Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
File:                     ymTavZvEZIX2qRY27edT2jjI82Q.mft (raw, json)
Hash identifier:          J74sqhL6clisvoSjq2J0U5+iflWemj6kxiPFeo1QbM8=
Subject key identifier:   EE:DA:61:7C:C4:05:53:CD:FD:09:6A:C0:2A:75:A0:DB:EA:BD:A9:4D
Authority key identifier: CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64
Certificate issuer:       /CN=ca64dabd9bc46485f6a91636ede753da38c8f364
Certificate serial:       019776408B1E0BC57EFB77AEA835C79F7689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 01:00:30 +0000
Manifest this update:     Mon 16 Jun 2025 01:00:30 +0000
Manifest next update:     Tue 17 Jun 2025 01:00:30 +0000
Files and hashes:         1: NA5mgzoDK6jbbKh48XeliWtbDYM.roa (hash: 9nIV3wU01lTdftDhSQVjEb+D2h3DXok24aEDQGNAM3o=)
                          2: ymTavZvEZIX2qRY27edT2jjI82Q.crl (hash: PHbs1TeEsj+Q/Vc8HMzsOJ0aiywSgwiO5peRVLSz9Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:40:8b:1e:0b:c5:7e:fb:77:ae:a8:35:c7:9f:76:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca64dabd9bc46485f6a91636ede753da38c8f364
        Validity
            Not Before: Jun 16 01:00:30 2025 GMT
            Not After : Jun 17 01:00:30 2025 GMT
        Subject: CN=eeda617cc40553cdfd096ac02a75a0dbeabda94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:d8:79:e5:7c:22:d6:38:0c:fe:5e:5c:b0:
                    dd:21:59:0a:cb:49:67:eb:54:38:1b:b7:8e:27:1a:
                    69:1f:94:00:02:27:9f:cb:d0:b5:0c:5a:a4:3b:d8:
                    da:f2:64:d9:df:6e:d1:7b:1a:ea:58:78:b9:58:93:
                    a1:f3:7b:a9:55:13:57:33:77:c3:a1:ec:0a:52:fe:
                    6d:4d:e2:d2:95:f9:0b:6a:c7:91:53:1d:a5:20:e8:
                    d8:31:7d:06:7c:cb:61:59:95:77:2c:9a:03:e9:10:
                    87:f7:39:0a:c5:9a:01:60:5d:02:69:8d:8c:fb:fd:
                    b1:e6:a5:49:a4:5c:c1:74:ac:54:03:b9:0f:f3:ca:
                    5a:5f:f9:f8:e6:fd:55:7e:d5:4d:2b:06:0d:6a:60:
                    83:d2:80:fd:1a:9b:43:4b:e6:75:f0:7e:99:2e:bc:
                    e3:93:d1:1e:43:03:25:c4:22:2b:25:cc:93:fd:17:
                    3a:64:fb:92:55:42:a2:b1:39:d5:46:44:a7:8e:86:
                    42:3f:f6:6f:37:96:19:03:45:47:15:9a:8e:e3:fd:
                    90:bd:c7:c5:6f:89:29:49:10:3c:3c:98:b3:62:0a:
                    4b:7a:5e:3c:bd:bd:bd:45:24:4b:1c:3d:7b:ca:e6:
                    43:31:0e:29:7c:df:6c:96:85:01:d0:58:7a:86:48:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:61:7C:C4:05:53:CD:FD:09:6A:C0:2A:75:A0:DB:EA:BD:A9:4D
            X509v3 Authority Key Identifier:
                keyid:CA:64:DA:BD:9B:C4:64:85:F6:A9:16:36:ED:E7:53:DA:38:C8:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymTavZvEZIX2qRY27edT2jjI82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/241882-a437-4ab3-b38e-5028c259b267/1/ymTavZvEZIX2qRY27edT2jjI82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7d:48:b1:d7:78:37:de:df:a5:8e:2b:49:ae:66:bc:d9:00:
         68:0d:6e:a0:41:60:d9:f8:29:ba:1c:78:1b:a5:91:f6:f8:04:
         d9:8e:33:57:de:80:af:51:fa:5f:ec:21:5d:8e:fc:86:72:6e:
         14:fa:3a:02:b1:15:70:2e:d3:4c:b1:9e:0e:51:c4:42:02:bd:
         1a:52:b2:bd:f9:72:d5:67:16:65:db:49:23:2d:4a:7b:27:49:
         e4:1a:6b:41:09:0a:8b:cf:b5:08:07:47:0c:f9:95:8c:d2:3c:
         7f:95:c8:0a:48:01:03:f7:ba:ff:28:59:6b:7a:16:da:e4:34:
         ae:2d:3b:c3:41:8a:48:d4:d7:4f:84:b3:36:4d:69:98:e2:3a:
         6b:80:2b:4b:ea:65:e9:49:35:a9:0b:b6:81:c4:5d:96:28:7f:
         89:1b:13:da:dc:38:16:bf:06:89:cc:88:b7:10:63:99:e3:e3:
         ee:b5:44:e4:c9:ea:af:48:e7:b1:e4:2c:28:48:e4:94:29:34:
         9b:48:3d:d4:0a:34:da:73:85:87:f1:42:c3:33:f3:6d:b4:ba:
         f0:77:d3:57:1b:bd:60:4e:b2:2d:78:79:0c:a1:a7:63:f5:e8:
         3c:12:e9:7f:8b:d8:83:b0:b7:27:83:21:be:42:92:cb:5f:97:
         9e:a5:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:44:40 2025 by rpki-client