Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File:                     _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier:          nT2utHXNpvp95FmApFSv89AbPGPNtid9uVJN+egttDk=
Subject key identifier:   11:05:8E:2D:DF:44:E7:4B:B7:13:85:7D:41:3D:DB:00:CF:10:7C:7D
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer:       /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial:       0197D77633EF33A444850CC88BBF107B72CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number:          10E5
Signing time:             Fri 04 Jul 2025 22:02:17 +0000
Manifest this update:     Fri 04 Jul 2025 22:02:17 +0000
Manifest next update:     Sat 05 Jul 2025 22:02:17 +0000
Files and hashes:         1: Vc2DYnTkl8e6VG_7qyXjn1yvUqg.roa (hash: S5Mw4KsEyV+yIM/8XssJwS1ndxLAY/uwrPjkANgxyb0=)
                          2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: vaRnjCJGdW59JPYxKDnvhN0VyWzkAmXaEuSRdW5GuOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d7:76:33:ef:33:a4:44:85:0c:c8:8b:bf:10:7b:72:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
        Validity
            Not Before: Jul  4 22:02:17 2025 GMT
            Not After : Jul  5 22:02:17 2025 GMT
        Subject: CN=11058e2ddf44e74bb713857d413ddb00cf107c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:07:34:a6:6c:13:18:67:e1:ce:a4:9c:93:
                    9c:e3:0c:0a:57:f0:39:12:53:0d:a1:16:aa:1c:57:
                    24:4a:51:2f:0e:10:ac:02:22:47:bb:6c:49:a6:d0:
                    85:77:ce:10:26:6f:52:3f:0c:ae:b9:af:e0:d7:9c:
                    99:1d:c2:53:10:57:23:b3:6f:b8:50:5f:95:28:63:
                    00:d9:fe:7f:14:92:35:0c:21:1b:8a:d5:a5:ba:16:
                    a0:9a:33:ed:35:33:a2:8b:a7:56:33:48:2c:ba:14:
                    f7:06:1d:a9:19:23:74:1a:7c:0a:a5:ff:b3:e2:b4:
                    e4:68:60:8d:d8:15:d8:96:17:35:fe:73:81:e2:81:
                    32:f2:b7:c0:d5:f5:27:f1:9d:79:fa:f0:ef:54:ef:
                    60:bf:40:bb:28:a3:5c:c9:73:6e:e6:e4:d4:16:46:
                    12:81:0a:f0:8e:70:7c:1e:c2:aa:ca:e8:f0:28:8e:
                    d5:54:1b:ad:62:da:58:45:bf:8a:47:c8:64:2b:14:
                    2e:88:5f:b6:9c:0c:47:5a:9a:bd:52:c0:a3:03:ab:
                    e7:22:11:0a:54:db:fa:a0:2d:ae:e6:a1:50:f0:19:
                    7c:ee:9d:ac:db:32:75:7f:61:5b:66:e3:9f:e8:ed:
                    67:80:11:63:97:6e:55:aa:7a:6f:7b:e6:e7:0c:1c:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:8E:2D:DF:44:E7:4B:B7:13:85:7D:41:3D:DB:00:CF:10:7C:7D
            X509v3 Authority Key Identifier:
                keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:67:97:c8:18:9f:a9:eb:68:21:49:15:bb:97:8a:1b:64:
         97:4d:f9:b0:e9:77:d2:02:4e:3e:73:cb:ab:23:e5:0d:05:5c:
         e2:6f:e0:47:8a:38:47:fc:ca:9a:13:3c:61:a8:24:18:9d:ec:
         d0:ea:f5:18:bb:8f:16:e2:09:56:bf:eb:41:e9:61:e2:b7:10:
         32:19:24:01:b9:b8:1d:b4:86:18:f9:f9:ea:4e:f1:e9:82:6c:
         c2:a0:af:97:3f:ae:1b:a2:31:5f:b1:9b:ad:c9:0a:b4:31:80:
         3b:00:1c:f9:c8:d6:8b:31:a1:b4:2f:38:14:16:37:81:dc:dd:
         a3:ed:2f:93:02:47:02:4c:a1:69:ef:97:da:9b:e0:3d:dc:78:
         02:8d:f3:7e:d5:d8:e3:55:0f:34:1d:b4:cc:44:f4:66:75:60:
         0e:2e:1f:36:3e:c0:72:f7:57:80:62:09:b4:40:9a:b1:56:2b:
         37:73:b2:b7:43:ae:9d:7c:99:a7:d6:c0:08:0a:86:76:56:e8:
         13:70:42:6c:b5:db:33:c0:ce:6d:92:2b:af:9a:2a:b3:43:57:
         30:66:81:87:8f:0d:17:fd:95:9a:84:26:01:b8:18:97:80:f4:
         84:62:0c:77:01:fa:f1:83:de:72:e1:e1:13:c6:9d:14:64:d6:
         5f:97:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:29:49 2025 by rpki-client