Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
File:                     YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft (raw, json)
Hash identifier:          ArMlzcyKGOYmsVT3u0WB79XON8FWWnGb2zdqMa8XTFM=
Subject key identifier:   3C:D3:40:C0:A0:B9:46:4C:BF:A3:88:C9:C4:C3:03:11:02:E3:6D:30
Authority key identifier: 61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3
Certificate issuer:       /CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
Certificate serial:       019769CEBFE228F680EBA08670240500B0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
Manifest number:          0C52
Signing time:             Fri 13 Jun 2025 15:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:46 +0000
Files and hashes:         1: YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl (hash: 5XP7+kspWu7NOjm+BPKzInf02QIUa15POSL5h4/Kqfs=)
                          2: tm8Rt7Sc2c1PcYKasPfyO3eBX9M.roa (hash: fWTds4doBQAqbglPwbw6IGwEFIO7de7/7OMc6gbtl08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:bf:e2:28:f6:80:eb:a0:86:70:24:05:00:b0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610f8f99fca69aa73f88a531db46d228a7e2c3d3
        Validity
            Not Before: Jun 13 15:00:46 2025 GMT
            Not After : Jun 14 15:00:46 2025 GMT
        Subject: CN=3cd340c0a0b9464cbfa388c9c4c3031102e36d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:1b:5d:36:f5:14:0d:1c:28:a3:99:a9:68:
                    f3:ea:ce:64:5c:fd:82:98:2c:4b:c3:6b:b7:e1:02:
                    0f:d0:97:8d:17:ea:27:4a:c0:b3:dd:38:01:08:e5:
                    a3:17:74:89:63:16:15:fa:44:e8:c4:6c:89:ec:e7:
                    35:94:f9:cb:5c:50:c9:07:ab:a6:12:23:c8:1c:1d:
                    61:07:9c:77:3e:e2:7f:34:15:d4:95:85:1e:ac:55:
                    c2:87:ec:69:f0:68:28:51:12:cf:5a:4d:33:d7:4f:
                    af:ec:66:e5:2d:cf:11:ec:d9:72:2d:bb:e8:67:6b:
                    4f:89:07:78:6d:48:4c:ce:be:47:ae:68:4b:a9:66:
                    b1:73:c0:1e:b6:59:26:70:26:ba:40:70:00:98:a4:
                    a4:a5:25:df:23:73:09:4b:c4:90:d0:06:d1:29:17:
                    d7:3a:33:6c:51:6f:a5:a8:6e:f3:f2:e9:d8:eb:1d:
                    3e:91:21:cb:06:c4:e4:2c:1b:01:1f:b2:09:b1:e0:
                    23:fc:e3:da:2d:f4:2a:a1:e8:be:0e:e1:df:0b:c1:
                    2f:1c:35:b3:4c:9b:51:63:10:3d:84:f3:c9:87:cc:
                    80:dd:ce:03:ac:59:81:2e:15:0d:fc:d0:d5:25:a6:
                    1f:4f:ea:63:0c:d9:58:dc:21:b0:cc:73:56:e1:e6:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D3:40:C0:A0:B9:46:4C:BF:A3:88:C9:C4:C3:03:11:02:E3:6D:30
            X509v3 Authority Key Identifier:
                keyid:61:0F:8F:99:FC:A6:9A:A7:3F:88:A5:31:DB:46:D2:28:A7:E2:C3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQ-Pmfymmqc_iKUx20bSKKfiw9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d94681-abe6-4e23-9b98-79a0a528e0a4/1/YQ-Pmfymmqc_iKUx20bSKKfiw9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:05:61:08:0f:b4:eb:d1:da:09:6a:11:09:e6:46:10:7f:9c:
         dd:73:7c:9c:bd:81:5b:6d:53:0a:ea:dd:08:61:9c:b8:b2:b9:
         88:0e:fd:f5:9a:35:14:a4:bb:a4:64:9c:52:5d:b3:d6:3a:c2:
         3c:a3:b0:56:8a:02:fb:96:18:ad:8e:65:f0:d1:2b:d4:2b:8b:
         2d:eb:56:80:1c:68:cb:db:c0:22:14:5c:cc:85:81:26:29:08:
         26:83:21:82:88:5c:5d:26:af:14:89:e5:06:7a:49:89:f8:17:
         f8:cb:4f:5d:0e:29:98:f9:d3:6a:e8:9a:5d:5a:32:ab:ec:81:
         1a:48:54:15:66:cb:87:82:20:b7:98:6f:84:55:b0:cd:56:16:
         fa:70:2a:11:8e:03:89:4e:da:1a:6d:25:d5:fa:c5:c4:78:d0:
         d3:47:2a:70:04:c6:a6:78:07:aa:c1:d5:4a:44:9c:e5:f9:18:
         44:4f:de:32:0f:33:74:79:04:9a:6c:f4:03:ee:24:8d:05:5a:
         27:63:b2:97:76:f5:9d:ef:93:8f:e3:f3:9a:e5:d8:aa:28:ba:
         81:91:c8:b9:67:55:83:eb:5c:31:86:5c:06:4f:df:4e:c9:e8:
         2d:28:91:2d:98:a9:be:f4:93:4e:99:dc:87:1d:21:0c:ed:d5:
         29:1b:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:59:49 2025 by rpki-client