Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          YcoWpIw/eob4auOdQFBuVAwAIitiVP8nX05l/q88mBM=
Subject key identifier:   7B:44:6A:8E:43:9C:F5:0F:EC:74:7F:19:5E:06:79:85:D3:2D:23:F1
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01977FB16677223E1C99F3CC0F3D11B67B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          051C
Signing time:             Tue 17 Jun 2025 21:00:21 +0000
Manifest this update:     Tue 17 Jun 2025 21:00:21 +0000
Manifest next update:     Wed 18 Jun 2025 21:00:21 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: 0LyiQxlv6az6KhN3vBkcwLMZpmejpWJMVXSUNB2vdSc=)
                          2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:b1:66:77:22:3e:1c:99:f3:cc:0f:3d:11:b6:7b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Jun 17 21:00:21 2025 GMT
            Not After : Jun 18 21:00:21 2025 GMT
        Subject: CN=7b446a8e439cf50fec747f195e067985d32d23f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:d7:5e:29:61:90:67:9f:e0:37:ac:1a:24:
                    c1:d7:df:16:73:49:2d:58:e9:8e:32:5d:d1:33:85:
                    b6:2f:21:28:13:3b:57:1c:2d:2e:2e:bd:ab:ec:aa:
                    62:c9:5f:30:dd:b3:30:e8:da:c0:84:06:ee:70:aa:
                    c9:5d:6e:8c:39:3e:04:1c:b3:db:d8:af:0a:c7:0c:
                    c7:72:16:fe:82:e0:15:3f:9e:7d:a2:08:de:f5:44:
                    36:df:64:c7:83:6a:00:ea:71:06:91:b6:80:ca:07:
                    28:31:c8:33:ae:21:b2:a3:d6:81:91:d3:e3:b6:c7:
                    16:da:02:5b:ad:07:bd:57:06:5d:5b:d5:19:82:95:
                    e1:8a:fa:6f:0d:fb:4f:ee:ab:0c:b3:f4:1f:b1:44:
                    15:ab:42:e8:1c:4a:b5:ed:95:c2:1c:73:7a:21:70:
                    91:3f:66:e9:f8:c1:60:79:60:0b:e3:73:5e:b9:7b:
                    90:e7:3c:1c:f6:2a:fb:18:04:d6:04:87:c3:84:ef:
                    35:49:24:dd:4b:6b:da:cb:11:f3:12:be:fe:9e:1b:
                    f6:fb:de:23:95:2b:39:ae:d1:09:7f:82:31:ec:16:
                    21:0c:6c:90:a8:0a:55:c4:0c:9f:09:67:cf:58:c9:
                    d3:f1:49:56:45:b1:54:9e:0f:21:bc:46:4b:92:14:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:6A:8E:43:9C:F5:0F:EC:74:7F:19:5E:06:79:85:D3:2D:23:F1
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:4c:fc:37:35:66:b9:0d:ac:ed:64:05:da:ab:cc:1c:5e:
         48:4e:79:e0:9e:6d:cd:9c:6f:ad:3f:c3:7b:3d:cc:00:43:5a:
         07:3b:f4:5c:7d:91:cd:21:d8:76:ec:7e:74:05:63:ab:05:ef:
         7b:0f:45:11:13:35:b2:85:c6:04:f6:31:4a:58:0f:90:49:a6:
         2e:d2:a5:de:44:61:d3:1c:47:f6:35:4e:f9:3d:7e:e7:3f:af:
         fe:7a:e7:03:d3:e9:23:c4:1b:34:d6:4d:b2:58:6b:74:4b:ad:
         9e:d6:06:28:aa:b3:9b:76:23:c7:79:1e:22:8f:39:d8:6b:b9:
         c6:2a:b1:24:6a:79:e9:03:58:cb:04:fc:9f:7c:69:68:f8:15:
         51:46:37:c5:da:83:30:c0:a2:31:00:c5:a2:bf:3c:54:39:96:
         9e:5c:bd:b7:97:59:1a:ad:9c:fc:14:e7:b0:43:b4:3b:56:5a:
         a8:20:c8:1e:60:9b:3f:6c:0d:66:ff:2d:dc:dc:60:d7:b0:26:
         fb:a0:95:df:2b:6d:6e:f6:4b:67:e2:35:f2:86:3c:7b:32:a9:
         47:f3:b1:12:9e:a1:43:c0:17:64:47:80:f1:fc:44:ad:0a:a1:
         61:8d:67:50:94:41:10:5d:6f:c2:0d:62:4a:85:7c:4c:23:e4:
         7e:9d:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:01:54 2025 by rpki-client