Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          yxNqcblxFWEKirXYF83xnbVWjCRmOO8kTKMYF/DxqT0=
Subject key identifier:   BF:59:12:AC:13:AD:D5:D8:85:B5:CA:96:FA:A5:98:B3:95:18:A1:3E
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       01976F99E89A5BAA50DF8A73B72F18C07C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          048E
Signing time:             Sat 14 Jun 2025 18:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:46 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: zbxF0ca6W+pXaKL6/Yac2Zr4Bs5fRT0QLGmxWzCgELQ=)
                          2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:e8:9a:5b:aa:50:df:8a:73:b7:2f:18:c0:7c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Jun 14 18:00:46 2025 GMT
            Not After : Jun 15 18:00:46 2025 GMT
        Subject: CN=bf5912ac13add5d885b5ca96faa598b39518a13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:7c:4a:00:0f:5c:d5:09:75:40:63:8d:10:
                    ae:f6:ae:7a:51:61:8b:2f:5a:32:e4:e1:44:16:31:
                    0c:b3:dd:64:01:7b:0a:67:c0:13:89:b9:f9:99:20:
                    6e:fd:70:aa:07:8d:b5:6a:1e:59:7f:4f:a1:dc:da:
                    33:11:68:d5:f3:91:c1:a7:d9:9e:61:6d:27:a7:c5:
                    67:65:ae:ac:8d:78:53:cc:55:20:13:34:7e:e9:78:
                    a6:59:cb:44:1f:f6:95:27:5d:94:c9:c9:cb:2c:39:
                    8e:46:25:f9:20:f3:74:25:1d:1d:4f:a3:45:04:ae:
                    4d:ba:44:ee:18:20:c1:96:00:d1:98:65:ac:ab:6f:
                    23:35:fa:f0:62:92:1e:60:5f:7e:47:4e:88:8a:6b:
                    b3:f7:00:91:60:44:5a:e4:48:60:87:f3:16:82:61:
                    35:99:65:b7:32:9b:d8:31:d7:77:e0:3b:0b:42:a3:
                    42:68:08:ee:84:aa:65:16:80:9b:a9:f3:02:61:ce:
                    62:15:ac:55:12:3c:69:0e:a1:2e:80:0d:b7:63:52:
                    ee:68:eb:af:04:bd:51:e3:70:1d:d8:d9:d2:e6:30:
                    50:dd:4c:32:73:85:e3:39:ad:ed:de:63:74:a2:99:
                    86:34:1b:85:b0:48:65:75:90:b9:45:09:1f:70:fa:
                    38:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:59:12:AC:13:AD:D5:D8:85:B5:CA:96:FA:A5:98:B3:95:18:A1:3E
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:bf:45:e7:a0:a0:3c:d6:1a:2c:e0:12:ea:61:b1:10:a5:
         2d:70:77:6b:c5:0a:5c:86:7c:77:a4:26:39:3b:af:20:06:89:
         8c:db:6b:b5:6b:99:da:2c:71:de:ad:16:ac:27:f3:4c:73:93:
         86:fc:4d:a6:44:44:60:30:d6:aa:a2:8a:c3:e9:ae:0f:5e:39:
         38:5c:72:7a:e0:ab:c9:b8:d8:61:d1:59:b5:3c:19:03:b5:cc:
         13:e0:2d:22:3d:bb:cd:56:78:5d:d7:73:62:e4:6a:30:f1:18:
         86:f0:ad:5d:26:c0:75:56:84:f9:27:34:94:b7:10:f1:0c:af:
         c4:c2:d6:e6:09:d4:b4:42:1c:54:75:aa:20:06:1f:9b:18:10:
         d4:4c:b8:39:ea:87:1a:0a:84:b2:82:50:f6:4d:f9:da:5a:ad:
         e3:d0:5c:c7:07:55:34:6d:1e:3a:e7:11:1a:5e:d6:19:fa:0d:
         f1:fe:4f:07:09:44:ff:75:40:3e:cd:4b:b3:03:f0:1e:92:1a:
         0e:f7:5e:74:f0:91:7e:69:13:06:93:1a:f1:4b:e6:17:fc:c9:
         81:5f:4f:e0:ab:5a:b8:6f:fc:dd:78:8d:d3:d7:6f:fb:c5:da:
         97:98:5c:a5:1a:63:e4:a9:e4:2f:0a:06:de:66:53:44:30:02:
         4a:63:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:43 2025 by rpki-client