Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File:                     y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier:          rrBNPhxgkfWT79dFxefXm6A6LrtjJ16YvcfLHceUleU=
Subject key identifier:   39:A9:32:9B:DF:6F:DA:AA:FC:F3:06:00:B4:FF:A6:F5:33:02:3E:7A
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer:       /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial:       01976CCF6707901C08E8283AB28483F18770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number:          1223
Signing time:             Sat 14 Jun 2025 05:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:20 +0000
Files and hashes:         1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
                          2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: 6J0RU8IGA79tI2tEQA8Z6iqbOGymH+JCD+3ovPKvhe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:67:07:90:1c:08:e8:28:3a:b2:84:83:f1:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
        Validity
            Not Before: Jun 14 05:00:20 2025 GMT
            Not After : Jun 15 05:00:20 2025 GMT
        Subject: CN=39a9329bdf6fdaaafcf30600b4ffa6f533023e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:75:c5:d2:e3:1b:68:81:dd:46:e2:42:77:
                    12:5f:ec:e0:a2:d3:f1:da:15:2a:0e:9f:32:7e:c6:
                    cd:85:a4:b0:9d:af:b5:69:c9:56:a0:79:6d:34:3e:
                    8b:1d:bc:9e:5e:3d:d6:79:28:2a:cd:77:bc:35:e6:
                    79:4d:0d:bb:4b:10:89:72:54:ae:f4:f9:78:77:8b:
                    2a:a1:6b:be:56:78:c7:58:50:cf:cf:eb:81:5d:bd:
                    99:4d:01:ab:a3:85:46:fe:43:5b:90:bb:84:e1:e1:
                    81:10:44:24:c8:49:59:b5:78:41:01:04:db:a0:f9:
                    42:88:ba:f9:bf:84:fb:97:c2:53:c2:33:32:32:d8:
                    a6:25:ba:e0:98:2c:49:0b:d6:8c:a4:45:b8:6b:90:
                    ad:3d:1e:b1:a1:b5:75:d2:fb:94:9c:55:02:25:99:
                    17:e5:bc:55:d0:1a:b9:32:35:30:74:4e:ba:a0:a8:
                    df:27:62:8c:42:74:d1:a7:38:28:ff:f6:8b:1d:d3:
                    89:e0:30:57:e1:1a:57:e4:15:28:28:e5:ef:0f:2e:
                    14:fc:ee:78:38:7d:8b:75:da:1a:62:e1:05:49:08:
                    d8:0a:5a:ed:b7:89:37:97:68:11:ef:97:02:46:82:
                    3f:bd:e1:4e:f9:9b:e8:ba:b3:74:e8:c8:a4:7e:fa:
                    51:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A9:32:9B:DF:6F:DA:AA:FC:F3:06:00:B4:FF:A6:F5:33:02:3E:7A
            X509v3 Authority Key Identifier:
                keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:49:dc:c7:35:01:5a:81:9b:6e:5a:60:19:81:f4:7a:c8:
         23:b5:e9:1a:90:b1:c6:77:a5:e2:0a:04:d4:15:50:f2:62:e9:
         88:ea:03:a5:e8:45:1d:6f:2a:c0:54:3b:14:67:30:81:5d:81:
         a7:1e:fd:82:e1:48:5d:43:e7:97:cb:88:0f:e5:09:c2:6e:32:
         22:ff:fa:83:d1:3c:82:52:14:21:6a:dc:81:05:b7:c4:ed:73:
         97:fa:24:d3:fb:5d:a4:98:45:f4:ab:fd:52:d2:58:2e:c3:18:
         eb:29:2f:8b:4b:c6:9a:d8:bd:7b:37:72:ea:74:fc:20:cd:03:
         40:15:2f:3e:00:2d:e3:42:2f:81:b6:13:c1:b0:c8:d8:93:a6:
         85:32:0c:9e:c7:1f:58:b5:ec:b2:1f:db:ca:50:18:4f:e5:1e:
         7c:8f:eb:f8:81:3b:01:b5:0e:67:c8:f9:05:62:31:b3:96:6b:
         51:c3:cc:3a:f5:f4:fb:b8:65:80:e5:51:1d:d8:f9:58:ec:55:
         28:cc:c2:32:fc:9b:3e:c8:43:0b:94:86:9b:67:a3:9d:11:f5:
         bf:18:5b:c6:a0:93:32:04:b4:e4:23:b6:8f:20:9d:2b:44:cd:
         f8:86:55:be:1b:ff:6e:d2:10:36:53:f0:8b:e0:18:e4:fe:c9:
         35:3c:99:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:39:33 2025 by rpki-client