Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
File:                     y15v1iT-wGkv5waeN5Ix5STYD7w.mft (raw, json)
Hash identifier:          warsf7ms8lMkmGRtGs47mFfXrfDhOJAcNGy/JrTaxTM=
Subject key identifier:   EA:82:45:13:99:DF:D5:A0:7B:7F:E9:10:5C:23:D5:89:9E:6E:E7:CF
Authority key identifier: CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC
Certificate issuer:       /CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
Certificate serial:       01974F6A7F9CEBB4F288A15999161F437E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
Manifest number:          102A
Signing time:             Sun 08 Jun 2025 12:01:08 +0000
Manifest this update:     Sun 08 Jun 2025 12:01:08 +0000
Manifest next update:     Mon 09 Jun 2025 12:01:08 +0000
Files and hashes:         1: 3mViGQZ4y4dgsuOpVqTlOj7Fdak.roa (hash: bm9ouBBryfPy+46YnwBG/A6ErQmwE+ICHvcNK/AHLA4=)
                          2: y15v1iT-wGkv5waeN5Ix5STYD7w.crl (hash: wTG7Y9hkWDQQOOw+iVh4q+SEwVRF5G9Eznqsk1c52mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:7f:9c:eb:b4:f2:88:a1:59:99:16:1f:43:7e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5e6fd624fec0692fe7069e379231e524d80fbc
        Validity
            Not Before: Jun  8 12:01:08 2025 GMT
            Not After : Jun  9 12:01:08 2025 GMT
        Subject: CN=ea82451399dfd5a07b7fe9105c23d5899e6ee7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:d5:b0:04:77:dd:00:c0:b8:c7:00:d5:cc:
                    4d:29:2c:82:95:ef:c0:f4:1c:45:11:16:d3:83:3e:
                    e9:cc:4b:e4:0c:a7:1c:04:69:28:54:ae:93:33:72:
                    29:e3:23:bf:b9:14:fe:f5:13:e7:fa:65:0c:c7:92:
                    5f:d3:4b:12:03:04:d1:0a:45:f4:93:2e:ac:f8:c5:
                    85:1a:18:9a:ef:41:1e:20:1b:ab:97:52:51:56:8f:
                    6c:10:fd:4d:27:68:af:bf:8b:6e:18:31:b1:31:8c:
                    7b:14:bd:ff:8a:5f:68:b4:48:40:71:52:7a:c4:47:
                    69:59:dc:c0:87:ce:72:71:b5:7d:5b:8f:7e:a4:88:
                    f4:01:3a:98:ae:b4:19:4b:40:32:52:00:76:dc:b7:
                    49:89:2a:68:18:2e:75:1b:d1:42:60:d4:fe:81:2f:
                    57:2e:43:96:4a:ae:9f:5c:63:75:d7:f4:6a:a2:94:
                    59:80:e4:54:f3:7e:61:9c:c2:cc:e8:22:8b:40:d4:
                    98:b4:c8:e9:01:b6:00:88:1e:11:f4:cd:1a:f3:6d:
                    f8:01:58:9b:c7:a0:55:f2:75:2d:1a:bf:c1:47:a1:
                    d4:06:57:dc:0a:d8:8d:28:dc:a7:6a:c4:a4:eb:89:
                    49:58:ff:88:4b:a6:2c:88:62:13:44:24:37:00:2c:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:82:45:13:99:DF:D5:A0:7B:7F:E9:10:5C:23:D5:89:9E:6E:E7:CF
            X509v3 Authority Key Identifier:
                keyid:CB:5E:6F:D6:24:FE:C0:69:2F:E7:06:9E:37:92:31:E5:24:D8:0F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y15v1iT-wGkv5waeN5Ix5STYD7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6ba656-e25e-49ab-a4bf-6826e25b807f/1/y15v1iT-wGkv5waeN5Ix5STYD7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2e:64:1a:d3:09:00:56:16:e6:b7:cb:04:12:9a:bf:dd:a9:
         4e:d2:3b:79:65:83:29:f0:a2:7d:3c:d7:3c:ec:b2:de:e4:27:
         2e:f0:45:64:78:ff:bd:14:b4:f1:ef:f3:76:c7:98:09:1d:6d:
         24:c1:d9:0a:70:b3:17:2c:f3:6d:60:bc:6d:73:93:f2:2e:c8:
         c5:dd:f1:39:06:24:64:f7:73:5a:25:b9:1e:15:7d:d3:e2:01:
         e1:75:cf:af:ea:da:3f:a8:45:e6:f7:89:aa:ea:92:6b:7b:21:
         1d:11:a2:90:97:25:e6:0c:bf:1e:58:21:aa:26:c4:90:45:c7:
         be:53:02:7f:6b:e2:29:87:da:ba:f4:21:60:61:d4:2d:4d:29:
         28:05:e9:2a:08:98:a5:71:a1:f6:22:ff:d5:81:22:18:4a:e8:
         b0:b4:36:1c:21:46:d4:42:c1:68:5a:cd:2f:5d:81:02:08:54:
         8f:dd:97:3e:a2:0b:63:aa:44:42:47:a6:e2:eb:f8:ba:92:82:
         41:2a:57:89:19:47:a2:4b:df:26:66:3e:f7:47:7e:b9:fe:ba:
         5a:26:98:27:a8:a9:ab:8f:83:bd:a7:2d:25:60:ff:a4:f0:1c:
         a7:40:33:40:1f:be:f7:5a:72:cf:49:71:dc:a5:a4:ea:65:b5:
         e3:1f:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:24:18 2025 by rpki-client