Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File:                     YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier:          +en5IEWXMrjzo+DL2843OkZrJZw41PJyxYg0Sia7tTo=
Subject key identifier:   E0:82:C1:F4:9F:57:DD:1B:4C:74:3E:63:32:A6:12:AF:62:E2:5A:15
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer:       /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial:       01978357A6E8792D38833E54364489BE58B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number:          0B7C
Signing time:             Wed 18 Jun 2025 14:00:48 +0000
Manifest this update:     Wed 18 Jun 2025 14:00:48 +0000
Manifest next update:     Thu 19 Jun 2025 14:00:48 +0000
Files and hashes:         1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: oPn5n1ZwYRwF9sWb7cDEeotva0Usu3Pb9cJ1bklmjpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:57:a6:e8:79:2d:38:83:3e:54:36:44:89:be:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
        Validity
            Not Before: Jun 18 14:00:48 2025 GMT
            Not After : Jun 19 14:00:48 2025 GMT
        Subject: CN=e082c1f49f57dd1b4c743e6332a612af62e25a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:a2:f9:1c:20:91:89:08:6a:39:e8:20:63:
                    6c:00:78:c4:fa:fb:2b:dc:66:b5:e0:72:39:c0:19:
                    f8:8b:2d:ea:aa:01:2a:25:df:3d:96:6e:f4:bc:d6:
                    62:a9:b0:8f:d8:7f:6a:05:34:7e:e3:01:d6:1e:47:
                    69:3d:37:17:d7:a8:de:1a:47:13:45:12:4a:9e:aa:
                    e3:d5:aa:2b:2d:af:cf:c6:da:5c:3f:e1:ef:d1:36:
                    fd:8c:ea:82:e4:5c:fa:aa:f9:bc:5f:0d:b6:4d:b5:
                    a3:c4:1f:1a:0b:86:0f:62:6e:52:9a:6a:ee:25:17:
                    97:00:60:15:98:00:e4:11:02:5f:87:b5:45:29:f3:
                    42:23:e9:42:9e:8a:1f:60:55:b2:66:52:aa:b7:fc:
                    83:29:5c:88:5b:ef:3d:06:f1:70:8f:0f:e1:e9:68:
                    88:2d:f3:43:4c:9e:ff:c3:d5:f9:65:e9:27:a7:46:
                    08:e1:ef:a5:0e:c9:57:57:f5:8f:58:40:37:99:4c:
                    36:be:64:2c:49:81:ac:f0:9b:ac:63:d5:1d:9f:18:
                    89:17:c2:aa:ea:0d:fe:36:9d:e9:ef:74:7d:50:62:
                    40:c3:cb:a0:f4:87:ed:c5:65:89:11:4a:7e:33:dc:
                    64:a8:88:e8:f0:ee:cd:b5:86:2d:f4:1c:9e:4b:a4:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:82:C1:F4:9F:57:DD:1B:4C:74:3E:63:32:A6:12:AF:62:E2:5A:15
            X509v3 Authority Key Identifier:
                keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:77:c9:0e:ed:b3:6d:3e:54:e9:1f:a4:fb:50:40:ef:3f:71:
         39:32:6d:a8:53:ea:7e:38:b1:10:32:e4:5f:af:f4:cc:ce:c8:
         c1:32:59:a2:1e:62:61:39:82:16:45:00:30:9b:3c:8b:0b:20:
         00:d7:e5:c3:6e:31:94:51:bf:da:45:44:8a:a1:36:58:4b:47:
         07:fc:a8:f1:44:ba:cb:76:06:75:14:5a:48:ae:1b:bf:e1:2b:
         47:d0:8f:f4:20:6c:6e:b2:bb:cc:68:15:f9:ef:4e:bf:23:97:
         f7:1f:e1:d3:b6:e4:b8:65:6c:72:26:81:d9:bc:97:a7:8f:07:
         b6:35:4b:a0:c1:14:d3:b8:54:9f:e3:8d:b4:f8:34:7a:8e:6c:
         48:8e:28:1e:5c:27:b4:fd:7c:2d:e7:e9:09:49:0c:d4:ae:63:
         6b:94:cd:ac:c4:36:98:8d:14:e4:30:85:0a:61:36:5b:c8:9a:
         ca:9d:49:d9:a4:1a:2b:82:29:48:bd:ed:24:f5:0f:26:09:e2:
         cb:ba:fb:60:89:9f:e0:02:2b:9f:f2:81:b8:b1:f3:95:e5:45:
         fb:ad:2b:2d:6a:04:ed:39:e9:61:8e:91:6f:de:3e:a5:0a:a5:
         ee:13:bb:ac:bd:37:41:dd:a2:b0:bf:3e:7e:ac:11:3f:3d:ba:
         54:b5:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:18:31 2025 by rpki-client