Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File:                     YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier:          a8n4EocXWDlYen32aBaOcXnRrFxzgPIZxJQ+t1E54nE=
Subject key identifier:   DB:22:33:F7:12:2B:FF:B4:E4:D9:BE:8B:A1:12:E2:6F:68:05:79:85
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer:       /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial:       01968391C2005F27380992A227591C814CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number:          02BB
Signing time:             Tue 29 Apr 2025 22:01:29 +0000
Manifest this update:     Tue 29 Apr 2025 22:01:29 +0000
Manifest next update:     Wed 30 Apr 2025 22:01:29 +0000
Files and hashes:         1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: wo0vx2sFhjddjkv8B/DhRJZ4yGXB4hB0arE9mlnzqgY=)
                          2: x91LhsukgPAqfQYj3W2LlNBbAek.roa (hash: F7uoWwJ/vYjK+zrUfHWPZS/ilKp/egTCjRgAcB55Dx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:c2:00:5f:27:38:09:92:a2:27:59:1c:81:4c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
        Validity
            Not Before: Apr 29 22:01:29 2025 GMT
            Not After : Apr 30 22:01:29 2025 GMT
        Subject: CN=db2233f7122bffb4e4d9be8ba112e26f68057985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:5b:58:42:0d:f6:5f:8b:55:9b:96:e5:a6:
                    d7:60:4b:cf:31:db:d6:c1:1c:b5:f2:cc:92:26:e7:
                    ea:5f:23:1f:08:1f:1b:f0:24:85:c4:c9:22:27:55:
                    0b:ea:10:c7:27:1c:a7:0f:15:55:5e:06:6c:dd:be:
                    92:7e:ed:e7:7d:d7:a7:9d:69:41:30:0e:8f:85:04:
                    f2:2d:df:37:a8:26:a6:61:8f:4a:e7:8f:10:18:14:
                    07:3b:44:24:31:3e:7d:d7:06:2d:af:17:8c:52:7a:
                    01:ef:1d:73:fd:51:60:ba:7d:87:9a:2c:38:61:a6:
                    88:03:d6:3b:d3:c5:12:32:f8:35:00:7b:2e:45:bb:
                    7e:93:06:62:c3:9e:bb:22:bc:63:ba:ff:77:69:f8:
                    1c:6e:a2:a3:d4:7a:66:a3:99:e5:3e:36:2b:f7:b7:
                    18:cc:d8:84:2d:9d:a1:88:b8:df:6b:50:f5:82:0f:
                    42:4c:37:fc:85:77:77:c5:b0:7c:06:7d:f0:31:f5:
                    53:b4:ec:4b:d7:4a:88:f0:fc:2d:6e:fe:18:ec:15:
                    a9:74:51:a8:02:b5:85:2f:99:7e:f6:72:c3:87:7a:
                    8d:48:32:76:5d:0b:ab:d1:e4:5d:f6:29:e2:76:2f:
                    f0:78:7f:38:e4:7a:0a:29:49:45:77:91:42:0c:6f:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:22:33:F7:12:2B:FF:B4:E4:D9:BE:8B:A1:12:E2:6F:68:05:79:85
            X509v3 Authority Key Identifier:
                keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:78:90:58:fb:67:50:a6:c2:0b:54:d9:2b:00:f2:4c:bb:d1:
         3f:51:1a:2b:a6:e5:b2:72:e8:e0:20:2f:a6:55:37:dd:2b:11:
         01:9d:3a:81:58:93:af:d0:78:34:6c:91:8a:30:cf:37:4c:fc:
         19:12:f7:94:6c:72:f5:cd:89:2a:20:0e:d8:30:3a:24:0b:77:
         c2:2c:00:7e:f2:db:a7:2f:25:52:da:f2:61:e8:5c:bb:57:82:
         43:52:06:0f:37:57:57:80:8c:d1:b6:12:18:df:da:41:bf:8a:
         3a:b7:d0:96:4c:03:4b:85:88:52:10:1c:45:c4:df:11:92:0d:
         7f:d2:50:38:82:6b:4d:12:7e:80:25:75:ea:f8:9d:06:51:d8:
         f2:73:82:8b:57:d7:b7:57:54:9c:e2:a9:be:e1:a4:99:9a:44:
         d8:20:76:f4:4d:54:a8:90:d7:8c:42:8f:08:2f:9c:81:e0:2c:
         42:1c:cc:eb:07:7b:7d:00:5f:a9:c6:d5:17:5b:e9:7b:97:eb:
         4f:d1:be:93:df:5f:5a:13:74:cb:b1:48:fc:56:01:f0:67:d1:
         96:cb:55:cc:bd:68:08:aa:4b:82:e5:89:a7:66:f1:94:39:3b:
         ea:5b:25:0d:6d:08:59:25:62:69:79:bd:82:db:0e:38:2a:75:
         28:39:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:27:30 2025 by rpki-client