Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File:                     yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier:          5AYEoMWHe0jDbnvF+shyiOIKpd68PsoU3Vx9Cf9W6hw=
Subject key identifier:   D7:65:46:89:04:62:5E:08:EC:92:4F:C4:12:4D:BB:00:A5:BA:22:05
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer:       /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial:       01976F6309DB898FD9EF130A649100DCD01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number:          01BC
Signing time:             Sat 14 Jun 2025 17:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:50 +0000
Files and hashes:         1: kwdJRuJyM2sxA3nVQ3hN_-t4yAw.roa (hash: t72IL0Bu4xhSTiCzxaWI7CqqsPyLBuuMnaHiD42pbD4=)
                          2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: tR2Bzf2a49RTMPqQSwDNR0w2wKt+6bG3HHO3VBHwN/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:63:09:db:89:8f:d9:ef:13:0a:64:91:00:dc:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
        Validity
            Not Before: Jun 14 17:00:50 2025 GMT
            Not After : Jun 15 17:00:50 2025 GMT
        Subject: CN=d765468904625e08ec924fc4124dbb00a5ba2205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:8b:55:c8:15:dc:bf:9f:0d:1f:19:a6:46:
                    03:30:ce:e5:87:df:09:f9:88:1f:e1:8c:bc:7b:ca:
                    49:47:08:d3:af:44:43:65:8f:bb:50:3c:b1:47:fa:
                    f2:db:ea:0a:26:4f:04:eb:65:e0:9a:2e:f1:71:28:
                    8a:96:b1:12:f9:51:4c:ff:88:b8:4d:99:e5:22:08:
                    34:8b:68:47:79:76:e6:2a:41:2e:90:7c:fd:e7:85:
                    2b:ed:b6:0c:a9:30:65:93:43:7d:a2:77:24:7a:e6:
                    0e:4d:bc:d6:f0:d7:62:72:50:f5:a9:24:fb:1d:d4:
                    03:0a:5e:50:cb:4c:48:db:fa:f8:f1:05:af:0f:d3:
                    79:01:24:db:0d:8e:08:b6:f5:47:3e:3a:3b:83:8e:
                    3d:2e:55:ad:65:04:e4:b4:1c:10:b9:17:9f:20:47:
                    0d:e4:3c:06:11:b5:2b:b7:f9:80:fe:4d:58:e0:b2:
                    89:5a:a3:b9:2e:58:73:9c:d2:c7:c9:cb:15:0e:50:
                    f1:e7:8f:0c:72:18:d3:57:3e:fd:7d:ea:79:be:75:
                    1d:89:34:0a:cc:4c:e5:07:ab:12:31:bb:19:b0:0e:
                    30:50:58:16:db:78:b3:89:39:7e:65:56:43:e4:93:
                    8f:4e:ad:f9:ce:2e:30:bc:83:9f:70:6b:8f:aa:fb:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:46:89:04:62:5E:08:EC:92:4F:C4:12:4D:BB:00:A5:BA:22:05
            X509v3 Authority Key Identifier:
                keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d4:ed:b3:11:25:d5:a3:ae:63:6a:2f:f8:8d:6d:33:e5:4a:
         4e:43:af:fc:7d:80:f8:a5:41:32:00:2f:36:be:aa:17:40:35:
         e6:5c:87:70:ac:6d:b1:f8:ad:90:f0:e6:56:64:07:a8:40:94:
         70:9d:0a:9f:9b:56:a9:2b:ba:71:34:00:7b:42:6c:24:2a:93:
         97:06:c8:d8:ee:a7:d5:dc:c9:2a:3d:04:74:2f:50:e5:ae:4b:
         a8:45:5b:5c:49:ba:ac:a6:7f:71:d2:7a:c9:84:7c:c5:75:0e:
         1b:27:a5:7f:51:9c:6a:68:09:b2:b1:5c:c0:92:45:8d:0e:ed:
         bb:77:73:22:e0:d2:1d:86:a9:b4:f5:49:a7:d3:b1:fa:51:51:
         d5:9c:1f:5d:cf:c3:59:58:bd:41:3e:7a:30:1a:66:da:1b:9c:
         4d:8f:43:98:09:09:2f:d3:98:22:39:c3:db:a5:af:2c:88:ea:
         39:94:cf:a5:36:5c:17:39:7e:41:af:34:0f:d4:2b:42:96:f6:
         d3:c4:45:46:ff:0b:c3:58:ec:6b:b4:70:ed:6e:b0:fa:e6:7c:
         c3:46:9c:47:3b:c8:eb:e4:e7:35:f1:ac:5a:19:57:46:6b:cb:
         fd:61:52:85:29:fa:c4:38:5a:69:49:c6:b9:ba:5f:bf:f6:98:
         c9:65:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:50:04 2025 by rpki-client