Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File:                     Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier:          jSWHPaEWyOTgwOZHOH8d40QbAv4l0yuw/F2E57ahC5E=
Subject key identifier:   C0:19:CD:63:AA:27:B9:7C:B9:AD:34:BF:5E:46:F2:8C:04:C7:10:67
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer:       /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial:       01974967A5A892BE664710552339026FB479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number:          0C46
Signing time:             Sat 07 Jun 2025 08:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:18 +0000
Files and hashes:         1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
                          2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: KgpFe00cpMs8ZzzNl/gChbkTaakNXviSZ/Whl0xTx/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:a5:a8:92:be:66:47:10:55:23:39:02:6f:b4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
        Validity
            Not Before: Jun  7 08:00:18 2025 GMT
            Not After : Jun  8 08:00:18 2025 GMT
        Subject: CN=c019cd63aa27b97cb9ad34bf5e46f28c04c71067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:c9:b6:d4:79:c3:8d:ec:8f:9a:2d:84:7d:
                    6f:33:e7:f6:9f:fc:68:32:50:81:9a:e4:eb:7a:a3:
                    c4:60:f3:e0:e4:be:11:b0:3b:d2:b5:09:11:0d:9a:
                    14:cc:af:20:f3:78:00:56:b7:ea:29:c9:fd:72:19:
                    09:c2:96:d9:38:c4:3b:60:03:ea:07:f7:2a:7b:52:
                    e1:43:55:c9:40:1e:b3:78:2f:b3:26:32:df:85:b0:
                    5f:06:7c:f7:23:81:65:a8:d3:df:bd:62:66:4e:c3:
                    93:ff:9d:0a:ef:39:c2:59:77:a8:6a:43:9a:c3:4f:
                    61:27:53:57:95:d8:a5:fd:d0:ab:c8:bd:b0:ff:02:
                    f4:30:99:c9:fa:a1:58:18:f8:f7:6d:a8:4c:5e:f9:
                    1d:f3:16:20:d0:4c:0b:c2:64:6f:99:36:45:d8:c6:
                    9d:f5:a3:23:56:3d:5e:30:7a:73:67:a3:90:95:0c:
                    83:18:80:d7:19:a4:37:21:5a:ac:ad:9d:f3:e9:7b:
                    08:cb:5c:e9:ba:00:b3:0d:79:d9:4b:8a:90:77:dd:
                    82:d5:69:6f:5d:1e:ba:fa:22:0a:69:12:75:c6:16:
                    d6:b3:3a:4f:b9:07:de:b1:34:36:b7:49:da:e3:cf:
                    7f:0c:9e:02:55:4b:b3:2d:22:c3:a1:94:b6:74:11:
                    b3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:19:CD:63:AA:27:B9:7C:B9:AD:34:BF:5E:46:F2:8C:04:C7:10:67
            X509v3 Authority Key Identifier:
                keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:77:6b:44:71:72:9f:0a:ec:96:c6:54:c2:89:d8:03:49:
         2c:b6:83:8e:68:05:c8:93:bd:08:87:04:3e:2a:ae:4c:16:c0:
         e9:a6:c9:15:5d:7c:3c:48:84:37:28:3a:a7:08:92:e5:9b:b2:
         0e:4e:5e:de:47:13:a4:2c:52:e3:64:0e:58:ca:2f:b0:50:f6:
         13:42:bf:7b:33:bd:80:47:25:90:6f:fe:ba:f9:cd:3a:9a:6a:
         30:2b:a8:3d:9c:c7:54:7a:26:6c:fc:25:f8:23:b2:80:96:01:
         9d:7f:ba:f6:b4:58:78:d9:78:c6:60:da:fc:da:ed:d1:e9:61:
         8b:e2:4d:b2:0e:6c:dc:c2:03:61:e4:ca:ae:8e:32:b8:c8:21:
         2e:46:ca:1b:af:6a:cc:31:e2:e1:b2:e7:57:a9:76:c5:ab:0d:
         6e:83:89:45:59:6b:f1:4b:9c:71:65:66:ba:c2:92:b8:9f:ac:
         e8:f7:7b:be:30:f6:86:cc:e9:21:9a:bd:d0:e5:05:7e:fd:40:
         fb:12:0d:62:05:99:b3:80:9c:7e:69:e5:6d:ec:a8:f0:dd:58:
         97:c7:fe:87:a8:d2:e4:d8:94:68:1f:9e:35:7e:27:fa:c2:f1:
         7b:6f:9c:9c:3a:33:ca:c9:89:ad:36:48:62:69:4c:38:cb:90:
         d2:f7:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:06 2025 by rpki-client