Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File:                     y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier:          uY+ESxikIvErfnR1djoV58JyGDusOAx8P2m+9U/YcWo=
Subject key identifier:   81:7A:F7:25:87:3C:9D:20:76:45:FD:07:53:CA:16:38:F0:63:27:F0
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer:       /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial:       01977075860E4E59E5E3695D4FEA24860443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number:          05DF
Signing time:             Sat 14 Jun 2025 22:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:39 +0000
Files and hashes:         1: GP-mcsPVfkxFR6BakAdLWMHzvnk.roa (hash: 46Gy5AnSQQR4RzlnLScg9/HmedHrQU8V47NDaOoaI7E=)
                          2: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: P/8FAAS7H2P7mjjDKdE5t4bRpGeV0Je+1bvIH744QeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:86:0e:4e:59:e5:e3:69:5d:4f:ea:24:86:04:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
        Validity
            Not Before: Jun 14 22:00:39 2025 GMT
            Not After : Jun 15 22:00:39 2025 GMT
        Subject: CN=817af725873c9d207645fd0753ca1638f06327f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:82:0a:46:d2:8b:11:f8:85:08:da:fd:0d:
                    66:2f:d7:43:84:96:08:b5:f0:e4:e4:c3:ba:59:1c:
                    1a:d7:d5:4d:03:3b:b0:5d:62:2b:8f:87:83:47:00:
                    82:e3:da:52:9b:d0:61:0a:38:3a:89:c9:16:24:07:
                    aa:23:b8:87:fb:19:19:8a:62:8f:45:23:b9:46:4b:
                    ce:8c:0e:4a:7f:b7:5b:cc:51:5f:eb:e1:f9:bc:f9:
                    cd:37:56:c4:ec:4a:15:fb:c0:3a:eb:e9:be:93:54:
                    e6:c2:6a:93:36:99:56:f9:15:ce:57:d7:4d:96:19:
                    49:00:8b:82:65:20:16:52:58:77:99:28:0f:f8:01:
                    a4:e1:08:50:ab:a0:ef:69:c6:3d:c0:fe:a7:a1:06:
                    3e:87:e0:47:5b:17:be:9f:94:2d:97:0a:49:59:83:
                    ba:6d:05:9e:34:81:0e:af:cc:21:66:dc:fb:bf:10:
                    7c:37:1e:1b:a9:16:09:37:b3:d1:98:c3:84:ec:73:
                    8e:40:48:98:44:0a:ca:99:8a:f9:2b:ba:83:c7:10:
                    57:b3:6b:48:22:1b:60:8d:c0:7d:9f:29:6c:ba:25:
                    f9:92:f2:27:cd:37:c6:43:aa:a0:99:c5:fe:a8:d6:
                    06:ec:ba:79:cd:19:b9:c9:32:8e:fc:03:35:6a:5b:
                    86:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7A:F7:25:87:3C:9D:20:76:45:FD:07:53:CA:16:38:F0:63:27:F0
            X509v3 Authority Key Identifier:
                keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:d6:f0:dc:4c:f2:2c:38:6b:5d:06:d7:88:42:07:25:35:
         06:f3:cc:53:35:c2:b0:41:29:81:d7:be:f1:0e:f5:46:1c:b2:
         9e:c5:20:3d:d2:50:b7:ee:39:db:4a:43:2f:82:02:c9:ec:56:
         00:5e:b6:f3:55:83:69:ff:24:06:27:cb:77:0f:8c:c7:aa:09:
         c3:e6:c6:58:01:36:48:f6:20:41:42:95:cd:a2:b8:c5:84:88:
         b5:77:0a:e5:48:09:5d:57:8a:26:40:83:17:c9:c2:f5:8c:2e:
         ea:09:49:f5:c0:b4:8e:7f:ee:58:60:0f:2e:ed:a3:16:cc:5e:
         aa:f2:7b:ac:ee:a8:60:42:f8:07:9f:5a:e8:40:98:de:31:39:
         60:5f:b6:a5:0d:47:ac:60:bd:bd:3d:41:49:f7:9d:e4:54:6a:
         b1:65:4c:a5:2d:b8:6b:91:31:e2:32:26:b3:00:e1:7b:11:1b:
         01:93:0c:b1:c1:63:a8:16:68:b4:c1:1f:fa:18:09:d1:7b:40:
         05:e6:5b:29:83:c2:0c:1a:73:62:45:a9:ed:5f:6e:06:88:ac:
         b9:2a:1e:36:da:d9:13:0a:79:4a:b4:fd:f9:4d:8c:f5:5e:10:
         22:0c:fa:12:4e:f8:26:05:09:d3:6e:6b:40:75:bf:fe:56:9f:
         c8:15:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:30:34 2025 by rpki-client