Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          KPKL9sDjwh7bHsqVgUHQeVLTnL2MCBqRvQ0HuKmjdZg=
Subject key identifier:   E6:D9:D4:1B:2D:6A:B9:BD:8F:C4:00:A5:B2:AD:81:EB:18:29:EF:E1
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       0197B77C2486D693C3A498D63BFF1B6129F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 17:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:55 +0000
Files and hashes:         1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: ZYuQ8rwW5qPqpaylWpktIg67zgZinjPJvGy01GiA1Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:24:86:d6:93:c3:a4:98:d6:3b:ff:1b:61:29:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: Jun 28 17:00:55 2025 GMT
            Not After : Jun 29 17:00:55 2025 GMT
        Subject: CN=e6d9d41b2d6ab9bd8fc400a5b2ad81eb1829efe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:eb:80:54:d9:18:cf:32:ec:6b:6a:c5:60:
                    73:5e:bf:88:95:3f:c9:8c:e7:92:5e:d7:09:87:25:
                    1e:53:61:80:bb:a2:3e:24:c5:b4:c2:18:ad:72:12:
                    02:a1:d1:35:dd:ef:15:ea:05:15:40:00:d6:bd:04:
                    01:c7:da:43:99:bd:d3:95:73:ac:1c:ad:ca:8e:01:
                    93:92:e5:ca:d0:fc:84:8e:d8:05:3b:d1:fd:b0:69:
                    39:4f:c5:e9:e3:d1:aa:2a:1c:ae:a2:d3:d3:22:d7:
                    67:fd:20:c4:b5:6c:b7:24:00:05:e9:b9:d7:d0:8d:
                    0c:a5:65:af:0b:6e:9d:58:aa:7d:86:d3:08:5a:44:
                    3d:7d:05:07:b2:b3:05:97:c0:37:5f:43:1c:f6:d5:
                    66:fc:02:5e:ea:b5:a0:fd:d3:5d:cb:14:52:a9:fd:
                    20:e6:0d:09:9b:b4:80:78:f4:ac:df:2a:96:d5:4a:
                    05:12:32:6f:9e:c4:21:77:0e:1b:35:a4:13:e0:6f:
                    05:47:69:70:3e:d9:de:f4:33:f1:36:b6:02:79:32:
                    76:de:5d:1f:ad:96:48:dc:39:8a:a6:fd:5c:50:ff:
                    3d:7b:36:55:0a:c1:95:c8:52:f8:e5:dc:9b:d8:70:
                    9e:8c:35:da:f2:9f:22:b6:7d:b2:b7:46:f1:0b:3f:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:D4:1B:2D:6A:B9:BD:8F:C4:00:A5:B2:AD:81:EB:18:29:EF:E1
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:fe:32:b5:eb:71:4f:1e:09:91:d3:37:47:a2:fe:5e:f4:
         4b:c4:c0:31:9d:45:47:92:e1:6a:b5:68:0e:c1:50:7a:76:8e:
         e8:36:53:2a:4d:22:59:23:37:f8:4b:c1:61:65:b0:4d:87:15:
         56:15:e9:ee:40:94:22:ff:32:64:a1:93:cc:98:41:89:5c:bb:
         86:a2:4d:2a:78:49:0a:73:3f:c7:0f:ee:70:6e:00:eb:ed:f9:
         09:0c:c6:3c:06:8e:48:27:db:45:57:70:bd:3b:dc:8f:a8:35:
         2d:40:28:30:b6:91:cb:eb:56:53:f7:76:97:1f:55:b0:d9:7d:
         6e:1b:7d:97:6c:07:81:34:0a:9c:15:b7:fb:29:bf:d7:73:16:
         f7:ff:10:5a:75:ce:95:40:22:7b:41:f1:6e:77:4b:9d:10:f4:
         63:3b:7e:58:0d:5c:e7:cd:59:bd:54:aa:34:32:cf:0d:4a:9c:
         4e:61:d1:af:9e:e9:2a:d8:09:38:be:a0:53:fe:e5:76:6c:95:
         97:03:5f:3d:99:85:90:27:dc:1c:7c:b3:cb:1b:0e:86:e7:9d:
         30:b4:15:45:a4:c8:b1:f6:d2:c5:47:4d:bd:6a:8d:a9:97:02:
         41:b2:3f:d4:97:c2:6f:3d:4a:d5:6b:0a:f7:2e:b9:d2:fd:d9:
         de:69:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:31 2025 by rpki-client