Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
File:                     Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft (raw, json)
Hash identifier:          22HQLaymeJKd9lTL59gaG4w6wbEtLNjxpr9mxHGUSoo=
Subject key identifier:   30:06:B9:23:21:20:27:91:8D:48:01:BF:9F:4B:6A:1A:92:25:54:E2
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Certificate issuer:       /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial:       019770754F4D86DA0799775BCC16636B3223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 22:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:25 +0000
Files and hashes:         1: VLWbnm4HFdzuXT54nAW-KLk6RNc.roa (hash: P5V8CUnu9bD0Jv0MPakwPFOEnZtARng4CsZzmamsq/o=)
                          2: Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl (hash: gflgdijGwkdEj0utW5FgqNSfE9b23dmJFcTd1R/L6r4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:4f:4d:86:da:07:99:77:5b:cc:16:63:6b:32:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
        Validity
            Not Before: Jun 14 22:00:25 2025 GMT
            Not After : Jun 15 22:00:25 2025 GMT
        Subject: CN=3006b923212027918d4801bf9f4b6a1a922554e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:fb:08:c0:41:67:ae:bc:f8:71:af:24:a7:
                    65:c5:66:28:ad:6c:63:df:68:37:20:a6:48:c9:5c:
                    b7:71:f5:1e:c7:de:e7:0a:d5:dd:52:9a:ca:18:15:
                    72:58:42:e4:12:f3:7f:d1:53:7f:ce:c7:ac:9a:a9:
                    7e:88:82:cf:11:4b:be:1f:d4:87:84:08:51:27:bc:
                    25:03:59:0e:4d:58:7b:dd:95:fb:dd:e3:6a:2a:6e:
                    04:cd:50:17:ba:c4:2c:7d:f1:ab:18:e9:fb:23:84:
                    b7:e2:26:9c:08:a5:6b:fb:50:ad:30:0e:2c:cb:ff:
                    d8:f5:fd:e3:63:ce:be:7d:06:2b:05:6a:88:99:b6:
                    1e:06:4b:f9:b7:8e:36:c7:9d:89:3f:c0:b6:6c:d6:
                    8b:39:4b:e8:6a:e7:02:95:27:7e:4b:bf:b7:b9:7e:
                    98:a3:aa:bd:92:23:1f:f3:a2:7b:2f:a7:c6:17:3c:
                    03:b0:fb:c8:0e:42:8f:3d:f6:45:67:43:79:03:42:
                    55:20:93:b0:8a:27:58:5f:16:9b:86:8d:90:aa:8c:
                    b4:6d:32:5d:80:87:ea:31:4f:64:46:99:a5:b8:40:
                    02:5c:39:28:85:74:f2:17:55:f6:1d:e9:59:e0:5e:
                    03:49:bd:80:7d:c6:14:dd:eb:02:53:09:ea:cb:e0:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:06:B9:23:21:20:27:91:8D:48:01:BF:9F:4B:6A:1A:92:25:54:E2
            X509v3 Authority Key Identifier:
                keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:cb:f6:b7:d9:7c:d7:20:26:74:a5:7e:e3:4a:2b:a1:ae:11:
         d0:2f:eb:49:92:12:1a:f0:a8:e0:d2:4b:15:28:33:eb:d8:98:
         10:6b:45:41:0a:9e:12:fd:22:1b:66:61:e4:28:f4:3f:8e:61:
         b4:b2:71:7d:bf:78:b8:21:d2:11:c7:d8:9f:15:7d:36:52:d5:
         07:4f:ce:d3:74:c8:17:5e:da:c8:f5:a0:2e:11:e8:18:9b:71:
         d4:9a:8b:f5:f6:d2:dd:ed:5b:20:de:b4:90:f1:38:8b:aa:fc:
         30:d4:72:8a:d7:4b:4c:1b:eb:2f:8c:c9:85:9d:2e:5a:ea:79:
         41:3a:30:91:dc:72:79:8e:9b:8c:12:eb:a6:ef:fe:a1:15:05:
         69:64:1c:e3:0d:47:6c:77:bf:97:0a:c1:5f:70:73:90:14:2c:
         fd:4d:f9:2a:0f:77:f9:4d:fa:27:6b:de:ed:52:cf:84:58:2e:
         88:3c:31:8a:d7:1a:b1:57:fc:65:46:c6:0d:22:e9:3d:16:80:
         6e:b1:b6:5b:75:7e:c6:6c:c0:65:b2:bc:ac:8e:ae:a1:e2:92:
         e3:47:e3:86:85:a8:ee:11:df:46:05:83:49:07:93:28:2f:68:
         b4:4f:06:6b:8c:7a:ec:c1:96:a5:95:d8:62:98:66:8f:cd:23:
         c6:e9:01:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:45 2025 by rpki-client