Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          ZLVDfWfwF/B1EZ19WKCKxNcvfci9nwP+n8A/9llocKU=
Subject key identifier:   31:91:B3:C3:B9:D3:1B:22:0D:D5:D0:7B:D7:C5:D5:D0:0F:A1:6F:F3
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019769299B144679C596237E3E786A2FA814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          146F
Signing time:             Fri 13 Jun 2025 12:00:23 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:23 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:23 +0000
Files and hashes:         1: BZgRuxw6XN5JK6FOhunyeY0a9Fc.roa (hash: yKRC8CuGjayGobPtwmCDX6ktnCZk3RWj3tDYbdA547A=)
                          2: KidBmSJQC90WWlzzX6-raLlPkBk.roa (hash: UjIj4BCKN2Yzl+7rl6tYpEx3eAYndxpux9jsq4JXQKM=)
                          3: Y33-idsN2IrHbXJmRfchF8SWRjM.roa (hash: Qhp5Guy5ylBt3xJaF8ORUseIHpCiXnCFbO+p2dIHmtY=)
                          4: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: 71wvqIRV9bVbpLO/odBc8f7nZZ+79yt14TqtdH2iv+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:9b:14:46:79:c5:96:23:7e:3e:78:6a:2f:a8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Jun 13 12:00:23 2025 GMT
            Not After : Jun 14 12:00:23 2025 GMT
        Subject: CN=3191b3c3b9d31b220dd5d07bd7c5d5d00fa16ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:41:72:ac:1b:a3:08:93:d9:8e:b5:70:87:
                    e3:91:4f:8a:b3:29:a4:b5:33:a4:98:d5:98:c5:da:
                    ed:80:63:d3:59:ae:04:f0:39:00:1d:8a:18:80:6e:
                    cc:85:72:13:c1:49:ab:f6:a3:93:0f:51:0a:50:ee:
                    5b:18:71:43:e3:a2:b8:ea:00:82:0e:c8:e5:f5:4d:
                    de:03:fb:83:bb:19:23:6a:a3:50:a6:42:6b:25:2c:
                    6e:5b:66:eb:b9:d6:84:1a:1f:c6:e6:b8:fd:30:e7:
                    df:6f:23:f1:c3:f4:6f:16:3f:49:af:53:33:75:7f:
                    d3:06:36:09:0d:3c:7a:8b:3b:1e:c6:37:32:8d:3c:
                    f8:aa:1a:c7:d2:59:a4:7d:2e:c0:62:16:3c:a4:c1:
                    2d:35:1d:74:b7:9f:6d:da:9d:f3:3c:21:1b:31:ad:
                    69:da:41:88:d6:d8:12:e2:f5:ee:b6:ee:27:a1:99:
                    a8:2c:e0:ae:f9:56:ad:cf:9b:18:8c:6d:b7:42:d8:
                    d1:ab:50:6b:9c:11:15:8f:ab:0e:98:16:42:1a:0e:
                    17:b5:4a:a5:10:d1:6f:b7:7f:a3:f9:9e:79:47:03:
                    44:d9:cd:52:ca:77:b0:19:45:10:fa:6f:b6:d1:65:
                    08:9e:cd:6a:23:b8:96:9c:4b:3c:76:b2:17:88:24:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:B3:C3:B9:D3:1B:22:0D:D5:D0:7B:D7:C5:D5:D0:0F:A1:6F:F3
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:04:45:8e:35:a0:06:7d:cc:a6:10:63:5e:bc:fc:f1:ef:28:
         33:be:16:46:50:3c:cd:b6:44:42:06:4c:6b:35:73:82:45:8d:
         c9:2b:3b:59:0c:a4:a3:8e:e6:e1:cb:8b:07:11:ba:d5:c7:be:
         fd:80:24:ad:15:a6:e1:9d:ef:85:09:35:7d:75:3c:8e:88:e7:
         21:47:c2:bd:c3:7f:6f:c6:e1:81:5e:5e:8b:76:36:99:85:94:
         78:03:ea:00:c0:30:58:b1:86:fc:a3:53:36:32:c3:a6:f1:5b:
         53:33:c7:94:de:18:9c:e2:67:dd:ec:09:b3:7e:fc:79:f2:23:
         88:b9:c4:93:50:21:2c:77:22:ca:03:71:fb:06:4b:69:bd:a0:
         ee:61:88:94:80:b0:99:33:e1:0c:3a:24:fb:99:f5:8d:05:08:
         e3:51:b0:49:1f:76:3a:1d:ab:1d:b4:8a:7b:be:05:03:84:9e:
         8c:dc:52:f3:d0:0f:07:c1:31:c8:97:68:e6:6d:40:79:6f:27:
         d2:0d:e9:7b:5b:a3:62:95:16:aa:48:4c:c5:8d:89:4f:c8:4a:
         a4:33:d6:c4:b7:32:59:fa:57:6a:31:ed:f6:d5:76:8e:40:fa:
         01:71:69:64:6b:d9:20:c1:3e:00:31:f0:4b:3a:e9:93:5d:4f:
         ca:c7:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:11 2025 by rpki-client