Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          UwdFuZnYNGWBHz88enW993q8Itptrl4AO0+pvH7pNKk=
Subject key identifier:   65:2C:4F:FD:BA:E5:BD:F0:F6:5C:6D:8D:0B:F9:C4:8F:94:AA:E7:7F
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       01974AE8D30CFE9F9BA6CCAEDF32156A86ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          10E5
Signing time:             Sat 07 Jun 2025 15:01:01 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:01 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:01 +0000
Files and hashes:         1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: Ify8i0e+b6kbVg3HamQSiajDMNztFFyGqsVVDsss0KY=)
                          2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:d3:0c:fe:9f:9b:a6:cc:ae:df:32:15:6a:86:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Jun  7 15:01:01 2025 GMT
            Not After : Jun  8 15:01:01 2025 GMT
        Subject: CN=652c4ffdbae5bdf0f65c6d8d0bf9c48f94aae77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:84:30:b5:91:47:d7:66:76:2e:79:18:13:
                    11:57:3d:5d:9a:af:f1:e9:7b:d1:c3:07:8e:ca:45:
                    86:99:f7:cb:87:5b:92:45:4c:10:46:32:ab:7e:a0:
                    69:76:5f:ff:88:3d:83:52:2e:de:2e:34:1f:9b:7e:
                    33:16:0c:0b:4a:ab:0c:ad:92:72:08:43:d8:95:10:
                    5d:d9:c8:03:f8:95:f5:65:e3:ff:f0:55:30:f3:de:
                    f3:13:ac:44:45:38:7c:43:07:cb:4b:1b:8f:b8:c4:
                    8c:41:8f:3b:4f:68:0e:b9:f2:36:51:c3:55:46:2f:
                    26:75:15:55:67:96:28:44:f6:62:b4:d9:2a:90:6a:
                    f8:8d:b1:70:78:8f:f2:a1:41:0d:32:1f:73:d2:40:
                    64:cb:b7:26:24:99:93:8e:42:05:19:5b:12:a6:ea:
                    1d:33:d8:bb:f7:f1:93:f7:85:3b:42:2e:42:6e:bf:
                    e6:80:95:2b:4e:02:73:d6:84:05:50:a7:36:01:b4:
                    02:f6:1a:d3:b0:ab:c7:a4:a5:59:95:40:08:72:4c:
                    77:59:9e:05:02:28:c1:7c:b3:d9:1f:e7:8a:ae:f3:
                    ea:05:9c:44:df:14:6c:8d:fd:e8:02:53:4b:4a:c7:
                    5e:5c:9b:53:2b:88:ee:7c:62:c5:8a:da:09:3e:cc:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:4F:FD:BA:E5:BD:F0:F6:5C:6D:8D:0B:F9:C4:8F:94:AA:E7:7F
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:fa:8c:b8:d2:71:c1:05:30:98:03:df:86:6b:dd:a6:66:
         5b:7f:4c:8f:73:8c:67:4d:15:6e:8b:1b:3f:06:49:2f:ff:b7:
         13:ff:b8:22:78:8a:ce:9a:6a:ac:9b:90:4f:ab:35:cb:02:ab:
         ca:19:a0:8a:ef:f0:56:42:28:82:8b:d9:ff:55:8c:8e:7e:a1:
         dc:21:a0:c9:c3:6c:91:a1:86:9c:b8:b6:6d:01:5d:d2:37:fe:
         75:22:c7:bf:26:2e:4c:4d:05:28:d4:2a:fa:98:48:16:7c:29:
         05:2a:46:85:26:e9:3a:09:60:26:21:fe:04:71:6e:40:b0:98:
         21:7a:bd:c4:6d:77:52:f0:e4:e0:03:93:d8:8d:cc:e9:b4:f7:
         2f:19:37:10:0a:b0:5c:8a:a8:31:d0:60:f1:ff:a5:76:1b:ca:
         d8:f6:81:51:d1:be:42:e8:9a:69:46:5c:4f:78:66:a9:b5:56:
         b1:c2:cd:cd:5c:67:6d:1f:77:3b:ef:97:29:bf:1d:15:6d:c6:
         06:98:d3:9b:a5:76:25:02:f9:fb:cf:b6:6e:d3:48:83:57:84:
         53:ad:9a:e5:75:63:91:a6:fc:0d:a5:30:10:4b:d5:20:84:22:
         60:a1:4a:57:71:a2:99:2c:69:20:5d:89:74:37:4a:87:2d:e7:
         b2:94:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:58 2025 by rpki-client