Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          SX0j8PK271JAlFJgkkaZjYubb3AGTFfPPIGeYOZ+vvQ=
Subject key identifier:   82:45:0C:AE:8C:8E:4F:23:98:D8:2C:BC:AA:62:C8:44:45:85:A5:A2
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       0196B71059DBB5A51A0F921E639663073031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          1532
Signing time:             Fri 09 May 2025 22:00:24 +0000
Manifest this update:     Fri 09 May 2025 22:00:24 +0000
Manifest next update:     Sat 10 May 2025 22:00:24 +0000
Files and hashes:         1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
                          2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: L5M8u9SPS5bz0EdnbO1aQoJ4D47vbB29yH2ONQJRaSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:10:59:db:b5:a5:1a:0f:92:1e:63:96:63:07:30:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: May  9 22:00:24 2025 GMT
            Not After : May 10 22:00:24 2025 GMT
        Subject: CN=82450cae8c8e4f2398d82cbcaa62c8444585a5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:71:35:d9:f3:6a:06:95:a9:c1:a0:08:69:
                    e3:33:41:a3:f8:bd:04:4d:69:e2:7b:bf:ef:c5:1c:
                    71:35:b3:a5:f0:f8:65:97:40:58:30:93:ee:8d:c3:
                    d7:33:a2:f7:c8:2e:df:03:46:bf:16:1b:69:58:22:
                    0f:21:b6:d2:18:bb:ba:49:41:ca:0c:a0:93:8d:e5:
                    11:ee:bc:a9:39:35:e6:60:95:34:6e:a0:26:b7:5b:
                    07:53:05:1b:d7:ac:6d:9b:46:b2:de:ce:43:78:f2:
                    d3:09:05:a7:90:5e:b6:a5:bd:5f:3d:d3:fd:62:17:
                    48:67:99:4f:63:a5:52:52:b0:4a:78:1b:13:64:d5:
                    ec:eb:be:a6:2f:11:e9:b8:52:23:55:ac:f3:17:ef:
                    49:c9:15:02:70:00:07:a5:d1:b1:16:8b:11:ce:7e:
                    f4:9f:e3:51:9b:cd:7c:26:da:a5:3d:fc:af:2e:65:
                    2f:6b:3e:59:7a:73:f6:c1:cd:39:fd:f1:96:eb:e2:
                    55:0b:60:1c:18:d8:2d:1a:bb:e6:77:c0:8d:52:2f:
                    57:b1:02:b3:ff:63:a6:3f:43:be:41:e0:a0:9b:09:
                    13:a0:32:c9:03:3d:2d:78:79:f9:9d:4b:d8:83:e3:
                    2a:67:5f:b1:6b:10:25:f5:c5:25:0f:57:10:6c:91:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:0C:AE:8C:8E:4F:23:98:D8:2C:BC:AA:62:C8:44:45:85:A5:A2
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:c7:a5:fb:e3:e3:f3:c9:eb:c8:1d:91:5d:51:f9:c1:11:
         b9:bc:93:61:19:49:1d:4f:c9:b6:63:04:f3:61:4e:58:86:d7:
         85:17:a3:6a:97:fa:2b:3c:d9:06:de:f5:b2:90:8c:0f:90:aa:
         07:3f:e5:20:d0:c2:44:54:78:ae:2e:77:c9:4f:5d:7c:33:8f:
         aa:be:fd:82:6f:41:04:14:6d:e2:86:2a:5b:73:99:fc:51:20:
         a8:88:3f:1c:9b:a1:ce:1c:ec:2b:6f:36:5d:ce:7c:e9:ff:49:
         76:dc:00:f8:94:f0:cc:01:ae:20:9d:36:f0:83:7e:99:73:81:
         53:42:85:1e:1d:2d:05:33:9d:db:89:48:62:e5:8e:d6:e0:47:
         bf:1c:c6:b5:55:70:a6:bd:3f:26:73:ea:75:77:82:4d:af:1a:
         c8:2b:ce:43:26:61:c4:54:e7:b2:7c:55:bd:ce:ee:78:19:18:
         07:40:c9:a4:49:fc:e8:9a:d7:11:88:5a:36:bf:63:29:d0:54:
         e4:28:ea:48:ef:f7:e5:14:39:b1:17:dc:d1:96:87:1d:5f:4e:
         d6:40:cc:52:e6:ac:cf:70:94:da:de:5c:b0:1c:71:00:c4:bb:
         1b:7a:d6:2d:c8:b5:13:94:d4:f5:b0:e3:12:01:43:ee:74:50:
         77:55:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:07:35 2025 by rpki-client