Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File:                     YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier:          6ebKMfB3CjovMYNUEc6Qk6U/6RIux5Y/C7I5lkxkllI=
Subject key identifier:   F9:41:55:0A:FF:62:63:34:80:C3:DA:F1:6E:9E:23:D6:37:DD:5B:D4
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer:       /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial:       0196B1EB152BB6B8FC0BC550BC7EDDAD1BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number:          054A
Signing time:             Thu 08 May 2025 22:01:35 +0000
Manifest this update:     Thu 08 May 2025 22:01:35 +0000
Manifest next update:     Fri 09 May 2025 22:01:35 +0000
Files and hashes:         1: VDp2XndX6JtfGoVwkuuoCgKyVMU.roa (hash: Rhw0fwZkj0N5t7R6u0JuhOm1mEK44+j2oimY3iLluL4=)
                          2: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: cfDweZZ8wwp3Aljb8tWqTJ5F6ZchbTn0sfwZ7aby41w=)
                          3: tbUJNdzqV1cqj6cepbLRJaiPbU4.roa (hash: IS4lVDG4Sm/RB8vspTgrINHiyvQuQpEscgsUN00C+BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:eb:15:2b:b6:b8:fc:0b:c5:50:bc:7e:dd:ad:1b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
        Validity
            Not Before: May  8 22:01:35 2025 GMT
            Not After : May  9 22:01:35 2025 GMT
        Subject: CN=f941550aff62633480c3daf16e9e23d637dd5bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:22:92:7d:d7:93:76:39:57:e0:4d:b3:8c:
                    f2:45:f4:2d:fb:bd:d5:98:78:92:9c:7e:89:6b:ab:
                    cb:3b:57:c4:fe:a3:52:9f:0d:be:31:23:22:4c:12:
                    d5:7a:6a:1e:78:7b:60:62:06:60:11:97:3e:6c:fe:
                    84:a5:a3:28:b9:c2:67:cf:4c:3f:fc:bb:25:d4:d7:
                    fa:31:f5:4a:06:8b:2c:e2:f7:33:99:56:99:12:99:
                    b8:ff:f6:d8:dc:f3:e3:a9:1a:d5:09:e0:85:fe:e1:
                    02:e8:d6:ed:ce:53:5b:64:57:7a:75:5b:e8:73:b2:
                    6e:c8:2d:91:79:6c:cf:a6:ec:0a:6a:5e:b0:f6:44:
                    f1:76:41:6b:28:a6:a7:e6:9d:86:92:55:95:e3:82:
                    3f:16:67:42:fb:0c:81:b9:be:2f:56:3d:ab:c2:36:
                    88:2c:f1:90:0a:38:f2:6f:40:6f:0d:8e:17:4f:49:
                    89:06:18:70:ec:e3:65:61:6d:cd:60:41:ad:95:33:
                    48:d8:9b:5f:a1:3e:c9:d3:b6:10:0c:d8:8f:e3:07:
                    dc:41:2c:5b:82:10:fa:78:46:a6:16:3c:5d:1f:c2:
                    b3:5e:fa:dc:09:dd:0f:ad:da:9c:14:92:d4:11:a8:
                    81:32:0a:4a:6e:2a:c7:41:63:69:82:e2:26:cc:11:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:41:55:0A:FF:62:63:34:80:C3:DA:F1:6E:9E:23:D6:37:DD:5B:D4
            X509v3 Authority Key Identifier:
                keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:07:b5:2d:d1:f3:61:a8:80:8f:bd:4e:df:7e:e4:66:a9:
         a9:84:4e:2f:82:d4:98:b8:fb:08:7d:d5:b9:c5:95:c1:75:4e:
         d6:7f:67:07:c1:e1:ff:e7:10:15:bf:8a:56:a5:99:32:c5:07:
         86:10:b7:14:ca:fa:59:83:7d:b2:67:bc:9f:7e:98:ba:98:46:
         4b:7c:ca:ba:15:c2:89:52:ca:b2:65:68:0f:55:1b:f2:63:67:
         0f:99:cc:ea:80:67:b8:11:16:8a:3b:fd:5b:51:73:a7:1a:63:
         97:e9:08:05:ed:6d:16:54:3b:86:17:b7:63:8f:1d:ec:35:ea:
         08:b4:91:0f:e6:2b:5b:e0:b7:e0:96:09:09:81:04:ca:fd:c9:
         23:b9:5d:c9:e4:a7:cc:3d:77:24:ed:4c:d1:ff:17:17:76:7e:
         29:f5:ab:ca:3c:e4:84:14:ef:c1:bb:58:3b:7f:3a:d2:a6:ee:
         2e:4f:df:e8:a7:98:91:88:f7:be:a7:a8:d0:2c:0b:77:a1:fc:
         f5:e4:08:40:c6:81:63:f7:b7:23:43:3f:c5:02:26:05:66:44:
         0c:26:04:b6:3b:9e:c5:91:9f:86:f2:d4:ab:31:de:70:49:17:
         b2:04:8d:83:28:ab:75:7e:8b:1a:e4:09:6a:b1:f7:48:60:94:
         e0:42:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:14:08 2025 by rpki-client