Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File:                     _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier:          vGM7Ru6dcIxCq1gTJf/2lDNvNpuz4xNVw6E3E9bj8Mw=
Subject key identifier:   04:B6:9C:9E:8F:79:77:E7:8E:7F:1C:DC:7D:55:8D:7A:67:D8:5E:C1
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer:       /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial:       01976D745ED4352E4C636D7EF37261F7B4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number:          0C1F
Signing time:             Sat 14 Jun 2025 08:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:32 +0000
Files and hashes:         1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=)
                          2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: XwHqfi7YlIDuqALoypclKfBXlU+5vgoQ0aLJFQQU7pA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:5e:d4:35:2e:4c:63:6d:7e:f3:72:61:f7:b4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
        Validity
            Not Before: Jun 14 08:00:32 2025 GMT
            Not After : Jun 15 08:00:32 2025 GMT
        Subject: CN=04b69c9e8f7977e78e7f1cdc7d558d7a67d85ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:a0:c0:20:57:e8:64:c8:d5:ef:43:27:27:
                    8c:26:28:18:80:ca:b8:37:b1:60:06:7e:65:c0:ad:
                    52:31:33:a8:96:d4:5a:54:50:fa:e8:29:71:44:f1:
                    07:fb:17:f1:54:43:d7:16:cd:c0:3f:05:bf:9c:76:
                    ef:0b:52:ec:4a:ce:00:8f:11:21:8d:af:3d:8c:6c:
                    a1:5b:bd:b9:b2:2d:b9:45:36:ed:ec:96:14:dc:04:
                    e6:6e:58:41:dc:12:90:9d:cc:01:56:a2:bd:b8:d7:
                    a8:ab:66:fc:16:e5:0f:6c:7d:67:c2:46:3c:42:ca:
                    d7:f0:68:cd:38:9f:bb:36:85:cc:9e:6d:c0:ca:77:
                    e6:c8:f8:0e:cc:f3:95:0f:4b:77:a0:e9:97:03:8c:
                    35:6d:ed:7f:69:50:b6:64:da:58:64:f3:2b:15:aa:
                    97:32:41:51:1c:1f:c4:f4:0a:f3:38:b9:25:4c:ed:
                    b8:ad:8d:df:01:48:01:5d:95:e3:43:89:3d:e8:c2:
                    63:54:c7:b2:28:22:15:97:ff:9f:15:2d:96:94:2f:
                    20:56:82:55:fb:e7:d4:c9:16:29:3c:bc:9c:af:41:
                    c6:6b:38:1b:37:11:7c:2c:10:d6:be:cf:25:a1:59:
                    85:6c:b1:e0:88:51:da:ed:bb:9e:ae:81:2c:38:49:
                    73:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B6:9C:9E:8F:79:77:E7:8E:7F:1C:DC:7D:55:8D:7A:67:D8:5E:C1
            X509v3 Authority Key Identifier:
                keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:11:f4:d1:a0:00:97:7c:3d:33:78:89:27:40:31:5e:8a:90:
         3c:0f:7b:3c:a2:dd:52:e7:94:2c:fc:f4:5f:77:b2:0e:86:6a:
         36:4b:54:58:3e:eb:35:eb:fd:71:91:3c:b9:46:50:a7:78:92:
         88:69:91:7e:bd:0e:34:1d:2b:f4:3c:aa:9a:fe:bf:a4:7e:d5:
         50:8a:aa:fe:e6:1c:f4:9c:63:7b:7f:6d:aa:0c:33:8c:75:73:
         c7:86:03:ff:90:8f:ca:dd:be:91:26:85:07:dc:96:a1:90:eb:
         f8:0b:5a:20:2d:87:82:3f:cb:aa:44:25:94:01:b0:5d:e7:a1:
         b1:c6:e9:e3:87:e5:15:bb:50:1d:eb:fb:9f:26:28:f5:b5:b8:
         fd:d3:99:18:97:f3:e3:0a:0d:d2:7e:f1:8f:1f:38:e9:de:35:
         17:9c:50:da:0b:1c:68:0b:47:56:64:11:dd:e6:03:90:94:e7:
         a9:53:cd:e4:c1:90:9c:71:e3:4a:97:8c:35:41:36:9f:3d:cb:
         3c:64:a6:df:c6:e2:04:b7:33:c8:5e:7f:f7:83:60:6a:66:ce:
         18:22:84:dd:a6:e2:6e:cd:94:3f:b9:77:02:ba:40:16:99:12:
         20:d8:60:f4:32:b0:ae:f6:7f:08:34:31:d6:df:c8:bb:31:33:
         d3:64:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:58 2025 by rpki-client