Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File:                     yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier:          5W4kFYEp2w/ZaSC4Zahleeq/Jtoo/pNVXLtfCulNNW0=
Subject key identifier:   5D:8D:9B:E7:3F:25:E8:D8:D4:2A:14:B8:68:BE:2C:42:01:9D:6B:C6
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer:       /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial:       0196B77E0DE5AFC213A7F4F9F3874FEE86E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 00:00:13 +0000
Manifest this update:     Sat 10 May 2025 00:00:13 +0000
Manifest next update:     Sun 11 May 2025 00:00:13 +0000
Files and hashes:         1: HvvQQ4P4zfTIBBHttsccF48rodM.roa (hash: eIYcjO3+dzOi7TYY3sWHoKLhHWX9s3dv316lhoprHDg=)
                          2: lcnrXbBFBu5DHpybXSYL_QBSFxY.roa (hash: 55Re6AipYf4XWuugu2p6Yv9D+4CVj5GB9DhYUd+Co3s=)
                          3: xS0SlQmQEPSTI5X308pfcaxO2vE.roa (hash: wF4G59jbcX8C0L3Y4yTS+qPNuavU+1BMJghlyklDhUU=)
                          4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: Xw6an5VmxkT3fWnQiLlvS4ePS91Kku6qHA9WD3FWGpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:7e:0d:e5:af:c2:13:a7:f4:f9:f3:87:4f:ee:86:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
        Validity
            Not Before: May 10 00:00:13 2025 GMT
            Not After : May 11 00:00:13 2025 GMT
        Subject: CN=5d8d9be73f25e8d8d42a14b868be2c42019d6bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:86:c4:35:86:c4:8d:68:f8:1b:62:b4:7e:c7:
                    44:a5:f5:e6:49:86:8c:74:78:e9:9b:8e:2a:90:0d:
                    db:e7:25:af:eb:fe:e2:ed:92:71:64:47:b9:c9:eb:
                    eb:bc:4f:5a:ce:6b:d5:e7:7c:cc:25:c9:48:b8:7a:
                    ea:00:6d:bf:e2:1b:88:21:d8:9e:3d:e0:26:a7:c0:
                    00:58:60:71:b2:02:cc:05:e0:09:58:2a:1a:8c:c2:
                    20:ed:43:b6:1e:55:91:c7:d5:ba:cd:a4:a5:ff:37:
                    d8:0a:42:c9:d9:13:5d:0f:9b:41:ff:92:db:3b:98:
                    65:19:a9:98:8d:bc:f1:47:3e:bc:d9:39:97:b6:d9:
                    5b:82:1e:2b:12:14:b8:59:68:7c:93:53:f6:b2:a3:
                    74:93:d6:28:45:6e:cc:7c:03:7e:23:5f:7e:b6:6b:
                    0e:23:9c:2d:3a:ce:e2:25:58:bf:fa:c6:75:55:5a:
                    9f:18:5a:ce:c9:6f:99:4b:d5:d8:a3:76:33:88:05:
                    d0:f0:c1:66:1c:d3:c9:35:f1:ed:5d:09:50:ee:bd:
                    4a:60:14:8f:a5:83:74:ad:f6:71:3f:10:23:df:60:
                    e0:5b:fb:ef:9a:da:8b:5e:a2:05:51:4a:a5:6e:cf:
                    85:aa:41:99:78:b0:7f:69:e5:aa:2f:34:4b:eb:b8:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:9B:E7:3F:25:E8:D8:D4:2A:14:B8:68:BE:2C:42:01:9D:6B:C6
            X509v3 Authority Key Identifier:
                keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:c4:08:c5:30:7b:63:96:a7:59:32:8a:2c:89:36:be:79:
         e2:a3:2b:27:eb:83:9a:35:38:19:d2:cd:99:26:d2:c0:42:c8:
         66:49:91:cf:bf:91:a5:08:92:fe:fa:02:9e:3d:e2:ba:de:1b:
         5c:69:94:62:be:8e:d6:26:c6:31:eb:40:20:81:10:6e:40:27:
         04:df:7a:af:2c:b7:14:ae:4c:49:82:64:9e:68:7d:06:c1:46:
         2a:01:21:39:5f:39:f4:f4:65:9b:8a:5d:ea:97:9e:97:af:1a:
         45:68:62:e9:2b:de:e2:05:b6:05:e2:2f:6a:b5:db:20:32:24:
         0b:f1:11:42:ea:1d:b7:68:1e:7a:cf:c4:db:f9:89:de:58:cd:
         56:a3:f9:70:e5:39:6b:83:5a:0c:c0:b4:aa:f3:67:e4:d4:18:
         f2:cb:37:29:9a:e0:e1:90:57:0f:3b:56:9f:68:bc:50:dd:c3:
         1b:99:5d:16:80:92:02:1b:f0:e6:97:c3:49:99:9a:33:e3:1e:
         4d:60:1d:37:b6:21:84:81:36:b9:a7:9d:c4:8e:6c:31:3d:e6:
         8e:28:96:68:9c:e3:35:08:67:e7:00:bb:70:66:06:9e:db:a2:
         cd:34:a1:ac:ad:62:fb:d1:2c:b5:63:c2:dc:80:86:6c:a7:be:
         a3:20:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:05:55 2025 by rpki-client