Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File:                     YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier:          Gwd7aqOI9CUU9hi/SA5D5C1kVlZD76kcljBhuDehFN8=
Subject key identifier:   CC:80:CF:20:7A:D5:0F:8B:98:92:77:FE:BA:56:6C:01:A9:55:06:93
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer:       /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial:       0196753049B2180F735EAD8AE0CFAA7D7FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number:          150E
Signing time:             Sun 27 Apr 2025 03:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:20 +0000
Files and hashes:         1: AdTC8zOa60ytbUnvyWrYbz5T-Bk.roa (hash: 6Kj79eLeBWoibWni/+p7vdKVc5LjnECRVHDoIBU87h8=)
                          2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: LAL+gF+ojsThKTwTv0ZfMqJQcQs4uPZ16zOFiN2NM0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:49:b2:18:0f:73:5e:ad:8a:e0:cf:aa:7d:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
        Validity
            Not Before: Apr 27 03:00:20 2025 GMT
            Not After : Apr 28 03:00:20 2025 GMT
        Subject: CN=cc80cf207ad50f8b989277feba566c01a9550693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:dd:47:50:04:47:d8:de:4f:c8:86:83:db:
                    03:c1:f5:f3:31:e7:b1:02:d9:b8:44:12:73:b7:19:
                    20:c7:5b:da:17:af:b7:5e:ad:fe:a6:1d:17:62:2e:
                    4d:43:f3:6f:04:f1:05:3a:30:57:a4:c4:54:6c:3b:
                    c0:fd:48:5a:de:91:47:e0:6d:96:d8:68:96:ea:50:
                    d6:9b:e2:b3:88:57:67:54:9c:68:8f:78:52:39:0f:
                    1c:cc:47:3d:e6:5f:c6:67:32:fb:55:a6:e5:80:76:
                    4a:94:bb:32:0c:55:f8:51:1b:76:c8:e6:50:1d:e0:
                    2e:13:4a:15:56:ce:43:41:9f:0a:34:9e:66:46:79:
                    26:dc:cc:97:71:de:ee:9b:c5:df:cc:3c:47:84:0c:
                    0c:f3:eb:9b:94:90:11:87:5c:ca:9b:3f:b1:16:df:
                    d8:63:aa:76:57:bd:6f:09:fa:28:12:49:6a:fc:62:
                    66:0c:da:36:e7:92:43:76:5c:15:b6:ad:ce:62:78:
                    73:bb:a2:0f:39:2e:66:eb:ec:c6:7c:12:de:bd:6c:
                    fc:c0:d0:af:67:bb:dd:bb:bf:c5:97:87:8c:ca:5f:
                    41:d8:8d:f6:da:41:56:49:d2:cf:d3:94:51:5c:90:
                    db:27:14:3a:e8:c9:f7:9d:0a:7d:16:4b:2d:50:67:
                    d3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:80:CF:20:7A:D5:0F:8B:98:92:77:FE:BA:56:6C:01:A9:55:06:93
            X509v3 Authority Key Identifier:
                keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:db:11:ba:e4:8e:43:0f:ae:75:cd:10:89:98:cf:be:d3:31:
         ef:18:62:6f:47:c3:a5:8f:7b:26:4d:ae:e4:e3:97:a0:04:01:
         49:f4:fc:bd:69:70:1b:83:3e:a3:43:e1:3d:27:67:10:18:5e:
         64:1a:ce:da:c6:12:7a:35:ee:98:eb:1d:bb:a0:b1:ea:cc:7d:
         05:aa:ab:d1:ed:a1:37:ad:f4:63:53:dc:3b:bb:5e:ab:90:b0:
         39:51:c7:99:82:55:b0:c5:78:f6:81:1c:b9:5c:4e:77:25:31:
         63:eb:13:3b:c9:9a:f0:1e:3b:c9:fa:f3:c3:b1:ad:cb:ac:ca:
         82:c4:c1:e8:49:0b:21:4f:70:4a:f9:d4:ef:5a:b7:01:6c:a3:
         e9:99:d6:28:20:15:e4:9c:53:03:25:de:44:37:d0:4d:ec:9d:
         7f:c4:63:6a:2a:15:53:b7:67:3c:4a:9e:36:9e:21:58:f3:09:
         1d:f7:c3:5d:49:a8:d3:36:fa:cb:af:b0:f9:5b:cf:72:ea:10:
         74:7a:63:36:02:5d:64:15:48:40:35:c7:bc:60:44:7d:9c:98:
         ad:25:97:0b:11:b8:81:25:ad:80:92:0c:c8:1f:d4:03:ac:97:
         65:5f:4a:21:5f:c1:d0:a4:8f:b7:14:7d:fd:e4:16:93:a4:8f:
         89:94:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:58 2025 by rpki-client