Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File:                     Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier:          XpNDckBcpaC1tAJ3YTdWEowS5Q8Or46yWcEm5OppdGg=
Subject key identifier:   1E:3D:2A:80:08:75:C2:7B:7D:29:E2:63:4D:B4:4A:CA:B5:91:0F:98
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer:       /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial:       01969FE3DA9094AA61BD2180B6F552CB7019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number:          08ED
Signing time:             Mon 05 May 2025 10:00:32 +0000
Manifest this update:     Mon 05 May 2025 10:00:32 +0000
Manifest next update:     Tue 06 May 2025 10:00:32 +0000
Files and hashes:         1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: cgYw2YZG/SFTFtFhhew+IjF17FkcODMOeJbHCD6FUh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e3:da:90:94:aa:61:bd:21:80:b6:f5:52:cb:70:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
        Validity
            Not Before: May  5 10:00:32 2025 GMT
            Not After : May  6 10:00:32 2025 GMT
        Subject: CN=1e3d2a800875c27b7d29e2634db44acab5910f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:33:f3:d0:81:27:1f:6c:4c:48:e4:78:67:
                    70:0f:0c:ac:cd:0d:9e:f4:49:5b:70:06:25:34:3d:
                    b5:f6:ae:a1:4e:91:49:de:e4:8e:32:5f:fc:a0:d4:
                    fb:99:51:ed:59:7f:11:72:52:ac:c1:40:d7:15:99:
                    e8:3d:b2:49:cf:ba:a7:62:ca:42:b6:43:92:cc:08:
                    24:e5:b1:01:c0:19:a0:15:fc:01:4d:47:28:a6:7e:
                    1f:49:91:6e:d5:8d:91:0d:9c:7e:1c:62:60:b6:a3:
                    65:d9:95:6c:30:4b:c3:f9:d9:8d:ba:79:02:06:2d:
                    b6:54:ea:db:c2:f8:69:b8:35:7b:cd:24:3a:6d:9e:
                    8b:5a:28:9f:a0:b8:bd:85:d6:57:54:30:bf:7b:1c:
                    27:9b:22:3b:04:15:23:76:ec:a1:c5:01:63:5b:03:
                    00:cb:8f:ea:52:b8:c1:a4:fe:9f:49:6c:4c:f8:d3:
                    b4:15:c4:91:29:03:2e:e0:c3:68:f2:ed:17:43:3c:
                    d9:44:02:7a:a0:96:40:92:2f:d6:1f:74:49:57:8b:
                    7e:a4:f4:58:15:96:dc:b3:20:d8:b3:1c:3e:43:d7:
                    72:76:f3:bb:35:85:ea:53:36:07:dd:86:cc:aa:63:
                    86:6c:40:1b:a4:3f:b1:08:75:a3:8d:bc:8b:8e:5d:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3D:2A:80:08:75:C2:7B:7D:29:E2:63:4D:B4:4A:CA:B5:91:0F:98
            X509v3 Authority Key Identifier:
                keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:f2:1e:ae:61:16:1b:de:ab:29:c0:cb:7d:42:8c:c4:99:
         04:7e:ff:16:6b:03:a2:5b:05:5d:05:16:63:57:91:27:b0:76:
         77:af:01:9a:e5:8c:07:44:7a:1a:c7:e2:b0:ea:ae:d8:5b:bd:
         65:3e:94:f9:c1:92:f8:2c:df:3a:52:77:17:57:eb:a3:b5:75:
         1c:db:ac:6f:c2:17:94:92:15:60:58:62:4f:37:66:09:4b:da:
         32:13:29:5e:71:3e:88:f1:51:70:96:95:b0:3c:d5:93:e5:47:
         bf:34:52:89:7f:ea:d5:32:43:e6:b1:e6:35:f5:9f:61:e1:fb:
         2e:c6:76:d7:fe:b7:fa:8a:43:1c:39:af:c1:34:5d:eb:64:9a:
         b3:6a:e6:fe:75:bc:ba:2f:f3:86:c4:2b:08:38:aa:81:ab:f1:
         74:48:9d:32:57:d1:fd:00:01:6c:13:34:4d:b2:d6:00:6d:a4:
         48:1e:11:21:95:b8:09:11:ed:3a:5e:2d:0c:74:14:5f:f6:7d:
         e4:31:bb:ef:0c:c3:c7:8e:4c:55:43:c6:49:43:00:9c:0c:20:
         ea:5f:c8:ce:61:b1:6d:d3:f7:50:a9:98:e9:2f:81:1d:3f:58:
         e8:65:ae:9b:ce:c5:1a:3d:67:3c:74:e4:24:d6:df:fe:a6:f3:
         e6:59:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:32:03 2025 by rpki-client