Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File:                     y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier:          Gtx6SyQy1bTArR0NvCCUyeJnlfV4djCm8ml1+WmuuhQ=
Subject key identifier:   0D:C4:33:70:CA:43:81:2B:A0:50:04:D7:0C:49:7C:AC:5E:45:78:07
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer:       /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial:       0196C31491C975A87ED5384912CE846D9CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number:          11C9
Signing time:             Mon 12 May 2025 06:00:27 +0000
Manifest this update:     Mon 12 May 2025 06:00:27 +0000
Manifest next update:     Tue 13 May 2025 06:00:27 +0000
Files and hashes:         1: uEzNWyvL5-zi2wG6wisIZYvIGW8.roa (hash: 74OlC+KGFIeOMFiETr1Upq5Oacdq7NEmnxm00bM9o0w=)
                          2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: S746QXwI+jaCDfQFmti8sNz4TKDXQVMvgNaOfCfSPbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:14:91:c9:75:a8:7e:d5:38:49:12:ce:84:6d:9c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
        Validity
            Not Before: May 12 06:00:27 2025 GMT
            Not After : May 13 06:00:27 2025 GMT
        Subject: CN=0dc43370ca43812ba05004d70c497cac5e457807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:82:25:26:19:e3:b2:16:12:b2:39:fc:e9:
                    84:1d:4a:ac:08:a0:7b:9d:0f:25:09:33:d5:e7:81:
                    fc:f6:ff:ff:b8:ef:4c:55:00:36:08:0a:f1:74:9d:
                    50:91:c5:ae:f7:05:7b:48:43:ba:a2:d1:2b:0b:8b:
                    42:f9:39:50:ff:e3:8f:11:c4:75:0f:14:f9:09:94:
                    3b:f3:0c:87:e2:5c:c9:2e:b3:8a:54:19:78:e1:2c:
                    92:80:06:30:67:aa:c4:44:86:2b:19:b4:c3:75:2f:
                    28:09:63:a5:50:ee:68:2d:8a:1b:2a:55:4c:ae:84:
                    ec:2e:64:a6:d1:7c:60:20:d4:ef:2a:ea:29:10:c7:
                    e5:cd:0c:33:f9:44:56:56:cc:ad:63:47:58:b3:a1:
                    77:ae:22:a1:a9:a7:33:26:b4:98:f8:a3:7f:4c:da:
                    9d:c1:9c:f0:b0:11:59:61:5b:51:74:5a:bf:c8:23:
                    df:57:19:11:5c:db:d2:e7:2e:16:1c:5e:e5:8d:e8:
                    4c:5f:ba:09:38:1f:ba:2e:90:1d:0f:7b:9f:0d:53:
                    a0:48:a6:bd:b5:bf:7c:f2:e9:92:b7:1c:29:1b:3c:
                    3d:39:a4:60:b2:8f:23:aa:98:58:53:a6:e6:84:a4:
                    a5:f4:b0:eb:91:a8:48:f4:62:7a:93:69:dd:6c:f7:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C4:33:70:CA:43:81:2B:A0:50:04:D7:0C:49:7C:AC:5E:45:78:07
            X509v3 Authority Key Identifier:
                keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:2b:60:42:94:07:5d:1f:f6:f1:41:4e:e0:e3:8e:4b:6c:
         c9:19:94:47:44:f6:cf:21:43:ac:45:1a:43:03:a7:25:cc:cd:
         85:0a:29:1c:30:b3:bd:4e:c9:f8:1a:f4:d1:d3:ce:8b:25:32:
         ff:97:0b:54:36:05:32:bf:b8:78:55:ca:e5:6d:fa:1d:d5:38:
         ce:5b:aa:db:0b:71:22:3f:6a:e1:f5:c2:d4:5a:f7:cc:2a:b5:
         f0:8f:c2:ec:30:c2:2f:39:2c:89:dd:2e:b8:82:11:3e:d0:b7:
         dd:58:b7:cf:e3:3e:e1:b2:20:93:38:72:ea:f6:03:82:b2:22:
         10:58:d0:9f:6b:35:38:56:7b:da:76:bf:c2:49:c8:8a:52:23:
         53:e8:ab:b0:93:0c:09:61:f5:dd:85:cc:5f:26:d2:2c:1f:ea:
         2c:2e:82:b5:e8:d6:3c:e7:9e:80:65:14:3a:ae:5d:a9:15:c8:
         f7:f1:a5:58:39:26:4b:98:8c:eb:3c:bd:96:5a:de:c0:f7:32:
         ec:6a:86:39:48:8e:65:b4:53:12:b3:88:bd:03:66:18:4e:87:
         d8:53:8e:84:e8:79:8a:50:f1:1e:40:5c:8e:79:ad:5e:8b:d4:
         f8:c1:56:66:12:9a:4d:5c:57:d6:7a:46:3c:90:90:25:ea:97:
         e8:77:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:55:11 2025 by rpki-client