Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          b/xjFHwfYJD0WWj7DILbXsBI7dIRiRzi+JEjInTCuKY=
Subject key identifier:   EC:DD:37:F8:BA:72:27:8E:AF:CA:5E:D6:4B:8E:73:03:38:6B:CC:D3
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       01976F62CD2470E544BD6F7A8667042D489F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          0100
Signing time:             Sat 14 Jun 2025 17:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:35 +0000
Files and hashes:         1: dlzqaHBNCax7AH7cKOuLGUROmhc.roa (hash: V0WC0WTCXqpzuDi1+bDioL4WjgyLz03d8dARSLHOma8=)
                          2: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: yvbqvPnBY2g9D8SMNeUXY6hSmT/y7uhN0GwV686xeZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:cd:24:70:e5:44:bd:6f:7a:86:67:04:2d:48:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Jun 14 17:00:35 2025 GMT
            Not After : Jun 15 17:00:35 2025 GMT
        Subject: CN=ecdd37f8ba72278eafca5ed64b8e7303386bccd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:e4:e5:5f:29:0c:89:e8:c0:ef:02:ec:42:
                    0a:4a:36:67:10:2e:b8:02:67:cf:cb:31:e4:2f:9c:
                    92:21:7d:fe:cc:9d:ce:4d:39:ce:7d:13:48:eb:c7:
                    e1:8d:2d:1e:ed:75:dc:13:12:35:a2:5f:a2:cb:95:
                    53:81:65:b4:7e:f8:85:de:e8:c9:34:b4:ba:2e:81:
                    68:b3:ef:a0:46:8f:f2:83:b5:02:42:72:3e:d9:7c:
                    07:d3:80:7f:31:bf:f6:b1:62:e9:cd:57:24:8b:43:
                    94:28:02:d4:47:f1:09:9e:9b:bc:a3:c6:31:72:91:
                    3e:d4:48:01:7b:63:16:5d:67:a8:fe:01:18:c0:b6:
                    ac:90:cc:84:a8:7b:f6:62:28:d9:b0:05:21:cb:ba:
                    b9:1e:98:d6:48:10:f0:16:17:01:34:01:27:2a:64:
                    ff:c4:55:3f:18:4b:ec:b8:b2:d8:8e:a6:6f:cf:c2:
                    ee:a9:64:b5:06:b1:f9:be:46:66:6b:5b:b1:58:bb:
                    b7:d0:fb:70:37:cb:40:d6:e4:ff:f1:27:98:38:17:
                    5b:7b:67:4c:5a:15:f9:58:da:22:b6:7d:75:be:10:
                    cb:1f:0d:1c:48:7f:85:aa:c6:af:b1:45:3c:39:9c:
                    7d:8b:8b:b7:d3:f2:23:b7:bc:7c:96:18:47:47:df:
                    9f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DD:37:F8:BA:72:27:8E:AF:CA:5E:D6:4B:8E:73:03:38:6B:CC:D3
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c9:59:e6:e2:6c:ce:77:5c:8e:4f:4b:1d:2f:4c:ae:fa:5d:
         34:72:18:7e:c4:64:6c:95:1f:c6:17:45:cd:62:f2:1b:af:96:
         c0:f2:15:99:be:44:c8:ef:c4:8d:ec:a9:d7:b7:c5:f1:1f:b1:
         65:63:41:6b:74:55:14:c7:67:10:d0:47:90:ee:c5:fb:33:bb:
         10:63:18:b5:7f:e7:97:ad:e3:8d:e5:ad:8a:a8:13:78:26:34:
         a2:a8:c0:2a:bb:33:87:16:cd:3e:cd:62:dc:40:d7:82:c2:8d:
         52:8a:2e:be:c5:cf:6c:c8:1a:c8:9c:b2:47:c5:89:59:49:21:
         58:69:a1:03:aa:52:27:01:b2:26:2a:fa:5f:14:2a:8e:62:b0:
         6a:38:72:a9:c6:e4:2b:4e:22:55:77:95:bc:9a:f2:fe:c8:8e:
         51:4d:a1:11:1f:f8:08:99:54:d8:9e:cc:b2:e5:04:a6:4b:f5:
         4f:77:76:4b:11:84:d0:92:1c:64:17:66:3f:5b:d9:2b:5c:27:
         ed:22:36:75:2f:b8:5e:17:e4:87:f0:a9:c2:54:91:5a:be:18:
         b5:32:c7:d8:08:89:c2:21:a0:67:e9:2a:54:e5:de:1e:e2:74:
         1f:0a:ec:1c:74:aa:0c:ff:00:b4:12:28:6b:26:e8:c6:74:d5:
         8e:9d:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:18 2025 by rpki-client