Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          mk48auFea/53Zlf58geY12qoG4cYODkZ8TyEDyG7sRc=
Subject key identifier:   5C:33:9C:3D:34:64:4E:0E:45:0E:B4:5A:5A:0D:64:BE:1C:AD:CD:C4
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       0196A051A87385E8F4AEF653A7E46429A496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          0BB7
Signing time:             Mon 05 May 2025 12:00:28 +0000
Manifest this update:     Mon 05 May 2025 12:00:28 +0000
Manifest next update:     Tue 06 May 2025 12:00:28 +0000
Files and hashes:         1: GHhiTWJIrRnBFMlK6xuYQ1nDUn8.roa (hash: MsTf0syszxTszc8q1axFwJFUrUTMc1YgfxQY+NXxD28=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: WjojwQ0stwVMBKLYjCl8D31XQd7HfN8nWcMVT1uWIx8=)
                          3: r8SyFv2fzba2rsaAZpaSWzcngkw.roa (hash: nKMxn+pRmGytAQ++Vu6+D6lCb2MTuAqsH86iDcF9gs0=)
                          4: yLm-AHf2Wu1baGR2558SeGJ9vpc.roa (hash: /Bd5Eq0QqwLJoY4wAtUd+ZWldK7GG5PZ0zCSIxN6jTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:a8:73:85:e8:f4:ae:f6:53:a7:e4:64:29:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: May  5 12:00:28 2025 GMT
            Not After : May  6 12:00:28 2025 GMT
        Subject: CN=5c339c3d34644e0e450eb45a5a0d64be1cadcdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:2f:2b:95:e6:44:7e:02:7f:d4:84:05:ed:
                    db:ac:c3:c5:16:2b:6a:a7:15:64:ea:6a:b4:cb:02:
                    1c:b4:1a:79:64:f7:22:ad:4d:23:14:89:cd:14:1d:
                    85:a4:3f:c7:6b:0e:e8:1c:80:07:e5:3d:f7:83:0b:
                    d3:88:2c:8b:b5:31:1a:bf:d1:b4:d4:c1:ec:09:eb:
                    32:d9:cb:bb:10:5d:85:54:49:22:79:a6:05:1c:20:
                    ab:82:45:e0:c7:f3:4a:cf:b4:7c:0d:5a:82:18:81:
                    17:3f:37:07:5e:1c:c1:b9:a9:d3:3a:f2:41:c1:82:
                    75:81:d7:6f:a9:15:72:1a:37:83:4c:b1:06:70:b1:
                    05:06:eb:ec:12:8c:77:51:b4:07:6f:46:cd:00:01:
                    ca:a4:56:a5:7a:2e:69:e8:23:ab:44:7b:70:5a:4d:
                    76:07:a4:95:03:61:be:23:96:a5:99:c4:8c:73:d6:
                    bb:06:57:c2:9b:46:92:cf:c0:a2:e5:2c:82:40:8e:
                    3a:5e:24:7d:37:32:36:f6:d9:c0:8d:18:10:b8:a4:
                    fd:dc:d5:0e:33:8f:24:78:5f:37:e4:67:23:41:f4:
                    4b:c7:25:fd:d5:f3:05:24:5c:b3:3b:1e:51:96:45:
                    1e:82:f5:75:b8:2d:69:1b:17:c0:93:e8:1d:73:08:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:33:9C:3D:34:64:4E:0E:45:0E:B4:5A:5A:0D:64:BE:1C:AD:CD:C4
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:b5:47:df:56:a1:83:73:bf:e3:c2:89:e1:49:1b:86:7b:
         6e:49:3b:70:08:b1:79:11:be:0b:61:b4:0a:b4:dc:37:21:7b:
         65:f6:75:96:8a:6c:48:ee:3b:72:01:5b:3b:6d:80:4b:71:ca:
         2c:37:53:a4:44:c4:8d:bf:f5:b8:67:0b:ac:81:c0:68:5f:1a:
         47:e4:0b:de:bb:a1:26:cc:f5:68:30:47:e9:46:dc:39:68:93:
         20:45:26:c7:f1:be:f4:29:5e:44:41:b2:ae:14:4b:c7:2c:cd:
         33:0a:5e:39:e0:b6:1e:5c:9d:bd:55:28:67:d5:ee:cd:03:4e:
         3d:e9:0f:3f:71:32:54:0a:2c:1b:6c:e2:b2:d2:8d:fa:4d:d5:
         0c:75:ff:a0:ce:11:b2:e1:0d:79:3a:18:25:58:6d:f4:e3:05:
         78:6d:d3:93:48:97:37:8a:9d:ff:2f:67:97:3f:bb:37:d7:0d:
         06:26:c5:12:2f:28:bc:fc:62:eb:fb:47:6b:c1:cd:f3:b4:0a:
         eb:18:b2:5a:10:d8:34:6f:9f:e0:ca:7b:c9:dc:bd:16:32:63:
         71:e8:cb:6b:2b:cd:ce:09:63:01:fa:03:fb:b8:6a:f8:f7:f0:
         7c:b2:4f:5e:6e:2f:95:4b:d7:ef:8c:97:7c:2f:4c:53:94:68:
         11:9c:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:10 2025 by rpki-client