Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          TjT1Z+lAKav99Hqv5FUyobBuRTE1uTogiNoQrel7ti4=
Subject key identifier:   6D:2A:9C:D7:87:BB:2E:5E:E0:A0:2E:77:0B:94:80:35:25:B5:8C:94
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       0196410BCF09B2037698019D80C575E0A23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          11DB
Signing time:             Thu 17 Apr 2025 00:00:14 +0000
Manifest this update:     Thu 17 Apr 2025 00:00:14 +0000
Manifest next update:     Fri 18 Apr 2025 00:00:14 +0000
Files and hashes:         1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: jmSnYq73DBDv/WR45VxLI7E2cbqcv3pBTm+mlRogBvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:0b:cf:09:b2:03:76:98:01:9d:80:c5:75:e0:a2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Apr 17 00:00:14 2025 GMT
            Not After : Apr 18 00:00:14 2025 GMT
        Subject: CN=6d2a9cd787bb2e5ee0a02e770b94803525b58c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:4e:e0:53:de:69:c7:5e:f5:3a:76:81:87:
                    b0:90:f0:2d:f0:0c:fa:89:c7:2b:f9:10:35:c8:c0:
                    cb:1d:bd:30:2f:d5:97:4a:f8:87:a6:e7:91:cd:94:
                    78:73:05:3a:9b:62:0a:1b:27:2d:21:d8:b0:a4:f3:
                    e2:b0:51:5a:ce:3c:1a:8b:6c:4d:7a:4d:6a:2a:6c:
                    24:93:12:83:82:b8:f5:44:80:4f:84:ca:42:fb:7b:
                    7d:0a:e0:dc:45:57:13:e6:bd:81:0a:d1:81:39:0c:
                    9c:f3:48:51:99:89:3d:fa:cc:3e:f3:0c:3d:80:ee:
                    2f:86:db:c7:da:ea:ec:20:0e:9a:32:ff:98:f2:0d:
                    6f:47:71:05:64:ff:4a:4e:99:35:61:ad:4a:34:e8:
                    26:a1:9f:9b:34:4d:ab:1f:0a:9c:c9:67:ab:f0:ba:
                    0e:af:6e:45:a6:29:79:7f:c4:a1:52:af:d4:2c:c3:
                    87:58:d7:d6:9f:3a:c3:e8:15:1c:ac:8f:6b:92:9d:
                    22:f3:c5:81:f8:f3:f7:75:50:91:ef:2f:5a:5b:0e:
                    d5:dc:70:eb:34:2c:64:03:87:78:c1:09:7a:d4:d2:
                    3c:e2:e1:87:67:71:bd:7e:7a:bf:ff:e4:dc:e0:26:
                    5a:02:5e:94:4d:c3:cd:42:81:ff:c6:74:d6:79:34:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2A:9C:D7:87:BB:2E:5E:E0:A0:2E:77:0B:94:80:35:25:B5:8C:94
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:c2:37:89:ef:45:bd:84:00:7c:72:e2:61:0d:7c:b2:f8:
         4f:72:98:fb:a5:2e:df:ff:99:5a:da:71:d6:ac:85:a4:2b:77:
         26:20:95:40:08:9f:93:be:b5:26:7b:c9:6f:e0:82:6b:b7:92:
         11:9d:af:58:5a:4f:31:cc:6e:80:4c:eb:91:01:4c:37:c2:f6:
         db:49:ee:d2:84:2e:84:1c:ff:90:a0:0e:04:6e:c0:a6:14:2e:
         49:13:a3:5f:62:a5:8f:59:18:e1:98:d0:0b:d0:e7:9b:f7:d3:
         1b:d7:fe:bf:9c:26:67:19:e6:96:ff:8f:9d:50:da:c1:c7:c4:
         a0:44:06:56:65:1f:e0:87:d6:99:6f:59:bf:30:e5:7b:48:ba:
         59:fb:c4:38:66:6c:70:27:dd:c6:13:c3:14:fb:68:45:40:23:
         16:83:ec:b7:3a:03:03:21:0b:65:5c:e4:08:e4:e5:e3:99:57:
         5b:11:e0:8e:9f:80:09:0f:09:10:91:93:23:f6:01:75:cc:a1:
         cc:c8:d7:0c:9b:f6:29:49:3d:45:5f:89:86:e1:84:09:0c:94:
         4c:c0:a7:f9:6f:ed:41:be:ed:2e:4b:16:c3:14:76:05:dc:f6:
         fd:8b:52:29:9e:b2:a0:0a:dd:79:db:20:8f:9a:33:d4:68:53:
         e9:f8:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:21 2025 by rpki-client