Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
File:                     YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft (raw, json)
Hash identifier:          fp06nCCTd4XITLRJlzWcuZx+5hj4XgARJV86Py1pjsM=
Subject key identifier:   46:60:A3:F1:63:1D:67:47:DC:F5:B8:5A:DF:DD:D5:9D:98:6D:06:C4
Authority key identifier: 60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55
Certificate issuer:       /CN=60c7647b728f7c59f613e89047542fa7855fa355
Certificate serial:       01969002F5D8913F064A938E1F5DB7A003EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
Manifest number:          0AFE
Signing time:             Fri 02 May 2025 08:00:35 +0000
Manifest this update:     Fri 02 May 2025 08:00:35 +0000
Manifest next update:     Sat 03 May 2025 08:00:35 +0000
Files and hashes:         1: YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl (hash: yLGvCLNw6/CAjX37AloGul/Kt1Fy3q8oii87Kx5L/aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:90:02:f5:d8:91:3f:06:4a:93:8e:1f:5d:b7:a0:03:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c7647b728f7c59f613e89047542fa7855fa355
        Validity
            Not Before: May  2 08:00:35 2025 GMT
            Not After : May  3 08:00:35 2025 GMT
        Subject: CN=4660a3f1631d6747dcf5b85adfddd59d986d06c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:0c:13:e4:56:45:a4:ad:1d:c4:9e:35:8b:
                    04:c8:a4:3b:77:e8:9f:32:16:e8:8a:c4:67:a3:33:
                    b4:3d:0b:fa:cd:cb:2d:04:1a:a4:1c:9d:16:bb:32:
                    89:d0:c0:7f:23:1e:54:f0:a3:8b:e5:fd:d9:a5:9f:
                    56:90:3f:aa:8f:bc:af:59:4e:57:54:a0:ba:14:28:
                    4e:77:92:26:c4:5e:89:9c:e7:e1:8c:1b:f0:bd:a4:
                    2c:fd:bc:8c:cf:ae:20:7c:eb:cb:2b:39:31:a4:8a:
                    be:13:cb:6f:b3:af:df:80:98:3a:22:40:25:4c:ba:
                    52:60:3e:b5:f5:fd:34:06:b2:0d:bf:91:b6:55:e7:
                    28:36:4d:37:b9:74:66:09:89:9a:1f:fe:e7:88:db:
                    a0:96:dd:63:3b:a0:a4:13:23:a7:78:83:76:30:c3:
                    33:b6:e1:6a:e8:ad:a5:96:29:b8:20:20:60:20:34:
                    aa:ec:1f:35:ab:89:7a:cc:0a:85:83:c9:68:ef:85:
                    ad:27:30:83:1a:7b:0c:d6:34:e0:8b:99:21:44:33:
                    51:9b:57:b5:65:36:5d:16:36:f9:46:22:e2:87:73:
                    6b:9b:93:d5:e4:b2:1f:38:b9:f4:08:bd:bb:68:b3:
                    ea:17:c8:1b:2b:23:d7:f1:56:dd:e3:ce:bf:53:69:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:A3:F1:63:1D:67:47:DC:F5:B8:5A:DF:DD:D5:9D:98:6D:06:C4
            X509v3 Authority Key Identifier:
                keyid:60:C7:64:7B:72:8F:7C:59:F6:13:E8:90:47:54:2F:A7:85:5F:A3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0ff690-8166-43b2-98a1-a9de4a31fe11/1/YMdke3KPfFn2E-iQR1Qvp4Vfo1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:da:96:a2:b0:36:df:a7:48:4b:37:75:7a:fe:cd:2a:30:
         9d:06:8d:54:8b:52:7a:dd:92:56:ba:10:9c:b8:4a:a6:f6:93:
         cc:76:1c:2f:95:9a:3d:ff:3b:e4:64:5c:02:8d:7a:6a:ce:90:
         da:3f:fe:32:b2:70:37:3e:bb:13:c6:83:3f:5a:24:dc:93:1b:
         19:e0:ca:1d:f8:ee:d4:d6:08:b9:5d:64:2d:c1:74:1c:2a:2f:
         69:71:e6:2c:39:89:ed:b2:ac:c6:a8:fd:4d:16:8f:f8:90:e9:
         c2:62:6d:62:52:c2:99:e1:78:97:b1:a8:d4:36:61:27:2b:50:
         4d:d8:85:38:93:9f:7f:98:00:79:8d:30:3b:87:c2:98:93:74:
         3e:a5:78:ec:d9:0b:0a:ee:8a:2c:61:a8:50:53:8c:bd:9d:1f:
         1f:cc:88:a1:ee:5a:17:c1:5c:26:08:b2:fc:4d:da:df:94:44:
         2e:dd:45:bd:ac:46:32:0b:04:c9:8b:f6:78:89:61:65:0a:b7:
         86:d5:35:f0:c8:5f:5b:9a:99:af:79:9b:34:14:3d:3b:7e:47:
         5a:d6:fd:61:3e:12:be:a9:92:65:a5:e7:fb:1b:fb:2a:e2:01:
         c1:ef:e9:89:aa:54:28:7b:29:e1:8c:3c:4b:b2:84:0b:7b:bc:
         41:2d:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:04:58 2025 by rpki-client