Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
File:                     yHQTLBL4aZX-KJPk3qcmONJgEHk.mft (raw, json)
Hash identifier:          nl1Rd2MbulsiRDaHEvt9xs7aELPanipD39KucysTRHQ=
Subject key identifier:   B9:BC:0F:3C:5F:E1:76:D3:F6:53:D3:EF:ED:F3:F7:3F:1C:7A:93:A6
Authority key identifier: C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79
Certificate issuer:       /CN=c874132c12f86995fe2893e4dea72638d2601079
Certificate serial:       01977A545706778B238956FBDEF50BF6BCB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
Manifest number:          0267
Signing time:             Mon 16 Jun 2025 20:00:37 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:37 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:37 +0000
Files and hashes:         1: 9G61nTw40oudLW3JOC_FQ0aHHQs.roa (hash: PZHJFgFZ1M5t+8j0But6rI9U9bsojNq5vU54p68gWrI=)
                          2: AdoLpxkGdJU9MVB2mFDieYW6JUM.roa (hash: M3306US/H6B4VGXvtuAxz3jajRvPMjKiTsFnDjT1Itk=)
                          3: ajlhxYNtAPzeTPjXCJjwu3u7DCY.roa (hash: IqXuM6//Ku9jh4JzK+2CUndK/ugkLqCne4Oz+cOP1rE=)
                          4: yHQTLBL4aZX-KJPk3qcmONJgEHk.crl (hash: x3g7pQyx6XMCv2FilS3TgALYHAfgWiZwvAnThGZ3g+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:57:06:77:8b:23:89:56:fb:de:f5:0b:f6:bc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c874132c12f86995fe2893e4dea72638d2601079
        Validity
            Not Before: Jun 16 20:00:37 2025 GMT
            Not After : Jun 17 20:00:37 2025 GMT
        Subject: CN=b9bc0f3c5fe176d3f653d3efedf3f73f1c7a93a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:74:43:61:b3:26:5f:12:85:5a:ae:48:52:
                    ed:04:4b:e1:f8:28:ad:e9:86:66:a4:aa:63:29:62:
                    b1:e0:a7:61:84:43:53:3e:c1:a6:de:0f:ce:c4:09:
                    ee:84:c4:61:2e:be:5d:e8:3d:66:72:74:43:c1:0d:
                    96:88:e5:32:09:c4:44:a7:05:03:6e:09:1b:ea:5c:
                    fb:3f:ab:59:1b:db:6c:b7:f3:ce:d3:ec:05:00:57:
                    c4:41:87:e7:7f:d1:fa:07:56:e4:6e:33:b7:c0:d1:
                    42:28:6e:db:c7:3e:c7:91:2e:a8:5f:d6:ea:9d:64:
                    40:07:83:b4:17:68:7c:12:33:0a:d9:ff:e6:d8:7c:
                    ad:03:e0:0b:f0:0c:af:0b:c9:70:b5:9d:3b:1f:c0:
                    2b:41:da:4e:55:20:4d:21:30:8b:d9:66:74:a8:6e:
                    a5:9a:c1:40:bf:41:96:c7:9c:4e:01:fd:7f:0b:0f:
                    94:73:21:a0:76:02:dc:03:a3:0c:03:c0:9f:7d:80:
                    89:32:a4:dc:7c:d0:be:33:39:0a:7f:cb:10:b3:34:
                    eb:4d:7b:2d:42:cc:8e:c9:18:e4:0b:10:f4:fe:31:
                    c5:f4:f3:27:97:cd:99:26:86:20:e1:32:3d:44:fe:
                    5f:5c:51:13:0a:ad:e6:d4:d0:92:1b:ae:f5:a5:0b:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BC:0F:3C:5F:E1:76:D3:F6:53:D3:EF:ED:F3:F7:3F:1C:7A:93:A6
            X509v3 Authority Key Identifier:
                keyid:C8:74:13:2C:12:F8:69:95:FE:28:93:E4:DE:A7:26:38:D2:60:10:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHQTLBL4aZX-KJPk3qcmONJgEHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/89ce74-9380-4ccf-a615-4c08b4aa20fe/1/yHQTLBL4aZX-KJPk3qcmONJgEHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:46:f3:82:87:1d:e5:82:00:19:a2:4c:52:5e:97:21:e7:44:
         a7:b1:aa:e4:3d:1b:4b:9c:05:86:b3:ae:16:14:44:8c:dc:2c:
         16:73:55:ac:82:ba:4a:af:9c:6c:99:70:a3:fe:64:db:17:5b:
         b2:04:36:75:76:83:ac:9a:04:26:bf:53:4e:03:8f:a0:0c:60:
         8c:f2:ef:04:28:e9:e3:4b:39:1c:cb:35:df:37:5e:81:ab:21:
         61:3d:e9:89:b7:1b:6d:c2:12:07:ae:b9:e6:4c:11:8b:96:c8:
         33:11:8b:ab:b9:be:8e:06:84:c9:2b:d0:9b:d2:65:d8:85:3e:
         92:04:36:71:ab:22:cd:16:bd:bf:00:27:a1:c6:44:09:5c:f1:
         34:69:af:ab:53:c2:91:ac:ee:36:54:3e:e4:7b:c9:c5:7d:c8:
         66:70:38:23:ef:e4:fb:c2:c5:f5:bb:d7:54:62:31:55:b9:f9:
         75:e5:ab:4b:2f:e3:fd:66:5f:9c:d1:07:bf:08:c7:ff:e4:df:
         35:dd:90:d3:78:78:76:1d:4f:65:94:6d:cf:4d:2a:51:88:c4:
         08:7c:7d:78:8f:6b:76:93:70:8d:35:bd:ea:43:b3:24:83:8d:
         de:d3:d7:cb:98:47:3b:6e:70:26:70:d5:93:3c:92:d0:81:8e:
         0b:20:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:28 2025 by rpki-client