05:93:9b:05:0a:25:51:18:38:f5:90:
         48:43:f4:40:a7:8f:5e:10:66:ce:1d:9e:0c:b6:4f:c9:3b:7e:
         98:b3:c5:00:6f:57:de:29:96:0e:4c:4d:a3:2d:1a:f3:ca:3f:
         eb:52:93:c2:db:4a:6b:ff:d9:55:e1:7c:90:ae:27:63:fb:35:
         a2:8c:a7:3c:5a:7b:08:d6:d1:ae:62:00:42:4c:84:51:1e:f6:
         ae:cd:81:0c:12:60:15:1c:b4:0d:4a:13:ad:b4:53:61:86:06:
         8f:5c:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:11 2025 by rpki-client