Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
File:                     Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft (raw, json)
Hash identifier:          cTClhQnO4G6CzTh5GV6FcvIsdDu5mhWgXMH7wltedLs=
Subject key identifier:   68:DC:9B:7B:80:6A:29:94:AB:96:F6:5A:57:69:30:C6:80:27:61:A9
Authority key identifier: 63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1
Certificate issuer:       /CN=63444210ea08ac529878d51917e3b30054d620d1
Certificate serial:       01976A05F6AAFD41FC3F28748EBCA203896D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
Manifest number:          081F
Signing time:             Fri 13 Jun 2025 16:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:05 +0000
Files and hashes:         1: Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl (hash: GDf830wE8OJ+aL1mTFmUayFP4o75Ief87MUTJeufDwQ=)
                          2: empt_DtsxXPAB8Pr68RMQjz57Hk.roa (hash: NP64KpVgnNbjP2xtIMghVQIieRDbN+Hw1J+jKW8Qdjw=)
                          3: lvyZzZ0oMePyMWlwy0XrO4z88uM.roa (hash: r4CIZVZVu9rJJBGcwlDp7IO/A6q0RdzdbEDYw+nKWDQ=)
                          4: s0n0nYu0NFOR7dPUCU7pEE3i9us.roa (hash: ljcKz24WN/R72QGD8KYnZ5Vd3hVV7DCVfn4eDdOXbTY=)
                          5: zxiStXGp24ax3PMaP2c669J9olI.roa (hash: Eoknss9yO3HZnM5fYU8DdmO/fqGjXaMOZMcIug7gXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:f6:aa:fd:41:fc:3f:28:74:8e:bc:a2:03:89:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63444210ea08ac529878d51917e3b30054d620d1
        Validity
            Not Before: Jun 13 16:01:05 2025 GMT
            Not After : Jun 14 16:01:05 2025 GMT
        Subject: CN=68dc9b7b806a2994ab96f65a576930c6802761a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:cb:6e:50:7a:37:a8:d5:96:2b:53:a4:77:
                    1e:5e:b6:d0:83:ae:38:31:7b:b2:8c:04:d5:b0:a7:
                    89:3d:fc:11:66:5b:55:f5:1f:17:b9:e7:94:81:ac:
                    4b:f4:da:c6:5c:78:40:ba:42:66:32:94:a3:e6:e5:
                    c0:e3:e6:c6:cf:06:3e:d8:c2:87:f0:33:7a:88:c7:
                    86:4c:b2:49:df:0a:07:65:45:93:af:db:68:20:f3:
                    57:ff:2c:a0:9e:63:5b:59:a3:f2:b2:89:50:34:2e:
                    fe:27:b0:0c:0d:3f:53:3f:f4:be:95:84:95:f6:0e:
                    98:c8:5a:69:8c:b4:9d:9e:0f:8f:4c:25:74:21:8c:
                    21:ed:b5:7b:dd:2b:1f:e2:11:0c:02:ea:45:40:07:
                    04:39:43:4a:38:88:dd:d3:b1:4b:52:b6:e7:b6:7a:
                    de:12:23:fd:53:88:ad:86:f4:ae:2d:c6:c2:d6:f8:
                    ac:f8:a3:9f:ea:2d:d2:5b:7e:8c:97:65:57:27:b8:
                    ad:9e:d0:f9:5f:45:2d:43:89:eb:e5:83:bb:02:0c:
                    75:27:73:e0:89:2d:79:b9:97:12:2b:dc:04:99:97:
                    7e:28:f5:d1:df:4a:85:b8:f1:8d:cc:98:eb:40:4c:
                    7f:34:1c:89:e5:19:36:00:a7:6e:ed:4c:a4:6c:8f:
                    0b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DC:9B:7B:80:6A:29:94:AB:96:F6:5A:57:69:30:C6:80:27:61:A9
            X509v3 Authority Key Identifier:
                keyid:63:44:42:10:EA:08:AC:52:98:78:D5:19:17:E3:B3:00:54:D6:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0RCEOoIrFKYeNUZF-OzAFTWINE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/edea6e-66cc-4fb1-a454-fe837f98e026/1/Y0RCEOoIrFKYeNUZF-OzAFTWINE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:79:f4:6c:05:9e:ae:32:10:fe:c1:2f:31:ed:23:bc:75:
         a4:d6:17:46:cc:e2:af:7c:4b:95:1a:c8:a9:41:bc:e4:6b:da:
         f7:41:f1:01:b5:e6:86:f5:1a:9e:3b:e9:f1:f6:51:9c:4e:8e:
         8f:69:d5:82:0e:99:e6:87:d2:d0:9c:36:d4:75:cd:e4:72:c6:
         71:8c:60:1a:30:f1:72:d7:f7:6b:5e:c4:8d:e1:e2:a0:78:65:
         25:fb:6a:12:15:65:ee:ba:39:ea:eb:46:cd:de:52:a0:8f:4f:
         45:bb:11:10:45:06:3b:ef:48:9d:0c:5b:da:a5:52:c7:a0:2a:
         dc:26:a1:38:7e:c5:76:38:e9:41:eb:c0:db:c4:8c:6b:ad:b4:
         db:43:74:0f:79:fc:27:cb:7b:f6:a8:66:85:e7:54:2e:09:fb:
         07:28:b0:79:00:1e:9b:3f:b4:bc:8a:49:65:99:51:e5:f1:85:
         78:38:3e:41:3f:98:c8:c3:30:3b:4a:7b:7e:64:78:77:d3:4f:
         d4:59:20:29:c3:6b:06:f6:b2:52:7a:76:99:8b:d6:31:46:40:
         51:e7:3c:da:34:5a:3d:a6:86:9a:70:a2:8e:8f:a8:59:a2:b9:
         41:9c:f6:08:d5:ec:10:cd:6c:10:85:81:ed:ad:e3:b2:9c:db:
         e2:b4:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:17 2025 by rpki-client