Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File:                     c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier:          1rr08WodJvCppyPAzN+uUc+q7SgJAPs4gyyKR24H2is=
Subject key identifier:   BA:44:C2:73:70:E6:A6:4B:25:7C:47:AB:6A:AE:98:B6:AB:16:C4:54
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer:       /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial:       01964AB3E1D19A8BDFDCC757EFD1EDE3E472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number:          090C
Signing time:             Fri 18 Apr 2025 21:00:24 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:24 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:24 +0000
Files and hashes:         1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
                          2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: mRZgo5gG2l1qJHmuAk/2GFX144EZPPMQHRnOFOIVFA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:e1:d1:9a:8b:df:dc:c7:57:ef:d1:ed:e3:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
        Validity
            Not Before: Apr 18 21:00:24 2025 GMT
            Not After : Apr 19 21:00:24 2025 GMT
        Subject: CN=ba44c27370e6a64b257c47ab6aae98b6ab16c454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:55:ba:2b:b2:69:24:8d:de:35:bc:15:b0:
                    dc:10:d6:e2:04:5e:af:0e:49:0d:a2:35:02:14:5f:
                    4b:f0:5f:4d:86:e3:d6:d7:35:3b:18:8b:26:e5:5a:
                    f4:96:d0:9f:c8:d9:34:07:f4:c6:1e:ee:97:61:03:
                    ef:a6:3c:9b:78:4b:cf:58:87:08:d6:19:fa:3e:17:
                    93:04:1e:73:97:9b:dc:72:6b:f5:72:f5:a0:40:9c:
                    3e:e5:c6:12:1c:2d:ed:a4:6a:ee:aa:e6:07:3d:a1:
                    e5:24:11:11:fe:d0:8d:e0:c9:b1:f6:7c:0e:10:65:
                    84:55:28:76:aa:88:0e:05:fe:c2:78:bc:7b:8d:00:
                    8d:23:20:aa:c0:85:96:85:92:84:26:1e:dd:2d:9d:
                    b1:fa:5e:4e:c1:83:5c:19:50:68:61:f4:ed:74:2e:
                    8f:ae:8e:bf:2a:ad:67:49:e7:29:4d:61:c0:37:1b:
                    63:54:eb:c2:d4:eb:fd:1a:c5:ac:70:11:1e:19:c7:
                    70:ed:db:a4:f8:cd:16:29:dd:29:d1:19:6a:f6:41:
                    1c:af:0a:9d:d2:b6:8c:29:33:ae:c6:3c:bf:ae:2f:
                    db:54:00:f4:04:e1:d6:77:c8:9c:54:54:f7:32:c5:
                    2a:06:40:f5:3c:1d:9d:da:2e:ba:07:a4:8e:59:c4:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:C2:73:70:E6:A6:4B:25:7C:47:AB:6A:AE:98:B6:AB:16:C4:54
            X509v3 Authority Key Identifier:
                keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:60:08:91:73:91:69:41:b7:f6:74:36:20:a4:a6:57:da:26:
         ad:0a:f5:5e:9a:da:9c:fe:f8:38:c7:ab:5d:4e:82:d1:8e:af:
         e4:13:3c:ee:c0:56:27:89:10:da:70:1b:eb:fb:ca:f0:f3:7e:
         f4:af:de:fb:a2:ad:a9:75:2c:2b:c9:97:3d:1c:d5:88:ae:3d:
         df:78:b9:7f:7f:4b:f1:cf:02:88:34:4e:ae:94:93:00:83:8b:
         92:a5:cc:21:b5:42:06:1e:f4:4f:50:5e:9c:64:66:21:c2:10:
         9f:83:6c:1e:fe:4d:f9:72:49:b1:2c:36:1d:53:72:0f:5e:43:
         2e:4d:33:b1:82:7e:a6:f2:bc:3e:77:f5:db:0f:01:76:86:8e:
         11:fe:28:15:81:3d:68:5a:61:31:3f:49:3b:4a:0e:39:20:6c:
         5d:a9:fa:32:e6:ec:2a:f1:61:43:4f:b3:f4:04:53:4d:ab:1f:
         60:01:84:4a:83:10:65:b6:e1:60:5c:12:0c:6d:97:93:1c:7a:
         99:34:c9:7d:e4:c5:f6:31:c7:d9:5f:5c:a5:d4:e8:54:ad:4d:
         cf:f8:d5:69:8c:a8:80:88:31:48:e6:f7:47:81:79:3a:41:5b:
         05:77:1d:25:d7:e8:87:a0:12:1f:44:b3:45:e7:4a:cb:3d:ac:
         e8:6e:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:23 2025 by rpki-client