Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
File:                     Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft (raw, json)
Hash identifier:          IHBErV6uYtkfMz1PyuY03ohC7Dw2ZjSv42saD9FTogk=
Subject key identifier:   EE:A4:2E:06:60:16:A4:94:BF:D8:B1:6A:7C:A8:03:90:52:E2:AC:92
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Certificate issuer:       /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial:       01977007EAD4603F9E3CE85D0FABD88DB9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
Manifest number:          1593
Signing time:             Sat 14 Jun 2025 20:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:56 +0000
Files and hashes:         1: BLUnMEvzOCDdig3vAOJNkanKcVQ.roa (hash: FOxz1hyJdKlYisYef78m6hR6cwVT1BQH7/wecUVrCqc=)
                          2: Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl (hash: fcDyj/Ti867u4MZ6mT0M/V0OSbA7pGDgXan4tLOjGyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:ea:d4:60:3f:9e:3c:e8:5d:0f:ab:d8:8d:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
        Validity
            Not Before: Jun 14 20:00:56 2025 GMT
            Not After : Jun 15 20:00:56 2025 GMT
        Subject: CN=eea42e066016a494bfd8b16a7ca8039052e2ac92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:c3:66:c3:4d:82:1a:69:c0:a5:37:47:2b:
                    97:10:cf:de:13:9f:de:4a:6a:b2:a2:d9:4d:d5:44:
                    74:0c:39:6e:3d:28:79:31:f2:81:04:4d:cb:4b:cc:
                    ad:ae:b0:f9:64:22:c4:79:42:a5:87:3b:79:70:b5:
                    ed:58:36:90:e1:03:15:da:2c:81:4c:b1:34:d5:7d:
                    81:77:c1:21:a4:c4:d7:6f:ac:00:a1:e4:46:33:d0:
                    ca:a1:44:b7:cb:5e:7d:8b:86:51:0d:bb:07:00:04:
                    b3:fc:0e:13:ba:64:31:66:d0:90:04:59:01:b9:6d:
                    ff:58:7a:4a:7b:13:35:07:e6:db:c2:8f:af:8e:e1:
                    bd:c9:b6:45:b8:d2:74:a9:7f:da:07:a5:bf:62:bc:
                    8e:0b:9a:9f:80:a5:90:c4:fc:32:3e:99:da:a2:ef:
                    14:8b:15:52:e5:13:85:6f:78:9b:4e:0d:f3:c9:87:
                    c4:c5:91:d2:51:e2:56:d8:ca:69:05:ac:3b:d6:ac:
                    8c:ea:5a:c2:44:a6:56:8b:8c:7b:6d:58:00:15:73:
                    e2:15:14:61:dc:55:27:ba:d7:33:61:06:0c:e2:81:
                    af:c6:6f:1e:ef:74:ea:ce:8f:be:f3:35:83:cc:e6:
                    3f:5b:54:96:74:44:24:55:8c:b4:14:c4:1c:6f:07:
                    31:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A4:2E:06:60:16:A4:94:BF:D8:B1:6A:7C:A8:03:90:52:E2:AC:92
            X509v3 Authority Key Identifier:
                keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:14:56:6f:77:2d:03:c6:bd:06:c3:18:3a:a5:14:71:89:0a:
         f0:5c:76:f3:d2:43:67:d9:bb:01:b3:39:e2:35:04:ed:26:20:
         e0:2b:96:db:8c:2f:e9:ee:71:76:ae:9e:50:53:fb:e4:a3:3f:
         6b:df:65:06:09:28:8c:bd:b6:60:75:80:3c:f5:e7:f7:f9:07:
         46:69:b5:1c:ed:55:be:44:cc:d6:db:8c:3c:f0:fa:e5:83:ae:
         8a:a4:bf:bd:de:e4:4f:5c:ee:fc:cf:65:55:74:3c:bd:63:93:
         a5:57:88:0b:8b:09:5b:b6:6e:13:25:16:30:38:cb:64:ef:ad:
         8d:8f:43:6f:0f:ca:2f:b7:e0:f0:1a:ed:73:59:00:cd:2f:8b:
         37:09:82:5f:1f:41:79:53:46:c7:5a:a0:5e:bd:e0:36:e8:8a:
         37:36:a9:d4:84:8e:34:da:a8:8f:b3:0b:a7:76:9b:25:2c:35:
         54:cf:17:4e:40:86:bf:67:fb:11:e6:aa:df:a1:62:e7:30:7c:
         1c:99:5d:32:93:81:33:9a:b4:07:82:c4:7e:9f:88:54:a3:3e:
         35:1a:b2:2f:1c:34:cd:40:87:d7:a4:74:54:cc:4e:7b:c1:cc:
         f9:c7:7f:e6:7a:70:21:10:6f:76:52:f2:35:6e:08:4b:06:ec:
         c4:4f:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:31 2025 by rpki-client