Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File:                     yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier:          udCk+9GZ4h201Q4DFEor82zVdhIoWVV9/JEN2ZilgTg=
Subject key identifier:   D5:D9:72:B6:E0:95:A7:D8:4B:82:DA:48:4E:82:87:80:F8:AA:D1:8B
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer:       /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial:       01976E5027795A1D025E7322B73310510EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number:          060B
Signing time:             Sat 14 Jun 2025 12:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:36 +0000
Files and hashes:         1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
                          2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: PxjiHiCLLnH9mIv4kUjFWgfiXq6iMwjlJcuYFZLYsGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:27:79:5a:1d:02:5e:73:22:b7:33:10:51:0e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
        Validity
            Not Before: Jun 14 12:00:36 2025 GMT
            Not After : Jun 15 12:00:36 2025 GMT
        Subject: CN=d5d972b6e095a7d84b82da484e828780f8aad18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:02:56:62:c1:f4:4d:5c:e4:40:6a:bd:4f:
                    4e:07:cc:b0:d6:35:42:51:73:c2:72:ed:f6:77:8f:
                    31:14:5c:90:57:23:c4:af:92:61:37:b9:5d:c4:fe:
                    e2:1c:88:5b:ee:ac:0c:03:d0:96:6b:cd:4d:4a:57:
                    a7:a3:16:c9:e2:60:9a:5c:1d:cc:40:e3:0b:1e:47:
                    cd:96:4f:5d:a4:d5:51:55:ec:33:aa:c2:80:f0:0b:
                    09:3f:78:d1:56:3a:61:31:04:c8:73:7a:70:f1:23:
                    10:5c:d3:4e:51:66:df:a9:c5:df:13:a6:3d:6d:b2:
                    7f:4f:4d:e0:39:7a:60:14:f7:a7:6c:f0:94:0e:14:
                    24:bd:fb:f7:ea:62:84:2f:2f:e7:39:9c:b2:4e:09:
                    fc:5f:d9:c0:8a:ff:93:b2:f5:a0:7e:00:92:e1:43:
                    43:e0:d0:fc:4a:5b:86:f8:7c:1f:d4:13:4d:65:1c:
                    c4:66:86:29:95:e2:71:f8:09:07:e2:ce:ec:7a:45:
                    03:42:5d:13:45:4c:09:34:3b:a4:36:68:d0:5a:e8:
                    6f:49:d6:b6:34:5c:e5:0e:91:1a:36:b4:41:bd:e6:
                    ca:15:41:48:82:2c:07:f7:e1:cb:4e:1a:e3:5d:6a:
                    3c:ed:bd:93:90:b6:b3:e3:79:1c:67:d3:d8:69:36:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:72:B6:E0:95:A7:D8:4B:82:DA:48:4E:82:87:80:F8:AA:D1:8B
            X509v3 Authority Key Identifier:
                keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:98:63:bf:59:75:40:cd:07:fe:ce:97:89:80:1e:c4:f1:
         2f:0e:ad:09:d7:28:60:86:1a:f1:a9:3f:24:ea:35:0c:ed:07:
         19:e4:b2:17:aa:17:a2:c8:c1:84:4b:2e:c0:84:4d:f9:94:ca:
         b7:12:18:8f:a8:c0:22:c8:86:6e:70:a2:c7:9d:1d:85:ef:a5:
         b6:ae:07:6b:1f:16:3b:93:eb:c1:12:89:90:67:b8:0a:52:3b:
         75:a3:98:f4:c6:57:07:c4:19:37:52:0f:16:53:d4:27:bf:a1:
         d7:86:79:08:a0:05:07:05:75:a1:f9:b4:d1:a4:fb:b8:af:3f:
         e8:39:f8:fe:e3:5c:9f:cb:42:35:63:15:b6:d2:07:58:b7:47:
         9b:2e:2c:2c:d9:06:08:e8:53:0c:ff:32:47:57:10:ed:70:e4:
         cf:75:ab:11:f2:49:79:06:2d:9e:78:d0:7a:30:6f:27:36:08:
         10:3f:b8:be:3c:7f:ef:b5:3e:81:75:fa:23:eb:9e:b0:4f:cd:
         3c:55:f4:ad:ba:80:91:23:fc:7e:11:e2:a2:e4:3d:cb:f6:e5:
         77:5e:fd:c1:0d:24:f0:d7:e9:58:ad:36:1c:4c:d7:a4:22:8f:
         e8:73:9f:df:48:77:8a:e1:d9:d2:55:b3:e8:91:df:d5:5c:31:
         2f:62:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:01:46 2025 by rpki-client