Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File:                     yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier:          4qXYmF2djCpExvQzTngLooZ98YfnaNBOkwGzoNrmFCE=
Subject key identifier:   0D:8B:95:DE:DC:65:E6:CC:1A:F5:41:02:D6:BB:16:15:D4:B3:C9:AD
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer:       /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial:       01968D6F943955659A3C39E16353E20DA48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number:          96
Signing time:             Thu 01 May 2025 20:00:21 +0000
Manifest this update:     Thu 01 May 2025 20:00:21 +0000
Manifest next update:     Fri 02 May 2025 20:00:21 +0000
Files and hashes:         1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
                          2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: TAXCJg326EX1zmZXHyu6hiM0hE8Oar+vLqrEbHRtvxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:94:39:55:65:9a:3c:39:e1:63:53:e2:0d:a4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
        Validity
            Not Before: May  1 20:00:21 2025 GMT
            Not After : May  2 20:00:21 2025 GMT
        Subject: CN=0d8b95dedc65e6cc1af54102d6bb1615d4b3c9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:70:30:4e:c8:89:36:41:97:3e:a7:3d:97:f3:
                    66:ba:98:93:d2:2b:cf:8e:d4:30:82:fa:0f:40:54:
                    84:ee:24:e5:e1:c8:7a:8b:3b:f5:28:7d:be:89:ae:
                    86:e4:38:1a:a9:70:ea:35:9c:68:71:38:20:32:82:
                    1a:5d:97:40:4d:3a:2d:ea:e0:9c:ad:2f:ca:03:ad:
                    bf:ee:62:98:ff:83:c8:3d:78:75:6b:0a:76:7c:81:
                    f7:18:f4:aa:42:be:90:b7:74:88:f7:6a:89:92:45:
                    00:a1:d2:d4:6d:68:98:05:d2:12:21:53:c3:6a:3a:
                    8f:72:5b:ca:31:f4:bb:53:05:88:97:02:18:23:8f:
                    58:c2:05:d3:38:0c:61:f7:dc:be:0f:fb:05:74:31:
                    78:75:41:4a:e9:3f:40:07:bb:9d:30:65:62:e2:b1:
                    67:dc:c3:7c:60:32:36:73:31:0c:88:30:ee:5d:8f:
                    b6:99:5d:17:40:6a:47:1b:73:c4:d0:83:a1:ac:89:
                    8e:92:49:87:19:41:a3:00:9c:49:5c:be:97:22:d6:
                    54:a6:7e:41:b4:90:d8:9f:b7:e0:83:2e:0c:13:1f:
                    c6:16:b4:30:e7:fe:b8:ab:3e:9a:32:40:69:31:aa:
                    af:f6:4c:66:0a:b8:ad:ef:fc:23:79:a3:bb:62:dc:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:95:DE:DC:65:E6:CC:1A:F5:41:02:D6:BB:16:15:D4:B3:C9:AD
            X509v3 Authority Key Identifier:
                keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:28:d6:6b:80:e3:ec:bf:2a:8e:ca:b6:83:85:cb:25:c6:0d:
         07:6a:be:ee:dd:d9:0a:b4:36:6f:e4:33:fd:c4:cd:13:2a:a9:
         01:59:7c:a0:8e:a1:4c:64:ec:b2:4d:2d:62:41:09:94:1e:90:
         7e:67:b5:ef:b3:3b:bb:90:71:3b:b0:c1:d4:c9:3e:15:1f:4c:
         57:ef:e2:c8:47:ac:45:ab:7f:cd:02:32:f5:21:d0:c7:63:ba:
         a1:28:24:70:8d:19:35:7d:c4:6d:08:d1:bb:5a:2e:f5:3f:cf:
         97:6c:43:8b:10:2c:e8:4b:37:9f:83:c2:2b:e9:56:bf:11:50:
         f4:a5:48:0b:7c:3b:69:24:34:8a:7a:58:c9:4d:40:1e:fb:fb:
         11:65:cb:30:6c:46:cd:7c:7a:a9:1e:9e:de:13:6f:27:b1:86:
         36:fa:f8:43:ff:18:36:12:c8:c7:f8:2d:1e:74:7d:ca:1e:b0:
         d9:73:71:23:d3:76:e7:d1:93:a5:21:c8:eb:78:2c:71:bb:05:
         5d:d6:34:85:75:e1:27:d2:8a:95:c5:c2:e9:5e:0c:f6:11:3c:
         dd:22:69:e0:df:f6:e6:33:48:bf:3a:93:96:e8:2b:14:00:d9:
         62:99:93:c1:85:58:3a:09:6b:69:5d:b3:c0:bd:92:01:55:99:
         cb:fc:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:20:05 2025 by rpki-client