Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
File:                     Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft (raw, json)
Hash identifier:          ryUALbUw3jv4y+3NNSM7NscruN3b9Fr9h09X7eSWe8I=
Subject key identifier:   8D:F3:49:C7:F5:FD:D9:0F:C0:CE:2D:D9:39:64:ED:80:07:68:99:66
Authority key identifier: 62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78
Certificate issuer:       /CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
Certificate serial:       019677FB9FB23CC11EFDA7E2FD4138167F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 16:01:41 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:41 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:41 +0000
Files and hashes:         1: INqFD0SeOva_N0mDabBvhXvH4vM.roa (hash: KbPWp3TtuAL2F9RTHf55y2zxM43B8AT5l9geZLgdP6A=)
                          2: Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl (hash: tvwxDGebxVdCkGSPDS3HQtrLRX9B7p7tsp0K/8uThIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:9f:b2:3c:c1:1e:fd:a7:e2:fd:41:38:16:7f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bb1c6e5e886588cd47616bacbd7ccb64abf478
        Validity
            Not Before: Apr 27 16:01:41 2025 GMT
            Not After : Apr 28 16:01:41 2025 GMT
        Subject: CN=8df349c7f5fdd90fc0ce2dd93964ed8007689966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:91:96:fd:43:f4:4d:d0:56:75:32:29:bc:
                    72:cf:ce:c2:17:79:9b:65:bd:6c:f3:99:83:61:e5:
                    1d:d3:79:3b:3f:ba:fe:29:5f:5d:fd:72:1e:c8:9a:
                    9a:b8:bc:ad:08:0e:7a:67:4b:2e:da:7e:1d:5b:8e:
                    d7:32:5e:d4:74:6b:14:36:89:dd:df:da:40:70:0a:
                    d6:03:ed:ff:ac:92:4e:05:fa:c5:e0:a6:21:0a:7c:
                    c6:45:09:95:61:ac:93:02:52:f9:c5:bf:31:d3:e1:
                    f9:28:44:b1:88:5e:6a:e3:4e:74:69:96:27:12:c7:
                    75:75:c9:e9:c8:f0:2a:3a:98:27:ea:28:df:22:13:
                    02:e4:02:e8:47:8a:20:53:a9:fc:b9:f3:24:d1:d5:
                    9d:e9:00:4f:03:d4:87:5b:3c:69:fc:4f:03:f7:bb:
                    16:38:9b:70:bb:82:fb:e8:d0:88:31:0d:c4:4a:34:
                    ac:a9:15:93:10:8e:e6:16:86:5c:72:59:0a:14:a0:
                    3a:9a:9c:94:ab:1b:4e:24:5f:2a:e9:e3:9d:4c:30:
                    ae:e2:6f:56:97:b8:a7:0c:f9:e4:32:d7:a1:de:36:
                    cf:0a:7a:19:14:1a:5b:82:6b:45:1b:ea:05:43:3f:
                    c2:60:c2:16:4b:57:0f:3f:f8:51:1e:10:0c:57:78:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:49:C7:F5:FD:D9:0F:C0:CE:2D:D9:39:64:ED:80:07:68:99:66
            X509v3 Authority Key Identifier:
                keyid:62:BB:1C:6E:5E:88:65:88:CD:47:61:6B:AC:BD:7C:CB:64:AB:F4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9f9440-591b-44d3-87d6-7c445b3f9fc3/1/Yrscbl6IZYjNR2FrrL18y2Sr9Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:5e:e7:e9:ab:48:6e:a5:2a:e1:b6:7f:44:84:25:ed:64:
         26:3a:4d:8a:3e:60:33:b8:2d:75:0d:94:41:68:0d:30:77:fd:
         eb:c3:f0:59:30:8e:81:78:23:48:cd:4f:5a:ce:f5:c5:59:40:
         b8:1a:81:4a:ad:82:4b:7e:8f:2b:5f:2d:7d:e1:ad:db:4b:c1:
         5b:3d:92:e3:e0:3a:0d:fd:3b:20:3f:d1:3c:7a:79:cf:b9:8a:
         89:81:25:f3:1a:aa:8c:2a:d2:31:fe:a7:e3:63:ee:24:f8:d4:
         dc:f1:d6:db:96:bb:a4:f5:7f:ce:15:98:21:70:6c:9a:a8:b6:
         a6:95:66:33:a1:2d:bc:c2:84:ba:46:aa:95:8f:35:9d:16:04:
         9a:7b:ad:5c:b4:1f:f8:b5:08:17:25:9b:64:71:06:40:b9:b1:
         2f:5d:23:f6:86:bd:dd:87:9d:0d:22:4a:4a:39:e9:55:3c:a5:
         75:b0:95:93:ab:7d:b0:6f:f2:44:e1:8e:0d:fd:ef:f9:3d:c3:
         19:2c:e8:df:d5:a0:8e:9b:f9:88:84:75:23:56:e7:f5:14:44:
         ef:07:f3:39:99:12:86:8f:6d:6d:ee:52:a5:f8:bd:b1:0b:f8:
         96:c7:1d:a5:39:2a:e7:13:f4:82:63:3e:85:55:08:a5:08:d5:
         fe:42:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:01:13 2025 by rpki-client