Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File:                     yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier:          hnKLiSqiJ+mV5qdbFl7+XzwNlbk+9WO4/ubs4r1YZvM=
Subject key identifier:   82:10:E2:DD:0F:BF:CB:41:68:5B:03:48:73:01:D7:B7:78:2F:B8:E3
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer:       /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial:       01976997DA8553041B079C7E36072F867455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number:          0BD0
Signing time:             Fri 13 Jun 2025 14:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:48 +0000
Files and hashes:         1: 1GNJJW2MjxVD_5YjOAnhTl6g1zg.roa (hash: p9+B/bwGUg8wWWb+goY+HH8qOHNqvJrQlybwIBP6B1Y=)
                          2: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: 7HoMTmbyt+ztDX0PCtIBsFW71dWmwqXbmomTzACektc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:da:85:53:04:1b:07:9c:7e:36:07:2f:86:74:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
        Validity
            Not Before: Jun 13 14:00:48 2025 GMT
            Not After : Jun 14 14:00:48 2025 GMT
        Subject: CN=8210e2dd0fbfcb41685b03487301d7b7782fb8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:7a:90:b5:ce:a3:98:70:b8:63:57:e6:1a:
                    2f:64:2b:7f:0b:f2:23:30:5d:2d:8a:da:0a:28:33:
                    7c:e9:00:1f:d2:c0:4a:cd:e8:55:06:a8:12:8f:ac:
                    ee:64:ab:24:0c:f4:17:1a:b0:3a:01:b1:fc:c2:e4:
                    01:01:1b:dd:fb:3f:ad:b3:25:09:77:9e:1d:de:83:
                    d4:e7:cc:09:2e:86:40:ed:2f:84:bf:64:8c:aa:d6:
                    ff:32:a0:df:b5:85:53:67:07:9f:3a:f3:ca:64:86:
                    d8:60:16:95:43:86:a6:b7:82:22:c5:c1:9f:3d:c6:
                    3a:88:96:03:7d:14:33:ce:d7:30:8a:7a:82:87:4e:
                    91:0e:0d:0b:ba:c4:5c:76:c7:d6:01:0c:fb:14:0a:
                    e4:bd:c8:e3:ee:75:ea:1c:0a:4a:fa:d7:2d:97:70:
                    70:0e:f8:7e:28:d3:7e:26:55:5e:40:4e:59:3b:5a:
                    a5:de:0d:54:51:46:f3:db:a2:0d:20:80:2e:ee:8a:
                    eb:bb:e6:e2:73:12:2e:87:0a:11:64:5c:b2:13:4a:
                    19:31:09:6e:bb:94:12:c0:c1:6e:9d:77:d7:7d:e7:
                    b8:71:eb:a3:47:ca:15:9a:64:fb:0b:a9:6e:3f:98:
                    61:69:00:98:e0:93:40:3c:9b:08:86:72:ca:02:3a:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:E2:DD:0F:BF:CB:41:68:5B:03:48:73:01:D7:B7:78:2F:B8:E3
            X509v3 Authority Key Identifier:
                keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:1c:76:0e:0b:e9:25:58:a9:eb:99:bd:51:eb:89:83:50:
         e8:1f:c2:ef:4c:6b:b7:f0:7a:08:b1:ca:ec:4e:31:dc:a6:2e:
         a9:ee:b4:b9:99:84:f8:a0:db:04:e5:2f:c4:66:bc:c0:8c:f3:
         4a:f7:60:37:5c:a4:ce:a4:d2:66:db:d8:34:7e:64:47:01:cd:
         a0:ba:2a:75:37:98:5e:67:ca:67:f1:8e:d4:61:b4:a9:2a:3c:
         c0:e3:7f:64:b6:7f:53:7c:a5:f3:af:18:3d:00:bb:71:2f:67:
         64:f0:e2:96:cd:c9:6c:09:13:02:f7:38:11:70:f4:a3:62:ea:
         66:81:07:11:43:2f:0e:d7:93:ee:f4:ac:c3:bc:cc:43:6b:60:
         f6:cb:b1:5a:b6:f8:25:2a:b2:20:b8:13:f2:09:3d:d8:b2:75:
         ea:0e:fc:bb:11:a7:65:55:bb:77:f4:e0:43:96:db:93:1f:98:
         84:07:63:c5:f1:7f:75:4b:49:42:ef:31:9e:b9:04:68:49:3d:
         bd:cc:15:46:72:7e:63:6b:30:92:8e:85:68:ef:be:65:8e:6d:
         cc:96:0f:3a:93:34:9f:47:f9:36:12:d1:b2:2c:84:3f:d2:28:
         e1:3c:7d:75:cb:ba:df:48:63:ec:33:d9:92:a7:1f:d3:00:06:
         ae:4f:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:52 2025 by rpki-client