Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          6aDBthIf9mAcDzx4Rc0YRZMBuhK5kX0yj7/+cqwuNYA=
Subject key identifier:   64:DF:27:47:1D:C7:57:49:34:0B:44:1A:C1:18:4D:1E:F4:70:71:66
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01976929CE1BFB9FDCAE2F355D8ABE3E599D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          119B
Signing time:             Fri 13 Jun 2025 12:00:36 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:36 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:36 +0000
Files and hashes:         1: 9fWXkacnWfLXH44Xb8HrXGzmknY.roa (hash: ueIT5017I7hv93aOprGzdVNSjT4YNhBA1fdwv5/AgdI=)
                          2: HRQ3zVG8fQhstKqXqVzvaQOYW-8.roa (hash: J4bA2yn+4d47gpldTm1th3QAEiyAys+UIYmTMp8Fvck=)
                          3: KW27n6S1v0MgxCxbh7E0buBfif8.roa (hash: toMOgZfSEbU3csqRPx4QZ9cAdliSmxp8YH9UOfmQEwM=)
                          4: M6e0Db6rIRrut7Sf9jFsbIVLDaM.roa (hash: JXcstu8zslncBB42v+GEY3znOZDM894FUsNgQKDisvc=)
                          5: f9hfmHvrY5AwY36q7MIQ4falWVM.roa (hash: poIPC46neVOYvv7bF8o92LK9XXWLEMpfpDFVMKy16AU=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: h6WZclBdDwndXf10VjAPIkHBsL72WAlW7ehjdy68IhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:ce:1b:fb:9f:dc:ae:2f:35:5d:8a:be:3e:59:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Jun 13 12:00:36 2025 GMT
            Not After : Jun 14 12:00:36 2025 GMT
        Subject: CN=64df27471dc75749340b441ac1184d1ef4707166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:cb:73:38:70:7e:9b:42:72:e0:ff:3e:5e:
                    21:97:09:fe:9b:81:36:7d:6c:8c:5f:4b:c0:e1:b8:
                    21:c5:15:b0:c2:c0:c8:2b:76:96:6d:4c:bf:9f:84:
                    e6:bd:a7:2b:89:2a:55:df:24:a2:be:a1:10:2f:ed:
                    17:b4:ce:c6:8d:38:83:20:7b:82:c1:40:4f:39:b4:
                    4e:70:a2:e0:46:73:a7:8a:24:ee:8b:5b:a9:d0:d1:
                    d2:ae:11:2d:cf:fe:9e:b6:be:8f:48:46:67:e6:54:
                    59:ac:96:dc:1d:84:2d:db:7d:91:a3:fe:f6:c4:3e:
                    cf:74:0b:13:ca:16:05:89:91:90:2b:d6:8c:98:0b:
                    49:c0:9e:61:db:ae:84:ea:df:dc:71:6a:46:5b:43:
                    19:cc:ce:67:be:81:1f:1d:7c:ca:41:1e:d4:c2:47:
                    6a:56:df:04:ab:2f:8f:bf:4e:52:68:8f:73:42:48:
                    74:e2:bc:79:43:14:99:13:93:54:67:a8:4d:94:6c:
                    53:4b:98:17:27:cc:e4:82:e6:e6:dd:b0:d1:0f:71:
                    c6:a7:b6:03:f7:6a:a3:27:23:77:a8:43:a7:50:f2:
                    23:31:6e:66:f7:fa:28:0d:ed:d9:eb:ec:e9:c6:fc:
                    20:50:d5:fc:b6:4d:4c:24:44:4a:b3:48:02:75:f6:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:27:47:1D:C7:57:49:34:0B:44:1A:C1:18:4D:1E:F4:70:71:66
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:af:f5:7f:4f:2a:f4:38:b9:93:83:41:78:76:a8:7a:00:53:
         ca:93:6a:b7:b3:fe:54:69:4c:e6:33:06:06:0c:9d:d8:2e:0d:
         e5:2d:f0:e5:54:76:a6:6e:21:ee:7a:2d:2c:c3:f5:1c:ee:22:
         78:8b:42:e1:06:10:b1:90:ce:93:2b:08:4e:a6:6d:d1:07:8a:
         46:a4:d5:cb:40:0b:3c:13:fb:83:e4:8c:a4:4a:26:bb:db:c6:
         17:ef:ae:38:98:18:4d:aa:f6:43:70:0c:64:64:be:9d:50:f5:
         08:64:3d:34:73:be:b9:8b:0b:cc:5a:ce:29:4e:de:1f:8c:c9:
         09:1b:46:72:e0:51:06:83:02:97:7e:f4:0d:16:76:8b:d9:e6:
         8f:ba:04:25:9c:c3:83:1c:0a:b8:22:cd:4a:ae:bb:3f:0c:57:
         b4:74:48:f6:8d:6f:66:53:69:fe:bb:a7:79:32:6a:fb:ad:d6:
         7a:b3:29:0b:4c:4c:3e:fd:6f:a1:6c:4a:8c:8e:45:8b:bf:0a:
         6f:39:83:f8:39:98:06:4f:e1:c1:c7:f7:57:db:0c:1f:34:0c:
         3c:24:0e:c3:26:c6:45:85:16:d8:38:a0:fd:68:4b:e5:c6:a6:
         ff:11:26:93:b2:c8:37:ab:26:a2:30:b1:37:04:eb:43:e5:46:
         b0:6b:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:09 2025 by rpki-client