Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File:                     YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier:          k2FaMUfgPFjVl3DRwljGfEpPAcNKD9xauckZGZjY8Rk=
Subject key identifier:   6E:08:24:F1:9B:AB:62:5A:F4:8D:32:9D:FB:9C:8C:7B:28:17:AD:4C
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer:       /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial:       019783FC137C9359703C046A71ABDE48F1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number:          1185
Signing time:             Wed 18 Jun 2025 17:00:24 +0000
Manifest this update:     Wed 18 Jun 2025 17:00:24 +0000
Manifest next update:     Thu 19 Jun 2025 17:00:24 +0000
Files and hashes:         1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
                          2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: xN0CQEo0GiP6e8vgHoIYjAoSTJTsXbW17CJBOCp4TTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:fc:13:7c:93:59:70:3c:04:6a:71:ab:de:48:f1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
        Validity
            Not Before: Jun 18 17:00:24 2025 GMT
            Not After : Jun 19 17:00:24 2025 GMT
        Subject: CN=6e0824f19bab625af48d329dfb9c8c7b2817ad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:dc:b4:16:d1:9e:d7:5e:89:17:49:48:57:
                    ab:c5:5e:6f:4e:4f:76:db:74:a6:c4:cb:9a:37:a3:
                    a1:d6:93:1c:70:37:fe:cf:98:19:11:ad:00:f2:46:
                    58:ef:bf:37:32:a2:3b:5a:89:d9:78:49:5f:8d:b5:
                    5d:37:37:c1:78:6f:94:72:0b:37:70:64:04:42:90:
                    5b:e8:f2:91:97:6a:68:21:58:5f:84:5c:be:4b:fe:
                    7c:02:0c:d3:1e:83:e0:df:c8:92:bd:b4:18:72:af:
                    f3:4b:f7:ec:34:7d:50:bf:06:bb:48:ea:e2:ae:da:
                    9d:52:60:38:61:a3:73:f0:f3:30:0c:34:0e:99:d2:
                    7c:30:be:2d:69:8d:e8:8a:a2:08:d9:62:ff:aa:c1:
                    20:4d:29:a0:01:1a:81:1b:da:3c:ac:55:40:bd:6a:
                    94:57:75:9d:c7:09:7f:65:0e:5c:cf:c1:2d:03:e1:
                    c6:d5:8d:3e:f8:bf:a6:cb:d7:1f:0f:d7:bd:04:2c:
                    ab:17:6c:fd:84:8d:03:62:7d:a0:5f:42:20:9f:41:
                    7a:4e:e4:9f:5e:0f:cb:f0:7b:00:f9:1f:9c:89:6b:
                    6b:d5:a2:6c:18:4a:35:3b:e2:49:bf:59:2c:cc:dd:
                    05:f1:27:30:6c:0b:7c:78:fe:7b:46:75:ca:ef:80:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:08:24:F1:9B:AB:62:5A:F4:8D:32:9D:FB:9C:8C:7B:28:17:AD:4C
            X509v3 Authority Key Identifier:
                keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:d2:03:ec:4c:5a:2a:67:5a:8c:d6:e8:8e:36:f1:ad:17:
         ab:9e:c2:83:7c:3e:39:6a:6f:5a:ed:02:4c:08:06:92:ab:b9:
         b0:ab:4c:b4:bc:39:d8:95:eb:4c:e1:3d:1d:ba:a9:42:27:40:
         45:52:11:69:1c:8b:77:fa:a9:e6:93:0e:06:5f:93:92:ab:73:
         ea:b6:c3:45:20:f9:10:5e:6b:ef:bb:cd:a8:cf:68:34:6f:47:
         3c:8d:b0:a6:69:e6:90:55:0e:f5:68:32:21:d3:2b:63:4f:e7:
         dc:5a:50:70:7d:11:cc:a9:95:0d:ec:17:4e:3d:7b:17:67:fe:
         65:d1:cf:87:b1:a5:01:67:2b:51:6f:34:05:ff:91:61:62:44:
         63:cd:12:25:f6:c1:59:98:35:4f:bd:48:b0:d1:3e:fb:4e:49:
         1f:1a:3f:2e:ab:7a:d1:81:3f:73:7c:df:eb:d4:b9:d3:5a:6f:
         ee:70:b8:20:31:21:b3:41:97:44:17:48:e5:41:99:04:50:b9:
         a4:ea:b6:fc:ab:08:c7:e3:63:68:87:a0:c0:c3:0b:53:73:57:
         ab:bc:d9:26:bb:be:76:e1:60:6a:8b:3b:05:72:7f:4a:c6:bc:
         7f:63:d2:6f:86:12:99:16:9e:0d:7d:09:f7:aa:4a:0a:51:f1:
         6b:0d:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:01:55 2025 by rpki-client