Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
File:                     YTeJ5zx1yrbYOradoyj8Lf-8kII.mft (raw, json)
Hash identifier:          l6d0FrGBaf2aNz0B/88VJxi+EM35P+K4/rUnMqkpNTE=
Subject key identifier:   49:63:5F:3E:0E:ED:A0:0E:D1:1B:48:6A:04:B5:48:7E:34:4A:F5:A9
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Certificate issuer:       /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial:       01975CEEFA4F4074B5B787216E46AD1588D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
Manifest number:          1288
Signing time:             Wed 11 Jun 2025 03:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:54 +0000
Files and hashes:         1: YTeJ5zx1yrbYOradoyj8Lf-8kII.crl (hash: /IpH7SADkbhFNCRuaxpp/AukzF5BYQJv7Y9DcEYL8fU=)
                          2: ZrBT-LTKncMhVmd9eNZtlw1O86k.roa (hash: tAbiS/EvHuSlDvoKxib2aD63z2PVHysvpp62xqOjuZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:fa:4f:40:74:b5:b7:87:21:6e:46:ad:15:88:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
        Validity
            Not Before: Jun 11 03:00:54 2025 GMT
            Not After : Jun 12 03:00:54 2025 GMT
        Subject: CN=49635f3e0eeda00ed11b486a04b5487e344af5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:4e:21:fa:22:18:31:74:c0:16:14:1b:f2:
                    6a:28:ca:81:87:6e:a4:32:ef:55:33:e8:7c:da:ed:
                    33:cd:62:4d:96:f1:45:00:db:49:98:c6:b3:54:c7:
                    c8:19:27:a3:eb:fd:49:a3:be:4c:06:b7:93:6b:d9:
                    f2:7b:7f:b7:0d:d8:e9:1e:33:02:0d:08:87:31:d2:
                    3c:e0:81:96:bc:a8:69:ce:58:03:68:9b:70:15:52:
                    af:77:a7:46:0f:68:f7:f6:af:62:48:b8:58:3c:06:
                    c9:6e:01:37:50:d5:e8:93:d7:14:79:1b:e6:a9:43:
                    d6:27:d7:27:96:41:32:ef:de:58:7d:aa:ed:03:d1:
                    1d:b8:f2:20:87:ab:5a:14:4d:87:dc:9c:c2:ba:9f:
                    fd:7b:47:91:a7:16:ea:9b:d1:1e:f3:33:c3:ba:5c:
                    ef:79:fa:93:e9:bf:bf:82:33:a0:6a:c8:fc:9d:91:
                    6b:0a:89:14:b2:d1:ea:d2:ca:10:98:76:f1:e0:84:
                    9d:ae:4a:97:05:c6:50:6e:8a:0f:94:1f:d7:df:e0:
                    44:8e:de:81:47:4c:f8:c2:b7:08:d7:28:ed:5a:2e:
                    0f:e7:4f:67:e2:bd:d5:f3:2d:a6:3a:86:f8:10:e1:
                    8b:a0:a6:29:d4:e4:92:00:e8:b2:31:a0:ac:86:d6:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:5F:3E:0E:ED:A0:0E:D1:1B:48:6A:04:B5:48:7E:34:4A:F5:A9
            X509v3 Authority Key Identifier:
                keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9c:24:f2:18:59:93:38:87:54:9f:4c:87:47:83:36:cf:2b:
         0a:4f:25:cd:f0:ed:10:2b:8f:04:bf:00:2a:0a:d0:e3:48:43:
         36:75:55:7e:18:ad:58:91:0f:a5:63:97:a0:22:84:fa:fc:e5:
         d2:fa:08:21:6d:55:5f:54:80:f4:a3:c3:e0:bf:6a:d1:f4:07:
         c0:19:69:86:af:51:54:d5:4f:ba:4d:c2:27:37:2a:5b:0e:72:
         c6:0d:f6:c7:78:a5:f9:7c:40:72:6b:e9:f6:8d:05:23:d1:cd:
         b5:49:ab:7f:a3:d1:be:91:03:bb:83:fe:14:45:b5:08:fb:0f:
         77:ef:9d:c2:53:8b:22:9d:8c:c9:f7:2d:8e:d2:93:3e:b0:a5:
         d0:df:bb:07:45:b0:0c:a6:ed:ce:6b:64:60:09:8d:91:de:2d:
         62:81:af:8b:1c:86:79:75:35:fc:31:f6:f2:4b:80:0f:18:76:
         0a:90:42:01:6d:05:13:aa:f7:39:e4:09:f4:bf:97:4b:14:23:
         85:c5:1b:2d:9b:96:21:80:83:6a:fa:a0:61:f8:62:22:0a:6b:
         88:51:dc:b8:4a:30:a3:68:74:88:ab:07:52:44:70:52:b9:da:
         99:94:38:52:80:aa:d0:f8:1d:8d:0c:6d:3c:97:ae:f8:35:81:
         6c:67:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:04:27 2025 by rpki-client