Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File:                     yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier:          fE8Cil577mVdR3Z0hm8Z8yErnKCTsWzUwQ4UPpRGqB8=
Subject key identifier:   B9:11:D0:A1:ED:10:36:10:9E:B0:A3:C3:6E:9F:0E:78:A7:A7:0F:62
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       01976F9A56DAD5B716F7D8B6D17B08EA152E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number:          0D55
Signing time:             Sat 14 Jun 2025 18:01:15 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:15 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:15 +0000
Files and hashes:         1: Wg-bSrUatmukyH3xDDiSbozsSDE.roa (hash: +C5Ooc81ApTJACiPZcILtsd+XtVBtietyO7rZMjbj2I=)
                          2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: zL7HzNQiEQ7bSd9kq4fNceRDIElcBwO0Mg+jswosaQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:56:da:d5:b7:16:f7:d8:b6:d1:7b:08:ea:15:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Jun 14 18:01:15 2025 GMT
            Not After : Jun 15 18:01:15 2025 GMT
        Subject: CN=b911d0a1ed1036109eb0a3c36e9f0e78a7a70f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:71:87:c9:5b:a5:a5:99:9f:fe:c5:62:74:
                    3d:5d:00:fb:9b:77:62:07:3e:a7:77:bd:61:e2:0a:
                    30:4b:a6:1d:04:54:72:47:d0:f4:8d:c6:88:13:a1:
                    fb:5a:e7:de:68:73:c3:8b:1b:12:b9:2f:26:a4:86:
                    a7:20:99:66:cb:22:8b:a3:5f:9d:ae:4b:a2:0f:1f:
                    48:9a:72:7a:21:f4:cc:af:f3:a7:d0:29:6a:7e:9a:
                    36:82:f8:24:e6:00:18:4e:b5:33:6a:98:91:f0:3b:
                    40:5a:cd:54:92:14:76:c0:ec:ef:28:a4:b0:b3:5f:
                    d6:54:8c:e7:5f:4c:05:5f:e1:f3:c1:fd:38:b1:39:
                    ad:ad:cb:cd:18:3c:0d:51:1d:aa:de:00:4e:86:ad:
                    dc:50:a4:1b:33:92:a0:b2:d3:99:ee:85:1f:f6:0d:
                    52:35:5b:2b:32:0d:21:e0:6c:d4:38:9a:66:75:49:
                    55:bf:06:d6:be:68:d2:84:08:6b:07:b3:54:74:fa:
                    8a:23:f9:dc:f8:0d:59:1c:48:f5:6c:f9:53:15:f1:
                    2d:bf:b0:cb:bc:0b:7c:bb:e2:64:ea:5c:94:5b:c6:
                    ef:b2:08:7e:ec:c6:9c:1a:b1:80:c7:d0:66:ee:67:
                    97:1c:64:bc:53:33:25:56:52:7d:a8:93:cf:1e:bd:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:11:D0:A1:ED:10:36:10:9E:B0:A3:C3:6E:9F:0E:78:A7:A7:0F:62
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:7d:1f:c2:06:ba:ca:09:d3:cd:14:d1:e0:fc:ce:1d:fa:
         10:27:2e:61:32:ac:4f:0e:5e:b2:b3:48:1a:81:cf:ff:4e:f2:
         62:ae:db:de:ec:0c:41:63:bd:cd:70:8b:7a:19:6e:3b:3b:96:
         40:af:b8:be:31:54:f3:5e:6a:aa:21:ae:62:49:fd:27:e0:69:
         3b:1e:b6:e9:84:40:82:ba:aa:1b:4d:43:c6:57:dd:60:66:20:
         a2:c9:72:88:3c:dc:5f:7e:bd:52:ac:4a:9e:88:97:fb:b6:43:
         9f:71:a3:ab:e6:ea:98:5c:45:c1:64:4f:4b:d8:77:24:8d:8c:
         dc:48:3c:88:12:98:67:12:be:30:e1:32:71:b4:cb:e5:2a:c4:
         53:d6:3d:40:c2:49:8b:b5:2f:ad:db:bb:63:ec:08:97:7f:1c:
         6a:90:09:cc:13:50:35:08:e0:bd:ff:32:6a:29:d3:5b:42:87:
         9c:3c:5f:78:36:83:ab:16:01:6a:43:4c:9f:93:fe:0f:c4:f4:
         f7:33:44:8d:40:73:ec:3e:93:df:ae:70:05:c3:2b:eb:e4:70:
         fa:77:6d:25:8a:ab:f5:09:c2:67:90:d6:5d:7e:40:56:60:39:
         a5:60:0d:01:f0:b3:f2:d0:0e:13:15:cd:01:13:ce:77:36:9f:
         88:5a:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:20:30 2025 by rpki-client