Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          7Ies02AelDg7kWIfCkgclCvtK/I1f1CVvhsO0r9beRw=
Subject key identifier:   CF:DD:ED:77:15:93:79:E8:89:81:10:6B:03:3E:A4:86:4F:6A:B1:BA
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       0196B8FF112B5DB2B7D197FAA88391AF241B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          04A4
Signing time:             Sat 10 May 2025 07:00:45 +0000
Manifest this update:     Sat 10 May 2025 07:00:45 +0000
Manifest next update:     Sun 11 May 2025 07:00:45 +0000
Files and hashes:         1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: pLsfuLPCZTjMI2OCSdBNH3D13rd6MY/ucMGqCDUkC7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:ff:11:2b:5d:b2:b7:d1:97:fa:a8:83:91:af:24:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: May 10 07:00:45 2025 GMT
            Not After : May 11 07:00:45 2025 GMT
        Subject: CN=cfdded77159379e88981106b033ea4864f6ab1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:30:15:66:aa:7a:06:18:2c:58:de:b5:f8:
                    49:1a:62:2f:ce:78:ad:b6:43:ea:6e:0e:1d:08:34:
                    59:69:15:fd:18:42:05:dc:94:ff:19:e6:20:28:90:
                    b0:24:e9:b8:3e:2c:f2:c3:6e:64:96:ab:56:ad:34:
                    7b:94:71:83:3c:1f:a9:91:ef:02:8d:77:68:0c:3d:
                    cf:d2:85:a6:86:6e:2f:3e:3f:4a:65:e8:17:88:9f:
                    51:f7:a6:25:6b:17:6b:16:83:bf:d1:d8:8a:f3:25:
                    8f:5c:d7:52:fd:8f:ac:40:60:ba:38:3b:60:8c:04:
                    19:bb:15:c4:1d:1e:95:ff:45:db:a1:bb:ee:c6:a7:
                    1b:6c:27:14:8a:21:24:52:f8:46:c2:c1:fc:fa:58:
                    f0:3d:d2:10:f7:d0:7c:2d:c5:0b:c6:4c:9e:7b:2c:
                    a2:30:74:a5:f8:16:e6:90:a3:0b:99:fe:fd:cd:fc:
                    5c:b1:05:24:24:5e:ea:2d:4f:b1:ac:d9:69:e5:7b:
                    86:bb:ad:de:be:04:b7:78:37:09:bf:37:76:e6:cb:
                    8a:67:bb:ca:59:c1:b5:ef:79:90:63:9c:73:12:bc:
                    70:8a:dc:27:89:b7:4e:08:68:f5:f5:e1:0c:ef:10:
                    c0:0d:67:d9:6b:1b:51:e4:f1:2e:25:57:ac:b9:54:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DD:ED:77:15:93:79:E8:89:81:10:6B:03:3E:A4:86:4F:6A:B1:BA
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:02:95:32:55:97:8e:a8:c8:38:85:b4:14:2d:24:53:a5:51:
         1b:88:c9:70:8a:f2:25:1b:82:4e:74:09:bb:08:e4:a5:e8:7d:
         09:ee:54:bb:aa:01:63:d1:51:44:c7:87:fb:d5:7a:fe:b8:c7:
         2a:05:6d:ad:1a:31:a7:d6:81:02:f7:2a:a6:8a:bf:2c:d5:8e:
         a8:86:23:1e:3e:97:81:22:8d:1d:47:fe:3e:17:8b:b2:93:9b:
         91:0b:ea:00:37:55:1e:86:ae:7b:a6:9d:89:92:16:35:d0:e0:
         17:e9:21:28:ed:96:15:8a:74:85:56:2d:29:1b:5d:3b:4c:43:
         5f:56:a5:6e:e4:ba:eb:5b:ff:d9:7a:7c:7a:50:8d:28:8c:06:
         cb:83:d2:63:50:e3:d3:09:38:89:12:cd:c7:5f:92:df:be:10:
         00:be:d6:04:4b:19:1a:b7:34:9e:9c:13:cc:9b:70:78:e1:bd:
         e5:3d:59:10:c0:d8:74:ef:ca:ae:83:f6:13:37:c1:25:90:90:
         cd:da:fb:97:1d:92:3f:03:00:b6:76:f1:3a:d7:b8:18:3f:f1:
         ec:1d:51:a1:b1:02:25:8c:de:be:c2:a0:39:9b:b4:65:88:4b:
         45:9c:9e:95:07:d4:b1:a2:e6:02:2f:a7:fc:5b:13:6b:ad:5c:
         fd:78:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:57:00 2025 by rpki-client