Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          9ikY3tQs4fbvxGRJ8o+IazCOvPaZhX9o0fetqm/GuLs=
Subject key identifier:   AE:9B:47:9F:07:12:90:FB:CA:BC:61:7F:85:90:78:45:DF:14:72:02
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       019677C36FCA6D78CB8783298BFD42F5F3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          0796
Signing time:             Sun 27 Apr 2025 15:00:18 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:18 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:18 +0000
Files and hashes:         1: KsdzajN30uY3uVW5kyMxHSnmmxU.roa (hash: zPl4WlZ128vZPWoXYgcZMpH4uHo4BsQGARRVppJ+QiM=)
                          2: astDnoUMy7KdbJvyyxpisdgmA6U.roa (hash: bNOHZXfFwYEoQ+krisGaY+9Oi+royBJVdqPCFFROjZw=)
                          3: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (hash: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: kn/dAcpdri0Nz5ZR3S0zZmS6iAjA03+F/SgkiSf6e/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:6f:ca:6d:78:cb:87:83:29:8b:fd:42:f5:f3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Apr 27 15:00:18 2025 GMT
            Not After : Apr 28 15:00:18 2025 GMT
        Subject: CN=ae9b479f071290fbcabc617f85907845df147202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:51:d9:7a:a4:e4:f2:02:c6:c7:d4:4e:e7:
                    89:8e:78:42:37:2d:08:51:04:fd:a6:3e:81:94:ce:
                    af:e7:2c:58:83:c9:ec:da:5c:02:cc:e4:3d:91:36:
                    25:19:ce:e0:5c:95:e8:f4:db:c5:89:30:90:4d:45:
                    b7:43:86:5c:98:39:6f:8e:c6:b6:11:9b:1a:17:02:
                    6e:33:0f:83:ee:12:bb:d0:43:9d:28:0b:43:fa:64:
                    16:ab:03:67:e7:f9:f1:ff:00:a0:90:0f:77:46:5e:
                    f5:ed:38:41:69:5e:b3:3f:c6:7a:f7:a8:6f:9f:4e:
                    5c:30:64:d2:be:97:b0:08:bc:8a:11:9e:44:13:33:
                    4a:09:34:2f:58:37:1c:79:c8:b3:6c:0c:63:08:d3:
                    e2:ea:4b:90:86:e5:cf:2c:d9:31:bd:c7:52:f4:4d:
                    16:e8:62:57:d1:7e:9a:0a:7a:c9:c1:a0:8c:99:05:
                    bc:b8:d7:7f:b9:d8:15:80:62:96:68:37:e4:9a:36:
                    c9:1d:c6:f7:8d:56:50:d0:c7:97:89:39:1b:29:c6:
                    ae:88:0b:de:1e:44:82:9f:dc:b1:40:0b:4f:54:59:
                    89:7d:b3:a5:0b:36:b7:7e:ef:f4:46:05:9a:38:47:
                    88:40:80:74:f9:44:7d:e1:83:84:0e:86:1b:08:29:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9B:47:9F:07:12:90:FB:CA:BC:61:7F:85:90:78:45:DF:14:72:02
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:35:84:db:43:35:ef:8d:3a:47:ef:b8:72:71:c1:ee:2b:9c:
         8b:9c:ae:ee:5c:d4:47:d7:21:0b:67:8d:5f:30:74:4e:f0:39:
         32:64:4c:31:cd:ed:3f:e1:fc:55:97:d2:5b:8f:70:ff:19:00:
         bc:e2:7c:4b:d1:a2:9b:0d:d5:28:57:f5:8e:83:31:36:05:76:
         48:6c:62:c9:54:67:ab:85:10:6e:47:cf:c6:36:f6:fd:f6:9f:
         5a:28:f8:aa:08:33:ae:a5:aa:9d:18:70:a4:11:34:a6:42:07:
         88:af:02:6d:a0:de:b8:94:0d:73:ca:49:98:56:15:af:6c:4e:
         ef:ab:09:cb:b3:45:40:4f:08:83:d8:67:43:16:c7:1a:17:f3:
         30:19:9f:2d:32:6a:bc:63:d3:7b:04:15:6d:79:99:8e:04:48:
         28:20:a6:62:c3:97:3e:cb:67:1b:89:14:b4:9f:36:b6:55:d5:
         38:30:30:d9:b9:db:bd:a1:7a:e2:27:6c:a3:7c:d7:10:12:43:
         cc:83:da:ae:36:56:5f:07:55:03:08:ac:5c:57:a1:73:f7:ce:
         7e:9d:79:3e:73:0c:e1:2c:9d:d2:a2:c4:63:5e:17:2e:1d:53:
         04:ba:43:1b:30:91:5f:40:08:ac:db:3a:41:c0:d9:be:c2:75:
         c6:cc:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:01 2025 by rpki-client