Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          HMCMa7QpZaH/B15l+/LxzNmSWtg1wI+PL3SMKJ92xp0=
Subject key identifier:   11:24:87:43:09:93:0E:98:03:0E:DF:65:1C:51:9B:44:C5:71:24:F0
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       01976F2C687539C18FE641A07438D31AEBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          09E9
Signing time:             Sat 14 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:10 +0000
Files and hashes:         1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
                          2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
                          3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: XzGDgLYtH0sHQNLi/6mqyskPy0JnaInujR/yb63XpHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:68:75:39:c1:8f:e6:41:a0:74:38:d3:1a:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jun 14 16:01:10 2025 GMT
            Not After : Jun 15 16:01:10 2025 GMT
        Subject: CN=1124874309930e98030edf651c519b44c57124f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:b6:94:4a:e2:67:8f:6a:8f:68:46:7e:6f:
                    bd:d4:95:63:f9:ae:8c:29:6d:d3:e0:b9:f5:35:33:
                    73:a0:f6:0a:23:80:b3:63:80:19:d0:0f:e7:5d:24:
                    43:47:6f:ad:06:9d:86:18:b3:c5:bf:06:d5:d4:96:
                    ec:d8:81:a0:10:29:a8:84:20:38:53:ec:c8:ab:0e:
                    52:b9:3f:3f:ea:8c:07:97:b7:7e:91:b4:56:db:3c:
                    84:3d:f8:3b:29:44:3d:2a:ba:42:b3:bb:2c:81:67:
                    72:e1:18:4c:55:c9:f3:a1:46:db:59:95:df:3c:81:
                    d7:c0:66:f4:b8:eb:be:6a:19:58:5e:3e:56:25:22:
                    44:4b:46:fa:b4:74:97:e9:23:1b:e8:92:27:84:3d:
                    19:ce:6f:0f:85:2c:93:06:d6:cd:1b:b4:cf:41:68:
                    0d:bd:87:29:8a:d5:3b:be:43:0b:fc:ca:35:db:85:
                    8c:cb:70:72:b2:a1:7e:8b:ef:78:ac:82:a7:de:70:
                    4f:4c:a0:fb:63:3d:ce:8e:6d:18:ce:a5:98:49:43:
                    63:ab:41:76:ec:1a:19:23:a2:20:b3:73:c4:aa:d9:
                    13:a9:83:80:13:a2:cf:59:98:07:99:7c:74:2b:c9:
                    34:aa:6b:ae:e6:72:a4:4e:de:c5:9c:94:3f:82:1b:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:87:43:09:93:0E:98:03:0E:DF:65:1C:51:9B:44:C5:71:24:F0
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:2f:ba:1b:95:60:d1:4d:d7:c5:e3:0e:d8:01:00:14:52:e7:
         76:8c:68:e5:d4:a8:68:68:c9:7e:eb:da:b2:8c:22:a3:84:5d:
         13:cb:a6:6c:4a:48:31:18:86:c3:95:f0:24:d2:a7:05:fd:74:
         7d:51:2d:72:0a:e8:69:52:9f:81:04:59:fd:29:2d:10:e0:50:
         6e:32:fa:e6:c9:ee:ed:da:f0:39:fe:7f:d2:d1:c5:e8:06:8d:
         f6:9a:28:53:c7:47:fb:02:31:c3:8f:06:bf:66:78:ae:a1:bd:
         de:cb:e6:a4:8d:ed:09:60:a0:84:be:f8:9f:e1:b5:d4:23:72:
         d9:42:51:45:75:d4:5e:1f:1f:7b:26:8e:10:14:ee:d0:9f:eb:
         78:c1:4b:7b:bf:6d:f9:21:96:c8:c6:a8:71:95:8e:93:d9:07:
         dc:d0:41:19:c4:36:c8:11:20:67:31:ea:ff:0b:ae:d1:f9:45:
         ea:71:88:b6:e1:f1:72:dc:0b:59:c5:64:a6:ba:0a:8a:bc:62:
         54:50:09:b3:f9:36:8c:d0:47:bf:34:4d:88:cf:df:50:a2:d8:
         c3:59:5c:bb:73:ef:90:0e:49:68:3f:ca:9e:04:ea:6e:96:af:
         83:55:2f:fd:b4:96:f0:f9:0b:0c:51:67:a7:2c:92:05:48:a8:
         bc:de:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:22 2025 by rpki-client