Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File:                     ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier:          m60k/dCwuZtNA5ZrwMI0BCFqpckg3qZEmEWF0A1tPaM=
Subject key identifier:   26:83:CA:38:86:7E:82:5A:F3:45:67:4A:BB:5E:08:98:8E:FF:B0:26
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       0197B77CD1C7B042E3F69284312E4A5E24CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number:          125E
Signing time:             Sat 28 Jun 2025 17:01:39 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:39 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:39 +0000
Files and hashes:         1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: PYM6WSDwqKY3NxM7Wr9olckYsrZxb7peaXV7FwP3Bf8=)
                          2: zl8vYnMSKo50V7tHcL3U74d2LS4.roa (hash: cxI3XYqo0XKxXcEnFf9KagnCReAfMGFWl39LE0K//l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:d1:c7:b0:42:e3:f6:92:84:31:2e:4a:5e:24:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: Jun 28 17:01:39 2025 GMT
            Not After : Jun 29 17:01:39 2025 GMT
        Subject: CN=2683ca38867e825af345674abb5e08988effb026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:75:c2:82:1b:c6:e8:c8:99:dd:c8:bf:48:
                    d8:e8:d3:de:bd:b0:26:62:6c:a2:7e:ee:96:01:78:
                    6e:88:5f:cb:78:af:30:2f:76:92:d8:b6:b8:8a:99:
                    d4:f7:7a:a1:a2:6c:0c:a4:9f:0b:7a:0f:c8:09:7f:
                    62:04:0e:20:87:10:47:0b:f9:a7:47:a9:fc:a5:dc:
                    4c:f3:53:47:a0:14:21:24:92:51:3d:b7:d2:33:e6:
                    65:68:44:dd:b8:75:61:d7:8b:b3:31:0a:f4:6b:0e:
                    44:2d:9f:e1:46:4b:44:53:78:7a:e4:53:27:82:99:
                    a8:48:9e:6a:c7:7e:4f:d2:5f:f8:cb:b4:49:29:fb:
                    cb:7e:d0:e2:ff:43:dc:25:c7:43:4d:4c:33:63:40:
                    2d:9f:44:03:5c:bf:dc:b9:36:ad:14:b1:f4:97:43:
                    62:39:93:ea:2e:0c:c6:3a:05:54:89:cc:15:ed:a0:
                    ba:a7:44:1f:d6:cd:a4:5a:c1:fa:d8:3d:36:48:87:
                    14:5e:08:32:99:15:12:ba:45:6e:f7:c8:b3:94:0e:
                    8d:10:30:38:7f:03:24:b7:ef:b9:05:4d:ec:82:ad:
                    9f:f7:4a:13:f2:a2:f6:ee:4a:7c:07:5c:c8:c1:dd:
                    62:2a:b4:ea:0e:60:7d:70:10:fa:95:17:4f:97:bd:
                    c6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:83:CA:38:86:7E:82:5A:F3:45:67:4A:BB:5E:08:98:8E:FF:B0:26
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:a6:96:9e:10:0b:0c:20:36:f0:89:1f:3b:ac:3e:f8:28:
         cc:79:a1:d8:34:bb:7e:47:e2:88:4c:1a:de:fe:c3:bc:fd:c3:
         82:2f:d2:2a:d3:90:89:fb:55:6a:16:a1:18:a0:b6:fa:e3:f1:
         8e:9f:b3:86:39:68:cf:3c:12:7e:57:6c:12:f6:a6:8b:d0:33:
         53:79:62:ae:dd:55:1c:8b:a9:45:c1:15:a2:ad:f4:e3:44:b1:
         1d:e9:90:56:97:fe:86:23:71:b8:3c:6f:87:c9:70:a4:21:7c:
         07:6d:fa:26:a8:12:f4:a9:b1:a5:61:ae:62:6a:8e:24:78:bf:
         85:03:fb:57:dd:2f:e6:36:70:09:5d:75:22:4c:35:40:97:79:
         4b:d5:71:9c:c1:ff:e1:4c:32:fa:4c:6f:66:a9:90:c2:90:c0:
         75:4a:b3:8f:5c:9f:32:9a:d9:c5:a2:6a:b2:65:7f:91:48:8d:
         fc:38:56:44:c6:d8:6e:4e:c5:95:c0:54:66:24:81:19:dd:5b:
         fd:97:26:54:5c:0a:e9:f1:87:2e:87:3c:27:07:4c:2d:bc:05:
         39:e6:04:80:c6:24:dc:52:a5:2d:14:f0:ec:6d:39:f0:2d:0c:
         4d:f5:44:4d:1e:c2:e8:32:3f:12:29:86:ba:dd:1f:57:ec:82:
         35:b1:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:58 2025 by rpki-client