Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
File:                     2yOWhUCfZLocOlSo7xQckk5x2JI.mft (raw, json)
Hash identifier:          W4LRNEXtQ+x+M/FHRnu+2HCDBHF3ss/MCD9cYQGsfCs=
Subject key identifier:   06:AF:C7:F6:96:44:58:C2:6B:47:F4:E9:04:2B:45:E7:1D:F2:5C:34
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Certificate issuer:       /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial:       0197469ED4EE63DE02580B42BB133C136886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
Manifest number:          1588
Signing time:             Fri 06 Jun 2025 19:01:43 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:43 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:43 +0000
Files and hashes:         1: 2yOWhUCfZLocOlSo7xQckk5x2JI.crl (hash: CapVwi+rHomhEDb3E4Oiiv4c2Pi+qNPWCKJYFOy8qMY=)
                          2: 9AJVL74Koo20QslQbsW5LgWmuN0.roa (hash: ywfcVkqztZIsa4yV5w7CN7DaKI/bsZeXQWa9VUzq1PU=)
                          3: J0YtvwjSdo7VUDjhuTN3dGHM7bY.roa (hash: 44Y8BMgB+sH5b8+axfLWpVcHTARgYoCnMt7xMsge5P8=)
                          4: _SYIhCf3pmsd3GO_bPZ9LmXX9yI.roa (hash: yLq+2S7VzCleP2MSt8WxD7vanT3ofV/BHsfwwfGB6uA=)
                          5: k8SmLkdRoGivF16GFM2hqIOouBo.roa (hash: Ktq3us91dVySgQu0CPwEqVesPVx0pk3gPFhcWjBn49E=)
                          6: qHajeM7KS0OkvXZ6gKIN6UcTzPg.roa (hash: 9Inme+UM24UQgsOmhNMhOS7m0XYuhceY/GRE7b5eI94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:d4:ee:63:de:02:58:0b:42:bb:13:3c:13:68:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
        Validity
            Not Before: Jun  6 19:01:43 2025 GMT
            Not After : Jun  7 19:01:43 2025 GMT
        Subject: CN=06afc7f6964458c26b47f4e9042b45e71df25c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:f3:77:e6:44:c6:1e:cc:2f:51:64:75:97:
                    3d:5b:37:e2:2c:8e:4e:c9:2a:e1:0b:04:bc:20:d4:
                    db:af:ba:96:4f:e4:2c:be:fe:32:a6:94:10:97:97:
                    42:26:d5:29:2e:d2:c3:d5:97:c4:0d:5b:ec:18:73:
                    d4:c2:ae:72:37:2b:4e:6e:b6:32:04:9f:4d:3e:ba:
                    8a:7e:1d:66:94:d5:d6:08:58:52:08:57:cb:ff:dc:
                    a9:b6:1a:50:8b:d5:7b:b8:8f:42:21:18:16:fb:a5:
                    4e:04:ef:b1:6f:6b:85:52:88:8a:19:f3:81:3c:a2:
                    c8:ab:a3:fd:14:0a:70:e4:31:4e:57:86:f5:08:cc:
                    15:65:36:f2:0a:a5:76:64:e5:2c:6a:26:e6:8c:5f:
                    f5:39:1e:a9:36:9d:4c:ed:10:ca:5b:f1:ae:63:28:
                    3e:ed:af:c6:73:04:bb:2b:7b:19:42:1a:cd:83:86:
                    22:2b:ba:e1:d3:68:f2:eb:c9:28:95:ac:be:51:fd:
                    ab:4b:9f:ac:07:33:8b:39:de:6b:dc:53:fe:85:40:
                    6d:c2:b0:33:b8:21:9d:72:71:30:d6:c7:9d:12:60:
                    50:3d:6f:d8:2b:b9:f8:d4:e0:5b:c4:8b:90:e9:61:
                    5c:f6:27:02:a4:1c:95:b5:25:88:22:33:08:a2:71:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:C7:F6:96:44:58:C2:6B:47:F4:E9:04:2B:45:E7:1D:F2:5C:34
            X509v3 Authority Key Identifier:
                keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:9b:df:56:47:2e:cf:b5:bd:e2:89:95:08:39:99:fa:3a:
         5e:f1:0d:c7:39:a5:c4:ca:a5:88:44:9f:6b:2c:2f:63:0f:23:
         a6:ca:74:7d:4a:f5:86:1a:a4:c0:fa:40:fd:58:68:44:95:b3:
         d6:f6:f7:a0:2b:7d:22:87:34:c0:f7:77:0c:01:ed:b3:3a:7d:
         25:a6:69:98:f7:c3:a6:9f:c8:cd:de:b5:62:da:47:b2:57:06:
         69:0a:0a:5d:b8:71:43:63:27:4e:e2:b5:6f:ae:53:44:03:cd:
         4e:45:a2:66:74:53:d6:0a:10:f9:53:9c:43:df:ff:02:d2:80:
         04:d3:77:db:b1:65:6b:c5:15:ec:32:f1:29:a2:f6:d2:51:5e:
         b2:22:33:13:d9:7f:23:12:e1:90:2e:74:28:39:e2:ee:73:db:
         b6:13:76:f3:de:5e:b3:3b:81:e8:e1:cc:e3:b8:0b:a6:7a:ae:
         8d:ce:33:63:96:5f:6c:49:d6:7f:75:3f:a6:1c:ec:16:cf:de:
         08:1c:72:1e:eb:5f:b4:df:fe:28:23:42:02:40:5d:e0:b4:53:
         9a:54:7b:7b:2a:b3:c2:da:13:a6:07:65:d8:a2:97:2e:f9:e5:
         a4:41:17:6e:5d:fc:6a:2a:7c:86:fa:ef:ed:2a:d6:56:9f:77:
         45:e3:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:21:44 2025 by rpki-client