Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          HDbJkOEOHTwGw733BJTsaZ8E0ieq6B85B9MwSnnaA9A=
Subject key identifier:   A2:51:D6:24:1B:8C:87:39:05:4A:E7:FC:83:41:D0:43:D4:79:20:C7
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       01976D3E081BAFCAB7CB79ED53C51A2962CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          119F
Signing time:             Sat 14 Jun 2025 07:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:11 +0000
Files and hashes:         1: FMnMJSika8qzHn3rA1gugh6bskk.roa (hash: ifB+hpHW1Zidp1iRq+x5utdXKTTiyitHTNMMB+oocZw=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: UqRz4ICc3E8MBlh0P/fNg5oZYtxPNI1x3QEvDHA3pHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:08:1b:af:ca:b7:cb:79:ed:53:c5:1a:29:62:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Jun 14 07:01:11 2025 GMT
            Not After : Jun 15 07:01:11 2025 GMT
        Subject: CN=a251d6241b8c8739054ae7fc8341d043d47920c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:33:54:60:1a:26:90:b2:63:09:c5:2f:61:
                    fe:fd:42:f5:9c:4d:03:5a:6d:80:8c:22:9b:dc:4d:
                    e3:fe:b6:9b:4f:98:41:bc:89:ee:25:3c:be:eb:aa:
                    60:33:b0:ea:bb:c1:4d:a6:b4:d7:bb:ba:81:d2:76:
                    33:11:f8:f1:db:7f:fc:01:d1:ce:a5:dc:4f:d0:62:
                    09:00:ee:1a:65:a9:f2:61:96:29:c3:ef:85:3e:fc:
                    a2:c0:5a:1f:84:b9:a9:9d:dd:15:b3:69:ac:61:07:
                    45:98:fb:e2:a9:00:94:90:43:f3:d6:d0:0b:1f:82:
                    bf:d1:fb:4a:b6:e3:bf:63:ad:98:c4:49:82:a7:1d:
                    09:8f:c5:a1:42:8e:5d:8a:9b:fa:c8:41:e1:66:d9:
                    33:b8:7f:df:60:66:52:e2:80:42:70:1d:f2:37:a9:
                    94:92:25:de:b0:e2:0c:67:bd:e7:3f:d5:59:18:10:
                    72:b7:c8:d3:d1:a3:f4:74:47:19:df:7f:02:cf:31:
                    f1:2a:a6:d1:3d:62:7e:d3:e8:99:28:d9:21:46:1b:
                    64:ad:c5:fa:27:fc:24:e9:9b:32:9c:f1:20:16:2d:
                    86:6f:cf:34:34:9b:f7:fc:d8:fa:3c:6b:be:09:18:
                    83:a4:94:18:01:e8:2e:9f:c6:93:68:1f:5b:72:f2:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:D6:24:1B:8C:87:39:05:4A:E7:FC:83:41:D0:43:D4:79:20:C7
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:85:13:1b:7e:3b:8d:57:32:1a:53:36:d4:ed:4d:a6:ea:
         e1:60:6d:1f:05:bb:4b:bb:6a:b3:09:e8:72:04:97:13:67:fb:
         69:b1:ce:e5:13:d8:e0:38:7a:a9:ec:71:3d:c1:47:d4:07:75:
         81:e8:4f:9d:fa:55:ca:0c:d4:11:22:ed:60:8d:45:6a:cc:ce:
         ee:ac:df:e9:3c:62:15:6d:30:08:58:16:0e:02:24:a6:00:19:
         3c:75:29:e3:47:d7:27:14:f0:f2:01:18:57:d3:f1:46:05:5a:
         4e:35:9c:0f:9a:36:f9:70:d6:30:15:ba:a3:8e:e5:7d:69:96:
         04:59:46:62:1b:d1:ef:59:23:f5:b7:b8:11:24:a0:44:c3:b0:
         23:c9:ca:31:30:47:16:eb:15:ce:3e:b3:21:80:bd:4e:3a:e0:
         88:a9:52:10:97:d6:2f:f2:cc:b6:93:31:61:2c:9d:b3:ba:d9:
         67:57:52:e8:a6:9f:89:82:78:96:07:11:54:0e:ba:41:1a:81:
         61:f1:fb:57:dd:e5:59:1c:a6:cb:e3:ba:6b:3e:cc:25:a7:f6:
         bb:d8:45:71:d8:c6:76:00:c1:cf:22:9c:df:90:54:2d:b1:f3:
         a5:02:20:7c:e8:59:b1:ba:ec:e4:eb:75:0a:52:df:09:11:8e:
         a1:5d:0c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPggbr8q3y3ntU8UaKWLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjUwNjE0MDcwMTExWhcNMjUwNjE1MDcwMTExWjAzMTEwLwYDVQQD
EyhhMjUxZDYyNDFiOGM4NzM5MDU0YWU3ZmM4MzQxZDA0M2Q0NzkyMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oEzVGAaJpCyYwnFL2H+/UL1nE0D
Wm2AjCKb3E3j/rabT5hBvInuJTy+66pgM7Dqu8FNprTXu7qB0nYzEfjx23/8AdHO
pdxP0GIJAO4aZanyYZYpw++FPvyiwFofhLmpnd0Vs2msYQdFmPviqQCUkEPz1tAL
H4K/0ftKtuO/Y62YxEmCpx0Jj8WhQo5dipv6yEHhZtkzuH/fYGZS4oBCcB3yN6mU
kiXesOIMZ73nP9VZGBByt8jT0aP0dEcZ338CzzHxKqbRPWJ+0+iZKNkhRhtkrcX6
J/wk6ZsynPEgFi2Gb880NJv3/Nj6PGu+CRiDpJQYAegun8aTaB9bcvJELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJR1iQbjIc5BUrn/INB0EPUeSDHMB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeWFExt+
O41XMhpTNtTtTabq4WBtHwW7S7tqswnocgSXE2f7abHO5RPY4Dh6qexxPcFH1Ad1
gehPnfpVygzUESLtYI1FaszO7qzf6TxiFW0wCFgWDgIkpgAZPHUp40fXJxTw8gEY
V9PxRgVaTjWcD5o2+XDWMBW6o47lfWmWBFlGYhvR71kj9be4ESSgRMOwI8nKMTBH
FusVzj6zIYC9TjrgiKlSEJfWL/LMtpMxYSyds7rZZ1dS6KafiYJ4lgcRVA66QRqB
YfH7V93lWRymy+O6az7MJaf2u9hFcdjGdgDBzyKc35BULbHzpQIgfOhZsbrs5Ot1
ClLfCRGOoV0MUw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:14 2025 by rpki-client