Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          4ZKY1p96kt79rZRahRjxEVS31cZhd819o9u4Sc88yHw=
Subject key identifier:   1E:D2:1B:DE:9D:CF:86:B3:66:F4:CC:27:B7:65:7C:D9:2F:E7:B2:72
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       01974630112F5A82AA7E86F6B16AB30DC3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          0548
Signing time:             Fri 06 Jun 2025 17:00:44 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:44 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:44 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: OsLRBpYLI1B+c03aR9iT1hOp8HebviPs4NYi8Ky30QA=)
                          2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:30:11:2f:5a:82:aa:7e:86:f6:b1:6a:b3:0d:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: Jun  6 17:00:44 2025 GMT
            Not After : Jun  7 17:00:44 2025 GMT
        Subject: CN=1ed21bde9dcf86b366f4cc27b7657cd92fe7b272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:12:f2:2e:47:fd:72:c5:65:dd:76:9f:7e:
                    18:2c:ba:4a:91:09:29:5a:d0:9f:33:e8:15:f3:b5:
                    40:44:c4:b8:89:77:ff:ba:3b:52:cd:ea:85:13:97:
                    b3:02:f4:eb:25:35:b2:6c:1c:cd:a8:c7:69:cd:b9:
                    fa:9f:96:75:93:75:78:eb:62:9b:6b:5c:1f:a6:5e:
                    c2:cc:fa:25:27:af:62:a9:c9:3e:2f:27:30:d8:89:
                    ec:8b:d8:aa:87:86:fe:c3:4e:e0:3a:38:4e:fd:5d:
                    d8:62:7b:99:9c:c4:d4:1c:3a:66:9f:59:ee:54:98:
                    04:8d:ad:68:cc:c2:1f:c8:45:2f:2b:cb:b4:e3:4a:
                    d2:05:ec:b3:2f:ce:87:8f:b2:9d:12:2c:97:a2:89:
                    7b:3b:d7:8a:62:25:47:a8:d5:f8:c5:2f:a8:d9:9c:
                    69:a5:0c:06:0a:ea:c4:cd:53:3e:cf:52:a1:9f:cd:
                    16:e6:60:5e:a9:43:98:ce:99:0a:17:db:61:7b:9d:
                    4c:ce:f4:c1:b2:4b:da:73:e6:8b:07:30:d7:f3:45:
                    03:89:e3:6d:54:4d:7c:8c:1c:b2:c5:f0:cf:b0:3f:
                    f1:23:5d:a8:30:aa:ee:55:18:ef:9f:2c:40:06:48:
                    99:9a:21:ba:44:e1:af:1e:42:dd:6a:a4:23:bd:4d:
                    66:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D2:1B:DE:9D:CF:86:B3:66:F4:CC:27:B7:65:7C:D9:2F:E7:B2:72
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f6:a9:95:0f:09:20:23:88:b8:21:20:e8:72:44:75:b0:fd:
         c9:9a:df:2e:b5:df:56:d6:28:4a:23:41:85:8c:dd:62:59:2d:
         f8:aa:cb:6e:57:68:c5:f1:7a:01:e0:3e:00:c7:cc:35:c3:af:
         fa:0b:24:0e:c6:84:98:9d:ba:3f:6c:8e:df:3b:75:70:2c:f8:
         e6:a4:a3:0e:69:c6:ad:5e:e0:c1:54:61:04:1e:9e:bc:cb:b4:
         10:63:79:47:cd:4a:2b:eb:77:29:ea:0c:19:68:6a:35:57:7e:
         3b:4d:a1:24:58:96:8f:c1:cf:03:7d:7b:d4:36:04:ea:ea:09:
         76:bc:5d:9a:db:bc:8a:ca:04:66:98:1f:36:5d:7b:10:1c:d2:
         9e:57:4b:35:34:99:94:2b:64:a3:fc:0b:b0:99:d1:e2:4a:ed:
         98:59:34:fc:ba:6f:4b:c6:35:5c:7d:fa:bb:08:de:63:05:61:
         60:82:07:78:2f:f8:74:67:35:e5:aa:1a:d2:18:b7:ee:bc:ac:
         d0:67:39:d7:89:15:cf:f6:22:3e:a8:be:ba:d5:26:71:b9:eb:
         99:1c:70:6f:d2:2a:8a:a1:e6:a4:12:a3:0d:de:45:98:66:c8:
         5d:f9:41:62:cc:ef:ae:c4:3a:60:c9:05:23:45:e2:41:25:8a:
         56:e5:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:29 2025 by rpki-client