Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File:                     bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier:          cVi14KYYLK9yRbtFkDPEfg8cl/UNmYMFu/16RQPvJDU=
Subject key identifier:   17:4A:17:AD:4A:AA:FB:7E:80:74:20:7E:5E:E1:1B:56:60:3C:2B:47
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer:       /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial:       0196C8722A3560EE83ABDC9DE37786439B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number:          12C8
Signing time:             Tue 13 May 2025 07:00:47 +0000
Manifest this update:     Tue 13 May 2025 07:00:47 +0000
Manifest next update:     Wed 14 May 2025 07:00:47 +0000
Files and hashes:         1: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: GAqHlPGfMF41PWeP9cywMSLiRIJIFuABQFcBabU98hU=)
                          2: qgSgsUNmjGc3XOuValdIkwwl07g.roa (hash: K6iu6N/DtzSRuE8h4cXXnk/shnPgBX6kLrlWrpVPx3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c8:72:2a:35:60:ee:83:ab:dc:9d:e3:77:86:43:9b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
        Validity
            Not Before: May 13 07:00:47 2025 GMT
            Not After : May 14 07:00:47 2025 GMT
        Subject: CN=174a17ad4aaafb7e8074207e5ee11b56603c2b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:c0:dd:f3:a8:e0:32:46:d4:84:ca:28:f1:
                    85:5b:11:5e:3a:00:8f:74:06:1d:b8:7d:d9:65:a9:
                    8d:7e:1f:55:b6:7b:5e:f3:3f:bd:40:7d:f8:12:16:
                    9f:01:b0:c8:2c:47:c2:df:d5:af:79:b2:a1:2d:21:
                    69:4f:4f:88:8d:e5:e1:ef:35:9a:ee:ab:be:b8:96:
                    66:c4:90:79:17:b9:91:0d:d6:29:cb:32:b1:fd:7d:
                    a6:4a:c1:76:94:e9:9e:11:37:a9:2d:d3:51:72:37:
                    3b:55:11:a7:fc:6b:ea:f3:69:92:80:3e:54:5a:ee:
                    48:19:62:d5:65:ec:86:a0:24:8b:61:b5:6b:71:1c:
                    f9:d9:9d:f7:22:1d:96:1f:34:fe:83:86:46:fd:a1:
                    e1:e1:4e:03:f1:28:42:f7:9d:1c:3b:1d:63:a5:e3:
                    57:b3:d2:6d:39:62:c4:04:b7:6d:04:f4:aa:25:09:
                    ba:a4:cd:bd:cf:2d:22:55:c6:18:1d:7c:7d:4c:38:
                    bd:6c:6a:43:06:c7:09:d7:c7:52:45:a7:75:dc:16:
                    10:97:b0:e3:d3:d0:32:8c:4a:f8:3f:65:3e:15:c9:
                    7d:08:b4:ec:d2:a6:3d:39:80:ac:00:12:bd:5a:5f:
                    fd:15:4d:71:5a:e8:64:3e:3a:5f:d1:3b:d1:a9:77:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:17:AD:4A:AA:FB:7E:80:74:20:7E:5E:E1:1B:56:60:3C:2B:47
            X509v3 Authority Key Identifier:
                keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:05:ff:99:0d:47:fe:a9:7c:e2:53:49:a5:da:21:e2:34:
         6b:2f:0c:50:03:c0:64:32:5d:a2:ad:7e:fb:cd:6b:4a:bb:6b:
         c6:a0:89:70:af:95:eb:83:51:3f:16:20:9e:f5:6f:a0:60:eb:
         9c:87:d6:98:41:34:14:1e:fe:c9:4f:71:1a:b3:ca:d9:4a:50:
         4c:2c:9f:20:2e:eb:9c:e4:52:34:14:83:c2:0d:e7:1f:78:b1:
         e1:6f:9a:f2:26:09:26:20:21:ff:e2:d7:01:39:f2:e5:de:4a:
         3a:7b:2c:6a:63:06:0a:f4:a7:fa:c4:0c:89:08:fd:e6:8f:47:
         7a:aa:ab:70:f0:f2:af:1d:fb:c4:3c:60:62:34:3a:d6:c4:bc:
         1b:ba:73:cf:09:0d:79:70:70:be:97:c0:82:2f:e8:69:59:93:
         4c:26:7b:87:93:f5:81:05:3a:04:2e:1f:96:4a:f9:93:f9:e6:
         3f:e2:53:5b:7e:1d:5a:eb:cc:b6:f3:1c:c8:67:6d:2a:a1:68:
         ff:0b:eb:2d:da:ee:43:62:61:71:82:e6:e0:61:e1:8c:9a:67:
         57:45:1a:df:7d:2c:72:99:97:45:ba:a9:17:95:be:af:60:01:
         3b:23:3e:51:dc:1b:98:7a:78:5d:b6:d0:e9:87:d4:87:7f:ca:
         d9:8c:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:15:11 2025 by rpki-client