Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
File:                     y9lC2W7pSnpaZS73rIVdyUAUFd8.mft (raw, json)
Hash identifier:          02LSE2q1NBYcsNgrPVFRD1yBLhOPwbN9DBmrr06VvE8=
Subject key identifier:   7D:2C:35:66:35:6E:64:69:43:30:58:C2:A9:AC:C1:7D:2E:25:7A:26
Authority key identifier: CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF
Certificate issuer:       /CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
Certificate serial:       0196BE934BCD3DB55237414FA88DF99265DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
Manifest number:          1537
Signing time:             Sun 11 May 2025 09:00:46 +0000
Manifest this update:     Sun 11 May 2025 09:00:46 +0000
Manifest next update:     Mon 12 May 2025 09:00:46 +0000
Files and hashes:         1: dUXiZWgEMzgw5vFZ8qDaH6XmlYU.roa (hash: M6xcVpwF4WkFbvgKn4KRPQKsmRd0Zva6dQ1TxO+Djpg=)
                          2: y9lC2W7pSnpaZS73rIVdyUAUFd8.crl (hash: DFd/DUqEBFMu7RDceAQxcMwSZfpzi3gxDe8kthSGntU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:93:4b:cd:3d:b5:52:37:41:4f:a8:8d:f9:92:65:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd942d96ee94a7a5a652ef7ac855dc9401415df
        Validity
            Not Before: May 11 09:00:46 2025 GMT
            Not After : May 12 09:00:46 2025 GMT
        Subject: CN=7d2c3566356e6469433058c2a9acc17d2e257a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:74:a6:f4:ee:2e:fb:32:0d:e2:11:d1:c5:
                    e4:b9:ed:78:8c:89:51:09:42:4b:c6:fb:0a:45:40:
                    d9:89:8c:60:d0:e8:0f:55:a4:55:5b:19:04:46:c0:
                    af:bf:56:ed:0e:28:ff:e2:fd:2e:6a:cc:de:b9:5f:
                    4b:87:90:c8:07:0a:11:0e:6c:62:1a:e1:f9:97:92:
                    52:d1:ec:b1:95:5d:39:c4:bc:e9:da:9d:7c:47:29:
                    0c:82:d4:a7:a9:93:e0:a8:fc:e1:2d:06:16:02:e6:
                    1d:a5:3d:4f:84:eb:99:50:73:37:51:b2:8f:86:15:
                    5b:6a:7f:4f:18:29:6c:ae:c2:43:42:6b:bc:b7:5b:
                    09:38:42:35:f5:44:56:1d:e6:4e:51:96:49:32:ba:
                    7d:6f:27:40:36:52:68:0f:ab:9a:43:13:4e:e0:75:
                    9d:2e:32:d8:45:23:f4:76:b1:82:6e:d2:ef:c5:89:
                    d3:43:b4:83:07:db:35:c7:08:44:61:24:2f:2a:4c:
                    c4:92:58:c7:3b:85:01:12:dc:36:f2:05:13:fc:6e:
                    c2:ac:ea:6c:51:1e:81:13:9d:72:44:d6:d7:b9:24:
                    fa:b0:98:fb:88:ae:2f:ef:ed:98:55:9d:15:77:39:
                    08:03:f7:20:30:81:d4:fb:48:7e:f4:c3:ed:9a:78:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2C:35:66:35:6E:64:69:43:30:58:C2:A9:AC:C1:7D:2E:25:7A:26
            X509v3 Authority Key Identifier:
                keyid:CB:D9:42:D9:6E:E9:4A:7A:5A:65:2E:F7:AC:85:5D:C9:40:14:15:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lC2W7pSnpaZS73rIVdyUAUFd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/082f12-513b-4eb9-a171-c6f6d444915f/1/y9lC2W7pSnpaZS73rIVdyUAUFd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:81:b9:77:4d:a4:e7:c1:7b:21:47:57:5b:6b:f6:0b:e6:38:
         da:dd:0e:73:04:06:17:49:52:46:30:81:53:23:04:cf:64:45:
         b2:10:e8:1e:71:65:47:f7:52:2a:10:b0:72:4b:7a:fb:a7:9e:
         0e:4e:81:8f:05:25:91:c7:2e:5a:00:65:be:b4:a7:a0:54:41:
         7d:0b:8e:95:c9:46:78:e2:48:30:77:60:63:56:0e:81:65:ac:
         d4:e5:cb:c8:6a:d2:d7:ad:0f:02:d8:42:ef:39:1b:ce:d1:b4:
         76:4d:26:88:0e:ad:f9:6c:06:8f:ad:74:95:6a:db:f3:0c:38:
         c7:ea:86:ee:1d:a9:bd:35:c1:17:e1:c8:b8:72:5c:b8:e6:d5:
         55:26:e8:1e:76:39:14:ec:e8:bd:ce:a5:61:58:aa:fd:4b:bd:
         db:0a:93:93:e6:f1:3e:da:cd:0f:07:ab:2b:4e:14:ae:ae:03:
         d9:d1:44:24:7d:47:a6:e9:51:02:3d:9f:9d:40:8f:2e:be:00:
         b5:cf:36:df:b0:95:ea:fe:31:74:1e:2d:24:de:92:74:07:90:
         3c:02:7d:13:55:4f:4c:1b:5b:f2:92:4e:4e:44:48:d4:a9:0a:
         77:18:db:6a:d2:2c:15:02:1f:f0:a3:19:f9:93:71:4b:a7:5b:
         e4:7b:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:44:59 2025 by rpki-client