Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          I07tBCU7ZxhVPZAF1PnQqyRcovtjz2/4UtgMsbqPasQ=
Subject key identifier:   67:44:61:3A:8F:4F:01:59:CA:71:4E:CD:6A:F1:59:E6:EC:F0:99:98
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       0196BE5CD4E37FBAFF762A2ECA752F6A5CDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          0799
Signing time:             Sun 11 May 2025 08:01:16 +0000
Manifest this update:     Sun 11 May 2025 08:01:16 +0000
Manifest next update:     Mon 12 May 2025 08:01:16 +0000
Files and hashes:         1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=)
                          2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: +vCFBQPqnaZpRAbWbGgSIYf3TIdPx5Djfk6TEbGYUZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:d4:e3:7f:ba:ff:76:2a:2e:ca:75:2f:6a:5c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: May 11 08:01:16 2025 GMT
            Not After : May 12 08:01:16 2025 GMT
        Subject: CN=6744613a8f4f0159ca714ecd6af159e6ecf09998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:9a:a2:a1:18:c8:3e:ac:b3:ae:37:6e:e2:
                    ac:71:35:7d:84:ff:ee:8d:3b:c0:0f:56:fe:02:77:
                    45:8f:80:72:dc:a9:95:40:be:f0:58:59:2c:5e:a3:
                    ae:ce:2f:c2:97:d7:80:ae:ce:89:7c:98:c4:cc:f1:
                    03:f3:81:ee:eb:20:94:b3:38:e5:4d:e8:9d:d6:ec:
                    07:96:6a:ce:e5:aa:0d:31:2c:83:70:1a:ba:77:9c:
                    c7:be:1e:70:75:ae:38:43:10:24:b3:c8:62:32:84:
                    a4:c7:a3:2e:ea:2a:29:43:a9:34:59:b2:e4:24:29:
                    81:ab:45:1e:9b:85:08:1b:e2:5f:f3:a7:2b:ea:ea:
                    0f:2b:81:85:52:6c:06:67:93:67:3b:0a:07:25:bb:
                    07:87:bd:44:67:07:a5:8c:a9:91:dd:10:09:90:08:
                    60:e9:ae:4b:9d:d6:54:c3:37:7d:fd:96:ba:c4:58:
                    aa:ec:b2:49:7c:03:f8:86:02:81:a0:6f:8b:86:00:
                    6e:7c:d3:fd:e8:50:83:9f:2e:12:29:dd:be:68:eb:
                    16:ef:f6:b2:5c:04:92:46:1e:48:4b:e6:9a:a8:b2:
                    f2:58:a0:e1:ee:7b:a1:ae:db:d6:c4:20:33:ea:fb:
                    17:ae:7c:11:97:74:0f:68:c1:12:90:8b:bd:7e:d5:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:44:61:3A:8F:4F:01:59:CA:71:4E:CD:6A:F1:59:E6:EC:F0:99:98
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d1:60:0f:8e:26:c4:b2:2e:1c:a5:35:66:24:06:6b:5a:a2:
         b9:ef:7d:6d:41:6d:e4:44:7c:a5:f1:d3:c2:7a:ba:76:ee:06:
         40:bd:b8:09:7d:3c:a8:c6:e9:f3:2a:81:17:32:0f:a1:18:44:
         26:a7:52:2c:0e:b5:83:e5:31:69:95:f3:08:d4:bb:31:91:40:
         26:21:a8:4d:4e:63:7b:0e:3a:99:97:c5:eb:a6:6c:3b:c2:cf:
         ef:14:2b:cc:c0:b1:a6:6f:ae:31:1c:09:48:d6:6c:68:12:d1:
         b1:be:5b:7b:79:88:77:84:89:42:cb:e5:39:94:78:7e:e2:c1:
         44:62:c1:59:38:1b:1e:b1:33:31:42:3b:3d:b7:74:ef:2a:30:
         19:a8:ea:a0:b6:99:5a:aa:4f:5d:97:80:f2:d3:c0:42:46:4a:
         f6:40:08:1f:bd:d1:c8:bf:d9:8d:d5:f2:d0:81:37:7e:15:a1:
         bd:a4:76:b9:df:53:64:06:4d:c1:88:c9:b9:34:a8:1f:6b:e7:
         5b:7f:d1:99:46:96:27:94:38:f1:ec:37:9d:04:47:3c:cb:fa:
         61:30:ae:99:7d:5c:36:30:b7:20:05:79:cb:ee:49:37:cd:d8:
         20:9e:9f:bb:53:6a:1f:2d:1b:89:0e:06:3f:79:2c:b9:e3:66:
         3c:f8:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:35:24 2025 by rpki-client