Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File:                     yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier:          72+kcS33w/sFHlHisLDnnkHBSySBIjU/4UjIiPmLhmk=
Subject key identifier:   42:48:FB:C5:32:EE:40:C5:FC:41:BA:36:5B:5D:C0:EA:9C:E2:90:F4
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer:       /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial:       0197481E47798F86E8F5D104CDECB8C3007D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number:          0C08
Signing time:             Sat 07 Jun 2025 02:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:33 +0000
Files and hashes:         1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
                          2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: SF8XwrKGxLrntIO3Svt5aDoKyaxU5gXDcG8Xk+79NnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:47:79:8f:86:e8:f5:d1:04:cd:ec:b8:c3:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
        Validity
            Not Before: Jun  7 02:00:33 2025 GMT
            Not After : Jun  8 02:00:33 2025 GMT
        Subject: CN=4248fbc532ee40c5fc41ba365b5dc0ea9ce290f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:05:43:9a:9a:d9:d7:6b:d3:b1:94:7a:fc:7b:
                    51:75:84:f5:5d:5e:44:d1:32:90:30:78:48:92:b8:
                    75:25:9a:d8:c8:f4:c3:7c:c4:0f:ec:3c:6c:4b:ac:
                    1b:58:b1:65:72:2b:12:5f:96:b4:8a:bd:f2:e8:ad:
                    eb:68:4a:98:4d:0a:94:0d:e0:99:0b:d9:61:30:70:
                    59:77:b9:69:3c:8f:f1:e3:55:e3:64:d5:a0:17:9e:
                    49:8f:30:df:7c:85:a8:c6:04:46:ce:20:b8:fc:ae:
                    da:01:dd:79:05:bd:ee:0e:95:87:d3:47:e0:88:3f:
                    02:4c:39:7f:fe:2f:07:c6:86:2b:96:2a:cd:37:c4:
                    8f:c8:e7:90:38:09:56:e4:39:f6:ed:65:bf:4e:e9:
                    e7:73:58:97:84:08:26:18:e8:8b:b6:dd:35:d1:72:
                    f5:aa:c2:6a:fa:73:df:8c:cb:19:cd:f3:56:d6:fe:
                    0c:dd:d2:fa:34:d4:36:ef:8a:f8:ec:a4:38:ad:4f:
                    65:ce:b4:ef:54:86:1a:02:bb:44:df:fc:15:d1:7f:
                    11:81:6e:62:aa:23:7b:f4:66:06:32:a1:0e:ed:40:
                    20:61:03:85:15:3b:c9:85:0a:cc:34:4e:55:cc:bc:
                    0e:86:09:db:2c:a3:0e:88:a5:27:33:2a:93:c9:d5:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:48:FB:C5:32:EE:40:C5:FC:41:BA:36:5B:5D:C0:EA:9C:E2:90:F4
            X509v3 Authority Key Identifier:
                keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:2e:29:ea:01:e3:cf:26:e0:32:3f:f5:1a:90:7d:a5:1e:
         ac:77:03:e7:7e:6f:a4:bd:27:07:25:ca:ba:9d:e2:15:5f:07:
         53:e6:fd:47:03:8d:7e:9d:7c:00:95:e0:0d:2b:75:ec:25:e2:
         3e:f3:6e:ba:19:38:d4:7a:1d:0f:79:0c:2f:46:b6:c7:3a:e1:
         a0:e4:9c:14:d2:c6:41:78:62:1b:c8:af:32:2e:b8:54:67:6c:
         e9:88:55:cb:08:46:93:90:60:23:05:b1:f0:80:ba:82:a2:b3:
         9b:5e:6e:b2:5b:ef:41:40:68:11:1d:4a:c4:d5:c6:69:79:99:
         e1:30:61:13:13:e9:bb:ff:b0:9c:4e:92:81:53:39:ab:c3:1b:
         72:94:c0:9b:40:3f:8d:85:0e:f8:86:a3:41:d0:44:e8:ef:7e:
         57:09:e3:e1:ef:0e:b7:db:70:d9:be:8f:d2:84:6d:c0:8f:a0:
         00:60:db:5e:a9:a6:2b:06:5e:16:ba:5e:b0:e8:ac:68:e0:fd:
         f6:4b:21:b7:0b:6d:1d:5f:f1:bb:30:9e:4c:81:37:9c:17:b7:
         90:f3:c3:2d:74:6d:88:bd:cc:f5:80:07:1d:ba:f4:e0:a4:db:
         b7:b0:ae:01:ba:eb:8b:22:bf:9a:2f:47:cb:49:40:a1:76:1f:
         b3:83:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:58:08 2025 by rpki-client