Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File:                     yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier:          wNSyUlsGBjv+aBVxxn9fTXOh/9RSloPhDPHPmHkdmxI=
Subject key identifier:   24:33:A0:2B:B2:3B:A6:C4:08:FD:0C:95:19:5B:86:7B:79:8D:E8:68
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer:       /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial:       01967454C713934CB72F193166499E9FD07D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number:          0B51
Signing time:             Sat 26 Apr 2025 23:00:35 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:35 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:35 +0000
Files and hashes:         1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
                          2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: AKY2bQSoNQQAHBmO8jWAXrLNz8lTiJ6VYs+fdZRzU4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:c7:13:93:4c:b7:2f:19:31:66:49:9e:9f:d0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
        Validity
            Not Before: Apr 26 23:00:35 2025 GMT
            Not After : Apr 27 23:00:35 2025 GMT
        Subject: CN=2433a02bb23ba6c408fd0c95195b867b798de868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:22:21:b7:31:84:13:d8:06:39:6f:3c:da:
                    c6:6f:d4:75:12:59:ee:17:8d:0b:28:f6:b6:e0:74:
                    98:04:ca:4e:34:00:ce:4d:f4:17:87:82:30:a6:6b:
                    af:aa:8c:19:69:44:07:65:7d:3f:ce:88:d2:e0:08:
                    03:69:5a:3c:76:f0:34:1a:f8:9c:08:ef:c7:a1:87:
                    88:a5:1e:f6:25:4e:a8:39:76:d4:a2:2a:f9:2f:98:
                    1e:1b:2f:f9:3f:fe:03:07:38:66:df:c7:78:13:67:
                    80:19:02:0c:08:45:1d:13:7d:6f:4d:04:3e:fe:1c:
                    75:ef:2a:0a:c8:19:25:85:0a:d1:b0:07:3e:3a:d0:
                    33:31:78:f9:a0:5e:01:86:82:b9:6c:a4:7e:7d:5d:
                    1e:e2:bf:71:32:96:0b:22:61:1d:65:77:a9:50:12:
                    80:69:72:8a:45:5d:9b:00:36:d8:9a:f0:ab:bf:7a:
                    22:95:56:92:3d:54:e8:df:6d:eb:29:e4:c0:4d:23:
                    cc:4a:4e:c9:35:90:96:6d:29:be:53:e1:ae:73:09:
                    7f:03:ce:f4:83:6a:8d:88:20:b5:07:8d:2c:19:74:
                    d0:b9:85:01:3b:95:74:27:fb:46:87:e7:56:9a:7c:
                    62:c6:61:86:5d:e8:ce:46:12:f2:d4:49:da:9d:85:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:33:A0:2B:B2:3B:A6:C4:08:FD:0C:95:19:5B:86:7B:79:8D:E8:68
            X509v3 Authority Key Identifier:
                keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:50:28:bf:64:09:a6:70:64:7f:0f:2e:a0:c9:8e:a3:a1:
         fa:59:85:d6:a4:6d:49:fe:f8:ac:9f:28:ee:5d:a0:77:43:8d:
         44:14:0a:6b:d2:bd:99:3a:2b:29:5e:21:7c:1e:e7:7b:6a:5a:
         ab:2d:6a:dc:26:a9:2f:cf:3d:62:70:4a:c5:e5:19:31:fd:42:
         5b:58:54:5c:b9:52:0c:0b:f6:6e:96:eb:88:79:87:3f:15:e1:
         d2:58:d4:d9:23:10:85:34:e3:ad:93:07:d5:d7:2f:d6:c9:bd:
         7d:82:7e:4e:84:08:c1:72:28:4b:2a:31:c2:cb:fd:8f:10:7f:
         20:df:8e:f9:d0:7c:97:35:82:df:10:b9:df:85:4c:e2:d1:a7:
         c7:54:22:f0:da:14:94:02:c4:2c:35:29:df:7b:92:6f:6d:22:
         da:6e:37:78:19:b8:35:ab:92:b9:00:0e:60:70:65:2e:cf:20:
         41:ea:d4:c8:85:39:63:c7:4b:96:1f:e6:fc:77:52:7d:d5:31:
         7f:0a:20:b9:f1:a7:a1:56:b2:13:53:d3:bf:2b:81:29:7b:a2:
         5f:24:f8:e0:ff:2f:18:04:53:ef:0a:9d:8f:93:0a:95:5d:51:
         59:27:61:b5:51:42:e8:1e:cc:bd:35:d3:4e:82:51:b9:af:a2:
         71:a9:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:02 2025 by rpki-client