Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
File:                     YUtw_5wi_-C3f0P0HAgHTebzbhs.mft (raw, json)
Hash identifier:          TDRjV4d/70oRj673vyM3vZQmCYrK8RmnGFKqpEtaKQ8=
Subject key identifier:   6B:BD:CE:96:8D:E0:95:FC:1B:AD:2B:E2:5F:38:19:2D:53:90:14:6F
Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B
Certificate issuer:       /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
Certificate serial:       019682EBD1223E6433CA9910EB7519CCCCB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
Manifest number:          1515
Signing time:             Tue 29 Apr 2025 19:00:14 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:14 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:14 +0000
Files and hashes:         1: 28tlQOScTYbuODS8bt-3134oQ2Y.roa (hash: ApQAF8/smS+nlVeOZQ4fBnuRp2Hs4aD0ZCJCSWvoUVo=)
                          2: YUtw_5wi_-C3f0P0HAgHTebzbhs.crl (hash: 8tSdhBMz2HdSHxA3+CSaABZUoA4VZzFhC1aYuLxmTdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:eb:d1:22:3e:64:33:ca:99:10:eb:75:19:cc:cc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b
        Validity
            Not Before: Apr 29 19:00:14 2025 GMT
            Not After : Apr 30 19:00:14 2025 GMT
        Subject: CN=6bbdce968de095fc1bad2be25f38192d5390146f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:5e:8d:2d:60:e6:26:b5:20:67:b5:63:31:
                    ff:14:3c:71:c2:b9:f4:ca:ef:31:76:9e:6f:91:52:
                    df:ba:ac:6f:e0:cb:7e:17:56:45:e4:b8:47:ac:21:
                    55:13:37:fd:4b:5e:2d:33:0f:25:66:5e:dd:e3:70:
                    f8:66:2e:87:00:26:73:88:39:d5:27:4a:c2:6a:a6:
                    70:fb:a3:dd:42:66:db:e1:ee:11:7d:18:91:0a:ab:
                    a6:fe:5b:e3:56:34:68:5d:47:bf:64:c6:a5:e0:c4:
                    92:f5:37:2e:ac:12:32:12:0d:de:e1:a1:af:04:90:
                    06:e4:4e:85:0f:c9:fa:5e:a5:85:cc:af:92:03:f2:
                    0e:2e:69:5f:a2:97:2c:c5:28:bb:34:01:08:ef:fd:
                    56:37:38:49:17:cb:97:4d:55:26:21:0b:59:b0:3c:
                    bb:65:06:70:e5:53:08:6f:b3:65:38:d2:61:e2:60:
                    ab:d6:1b:ef:6a:80:55:6c:23:4a:5f:4c:ed:6f:fe:
                    19:e0:93:08:10:5e:81:76:94:a0:79:92:9e:89:25:
                    3d:4c:78:eb:89:0b:e0:7b:57:aa:4d:20:63:5f:93:
                    98:a6:d0:06:83:98:33:54:74:6b:4a:a0:bd:e1:aa:
                    09:e1:ee:d1:15:42:25:84:62:f8:7e:d1:02:04:8c:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:CE:96:8D:E0:95:FC:1B:AD:2B:E2:5F:38:19:2D:53:90:14:6F
            X509v3 Authority Key Identifier:
                keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:da:4a:34:f2:75:c2:24:f5:10:d5:b1:75:26:ef:1f:75:21:
         4a:55:a7:30:a6:51:3b:67:82:2f:ef:53:09:38:aa:3c:0b:be:
         be:ee:92:9f:78:ac:46:2b:57:10:70:6c:bf:ac:57:87:15:25:
         e5:d5:14:35:30:40:37:8c:b6:23:9c:ac:de:d5:a4:77:fa:d0:
         c9:6a:a6:e3:6f:31:c0:36:6e:e5:ec:f1:a4:7e:8a:b6:87:df:
         da:a0:25:b3:d0:91:2e:6e:3a:f4:af:b2:6c:cf:53:a8:ab:c5:
         8a:b3:3d:be:03:f3:e4:f1:22:fb:bb:99:13:52:69:0e:f1:09:
         38:aa:64:83:ca:13:f0:26:61:9a:d7:52:65:ed:61:1b:69:c4:
         2b:32:6f:a6:a2:55:c9:4b:ba:09:41:0c:33:f7:e7:5a:9d:07:
         2d:ff:d7:b5:dc:4f:47:3b:72:e0:35:08:95:a9:69:c9:62:93:
         1d:8d:17:b5:d6:b6:5c:19:4c:9d:b0:4d:a3:de:a3:87:ca:dd:
         7d:a1:73:d4:51:d0:c8:cb:f5:d7:ee:b2:b9:d7:60:52:6f:a3:
         b4:4b:ec:b7:fc:e6:df:53:16:0e:09:05:9a:17:35:0a:5b:4b:
         b8:67:41:04:0f:f9:ab:33:04:27:02:34:af:09:01:06:02:8b:
         d4:00:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:59:25 2025 by rpki-client