Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File:                     ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier:          ABdsaX9iXMU2rs5fQJ71c8bO44lRaZ98VJdKDW67b/4=
Subject key identifier:   64:96:FF:6B:5E:8E:6F:C4:7D:31:15:77:E2:6A:F2:0F:E3:0C:08:10
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       01976C2B0638373F9108F357D5117318A577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number:          1237
Signing time:             Sat 14 Jun 2025 02:00:48 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:48 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:48 +0000
Files and hashes:         1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: QLsXsbLleOjKl/TiO+L0+ACT5V72jTwYtZkqOuj3sBk=)
                          2: zl8vYnMSKo50V7tHcL3U74d2LS4.roa (hash: cxI3XYqo0XKxXcEnFf9KagnCReAfMGFWl39LE0K//l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:06:38:37:3f:91:08:f3:57:d5:11:73:18:a5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: Jun 14 02:00:48 2025 GMT
            Not After : Jun 15 02:00:48 2025 GMT
        Subject: CN=6496ff6b5e8e6fc47d311577e26af20fe30c0810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:ad:cf:8e:2e:da:5d:3f:b6:e9:92:66:47:
                    6c:ba:8d:f3:ae:ba:8e:00:6a:98:39:29:28:4f:c8:
                    2f:36:e5:31:e8:fa:0a:b3:fa:66:51:68:b3:8b:eb:
                    e7:5e:a5:25:9b:7f:31:88:e6:fe:03:b7:f7:e7:5e:
                    0e:93:15:17:67:1b:b2:56:3e:f8:1a:16:9d:99:2d:
                    d4:c3:45:17:71:93:29:df:4a:09:be:d0:3d:54:e4:
                    d3:97:6f:c8:bf:bf:9b:be:7d:96:5e:6b:ee:a8:ae:
                    9f:f2:d1:da:88:a7:65:52:11:f1:db:25:45:72:0c:
                    99:1b:40:c8:9f:4b:63:aa:8a:f0:84:fe:53:21:c6:
                    25:55:8d:1c:54:c6:a0:92:78:ea:4d:8c:b0:fc:16:
                    0e:15:a0:0b:12:44:53:6d:ba:55:92:62:9f:70:71:
                    b5:d6:13:cc:a5:3c:56:4e:c0:57:b9:63:ee:f1:84:
                    22:69:f9:9a:bd:85:9e:f6:3c:84:6d:c6:a3:1b:43:
                    ad:75:e1:22:69:7a:06:3c:6a:17:df:0a:dc:07:83:
                    06:be:05:ab:0b:cb:06:82:03:e9:ae:bf:8c:16:90:
                    dd:e3:63:22:39:dd:63:4a:87:97:71:85:1c:da:7b:
                    c2:34:8f:7f:e5:95:d4:df:8a:b2:b6:1e:11:41:84:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:96:FF:6B:5E:8E:6F:C4:7D:31:15:77:E2:6A:F2:0F:E3:0C:08:10
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:3e:7f:35:c5:5b:68:22:04:e5:b1:ba:57:43:f1:1a:4b:
         ad:34:d0:d8:10:9a:7f:e5:87:b8:ae:d2:36:2f:e9:e3:94:15:
         5e:68:e9:dc:46:19:97:ce:96:84:01:86:9c:3f:03:71:34:f4:
         c0:d0:54:64:44:34:51:96:51:01:f7:82:3b:3d:fd:fe:12:39:
         b1:f0:3b:22:2c:52:b8:a9:73:6d:7c:b7:10:b4:82:c3:7c:03:
         90:00:8f:54:b2:60:e8:6d:07:9c:1f:ee:49:8b:eb:a2:bf:34:
         11:03:21:c7:1c:84:a6:88:b3:ad:0a:61:fe:1d:71:92:4b:ff:
         b9:91:2a:01:b8:67:4d:e4:57:68:48:e4:1d:41:5c:3c:e8:ae:
         b6:eb:93:8f:6b:72:10:f4:18:d6:25:fa:67:9c:27:3b:d9:d6:
         47:39:fe:f9:32:55:83:f1:a2:f1:ea:f7:98:e8:73:37:4b:7d:
         3c:a3:80:a0:a4:f3:77:d7:4b:88:7c:73:a7:c2:08:f7:a8:4d:
         19:fe:17:e6:21:2d:37:ae:e3:24:da:b9:39:05:d8:c5:b0:f6:
         d6:f2:dd:c2:8f:e0:ee:67:e9:b9:08:1b:8b:e1:ea:f6:c6:de:
         bf:b0:74:5d:eb:f3:23:ec:8e:d7:d0:78:91:08:00:12:99:fa:
         97:68:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:34 2025 by rpki-client