Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          sJgmNj/pxaMfqT3NjXxjg+C2/uqO4oH//FvqIA6clZo=
Subject key identifier:   48:33:3B:96:D6:AC:B9:31:A9:C4:84:7A:2D:77:92:5C:AF:2C:C6:9D
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       0197789CF87ABB54D5DB8F019A678BD29548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          0503
Signing time:             Mon 16 Jun 2025 12:00:42 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:42 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:42 +0000
Files and hashes:         1: C8L1z84_2r_lzc2Lk6eIdrAoayw.roa (hash: phPZynXPFJJG35B8r3oO6DnbXPe6XC6xJ8y/JrqkIqE=)
                          2: NGUX_wUecUWqzbndlWjKyvgn_L8.roa (hash: 17HMuISkbpyzncjWQXNjl1zx9g2Y5g9g+2mcpzxaFWE=)
                          3: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
                          4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
                          5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
                          6: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: l0kzIcUzUTbbECqhMp2iSCI29oUC/NyJdnjgKKnSiQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:f8:7a:bb:54:d5:db:8f:01:9a:67:8b:d2:95:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Jun 16 12:00:42 2025 GMT
            Not After : Jun 17 12:00:42 2025 GMT
        Subject: CN=48333b96d6acb931a9c4847a2d77925caf2cc69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:1a:c7:c0:d3:3c:9d:f0:f7:e3:ab:fc:30:
                    fb:0a:0d:80:6a:98:f7:64:27:f9:ac:3d:cb:cd:4f:
                    3e:c6:4c:1e:74:9b:b4:8e:14:c7:93:9e:1f:79:8d:
                    18:e9:57:fb:0d:9d:4e:79:6a:0b:56:8a:49:e6:16:
                    da:38:8e:6e:0c:f4:92:bd:6f:9a:ff:02:70:a4:db:
                    0d:94:12:2b:24:8f:50:d8:d8:34:a5:de:07:41:21:
                    f3:64:5f:db:25:7a:32:6d:7b:74:09:89:09:8f:9b:
                    8b:7c:5d:29:6f:98:98:bd:71:62:c2:90:83:03:05:
                    5b:8c:a7:e3:21:81:30:00:51:b1:41:cf:b0:d6:35:
                    84:6b:a6:f1:df:97:2a:2e:26:47:df:35:56:e6:b0:
                    f0:b1:91:70:bf:66:4d:ae:e1:2f:02:6a:ec:0f:cc:
                    52:6e:50:0b:4f:e1:5a:56:9c:01:54:6c:46:06:83:
                    15:82:e5:d4:3a:ee:a8:d3:4f:6e:85:15:ca:c0:d7:
                    7a:95:34:49:3d:27:29:7f:d4:53:2f:df:d5:41:af:
                    5a:0d:78:1a:6a:24:ce:14:8b:a6:35:fe:aa:f7:f0:
                    6b:fb:34:c7:62:56:dd:bd:33:5e:fe:91:95:28:97:
                    60:e9:99:23:dc:1a:c8:ab:03:21:28:17:8c:32:a3:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:3B:96:D6:AC:B9:31:A9:C4:84:7A:2D:77:92:5C:AF:2C:C6:9D
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:75:34:7c:d3:a9:43:ca:a0:1d:b3:8a:e2:c2:17:39:6d:9d:
         ec:2e:ad:bd:a5:3a:2c:3e:63:61:08:ff:99:c8:56:5e:fd:2b:
         e2:34:4b:ef:a3:35:76:23:0e:59:c9:e6:54:36:c5:13:49:55:
         6e:04:53:88:42:8d:58:fc:b3:c6:84:0a:6d:11:32:3d:30:9d:
         67:e7:9c:9f:0f:48:90:55:8e:c9:16:67:3d:87:5a:83:5d:f2:
         96:19:ee:23:19:83:14:70:08:78:77:c5:d5:18:18:27:4e:9a:
         be:a0:ea:99:9c:26:94:1b:97:8e:a7:c0:eb:3d:fa:5c:55:f1:
         c9:ed:32:6b:73:3e:1c:26:27:e2:28:ce:36:6c:57:10:8c:b2:
         1e:d1:a1:34:b1:a7:86:da:ed:cf:d0:25:f0:8c:d1:5e:d3:d3:
         36:15:5a:20:da:a4:72:e4:f5:ca:62:25:56:f4:08:ab:2e:83:
         d4:b9:7f:6f:c4:aa:8a:13:8e:34:ed:33:a9:75:c6:1c:af:ae:
         cc:4a:36:38:97:9e:5d:33:83:30:c4:27:d3:8e:18:be:e7:f8:
         29:18:d1:a4:62:d3:6e:f5:2c:40:6b:47:32:02:8d:33:37:36:
         b5:7b:f8:81:8e:1f:14:05:7b:46:90:47:ad:00:3c:41:5c:26:
         67:5d:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:55:52 2025 by rpki-client