Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          2DoUeU1kBKojarN0cgS+gF52h/bDxCZA+JchbWXH1jY=
Subject key identifier:   F5:73:B7:BC:6A:0F:3D:8F:0F:82:65:5C:87:20:18:1E:33:A1:AF:BE
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       0196BCDB89B2A58BC3D06DFE015F9D60ADCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          0E66
Signing time:             Sun 11 May 2025 01:00:26 +0000
Manifest this update:     Sun 11 May 2025 01:00:26 +0000
Manifest next update:     Mon 12 May 2025 01:00:26 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: IK4TnloAqpvJgHxikAEC1LUCcCBT7JwYhGZ3LV6amUk=)
                          2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:89:b2:a5:8b:c3:d0:6d:fe:01:5f:9d:60:ad:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: May 11 01:00:26 2025 GMT
            Not After : May 12 01:00:26 2025 GMT
        Subject: CN=f573b7bc6a0f3d8f0f82655c8720181e33a1afbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:91:3f:25:d9:56:cc:59:46:a6:43:f4:25:
                    f3:5d:97:85:1c:cc:fe:a7:27:d2:d5:50:ce:09:53:
                    d7:22:f8:ca:13:26:0a:84:b5:c6:46:f5:a3:be:fd:
                    a6:e9:ab:23:a0:27:31:74:fd:f6:c7:6c:55:5a:b0:
                    0c:4e:74:61:47:52:9d:1f:8a:5b:1e:07:88:c7:88:
                    49:b2:e9:61:49:5f:a4:75:cc:fd:c3:e8:b0:62:2f:
                    c2:e2:e1:e7:d8:13:f1:c4:8a:d6:84:2c:fb:90:9f:
                    4a:3a:fe:4d:61:f9:26:13:4c:5e:7a:26:2f:41:9d:
                    82:4c:03:c5:3c:8e:97:1a:a3:b9:9f:6f:02:26:fa:
                    eb:e2:aa:4d:51:c6:ea:cf:53:5c:db:e1:a7:af:a6:
                    0a:ee:53:3f:c1:c7:c5:82:1d:04:b4:21:9d:85:9c:
                    49:2a:4a:36:ff:68:18:09:72:64:96:8b:c2:44:7c:
                    6e:f2:96:ee:fc:f3:cb:fa:5b:b9:2a:e0:9a:9a:b9:
                    42:3a:ef:dc:8c:2e:ea:fd:fd:5d:f7:72:39:e6:02:
                    e0:71:24:71:5d:ae:ed:2a:0c:0b:a8:12:89:c5:e5:
                    bb:4c:d1:02:f0:b4:5f:46:33:5f:74:a8:26:d6:74:
                    6e:5c:23:b2:48:de:72:fb:47:39:19:7b:68:68:54:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:73:B7:BC:6A:0F:3D:8F:0F:82:65:5C:87:20:18:1E:33:A1:AF:BE
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:6c:14:95:0b:35:a3:df:c1:f0:f1:6b:4a:bd:3b:c5:19:
         a9:19:9a:69:4d:09:a4:47:dc:63:aa:95:9c:2b:8a:2b:f1:9b:
         3d:22:21:97:c6:65:48:8e:0a:b7:1d:99:ca:33:df:17:c1:41:
         14:e3:89:a0:37:f6:ef:81:d0:43:35:fc:7f:31:84:44:a2:db:
         b6:3f:0c:97:1e:2c:d7:7c:fb:d6:ba:71:39:af:55:db:a8:db:
         60:ea:14:06:16:a6:30:44:8d:3b:14:a5:72:9a:ad:ea:0a:58:
         25:d0:b4:85:33:a8:f1:c1:8f:65:fe:65:86:4c:15:27:8c:ae:
         f6:79:b0:eb:9b:5f:e5:67:4f:8a:6e:de:ea:6e:02:0a:7c:dd:
         a6:2f:ba:e7:f5:67:fc:f1:dc:0b:2a:df:22:4b:cc:6b:fa:1f:
         fb:1a:a9:03:15:f3:6a:c0:33:39:ba:ef:cd:db:d0:aa:b4:58:
         75:9c:3d:a3:b7:15:0a:db:17:d2:ad:70:f0:0f:ef:ab:ad:c7:
         d2:36:9f:47:f2:a3:54:1b:a2:6f:d1:6e:08:78:77:e2:c3:35:
         86:2c:df:e2:6a:f4:95:15:63:c7:42:af:4a:92:18:0d:7e:3b:
         6c:59:42:6c:04:ab:1a:e5:73:64:ce:14:ec:28:03:40:72:6c:
         74:35:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:30:35 2025 by rpki-client