Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          nG4CSo5JsQcab+f4FmfeovyL5Y+VX9JrbRq6mJD+/aI=
Subject key identifier:   CF:86:60:25:BE:A6:C4:D6:E1:4C:06:B6:7F:46:81:10:AB:27:12:87
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       01976D06785F25D9DBC1ADA36E7828CA241C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          0979
Signing time:             Sat 14 Jun 2025 06:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:29 +0000
Files and hashes:         1: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: zdhdoz9zvd//GXlViNW/69llhQziGO/ebHlJgbZQok4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:78:5f:25:d9:db:c1:ad:a3:6e:78:28:ca:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: Jun 14 06:00:29 2025 GMT
            Not After : Jun 15 06:00:29 2025 GMT
        Subject: CN=cf866025bea6c4d6e14c06b67f468110ab271287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ab:62:4d:d8:98:50:1e:3d:e2:2d:e7:a3:21:
                    6a:84:90:02:23:43:17:16:d5:53:56:6d:cc:05:98:
                    b5:79:16:db:66:ce:0b:52:81:95:47:67:8a:36:d0:
                    da:34:c9:6d:d0:60:91:1f:61:15:f9:b8:f8:0a:a3:
                    98:4c:51:1f:cb:ba:66:fd:bd:a9:6a:79:bd:19:79:
                    df:97:3d:87:84:54:2c:54:da:40:f4:59:75:a4:17:
                    aa:ba:20:01:ba:4c:c0:a9:7c:12:30:28:43:28:c6:
                    5d:ea:45:75:e4:a0:dc:c2:46:a4:bf:61:4c:62:c9:
                    e2:e5:54:83:8c:3f:8c:fa:3a:57:37:ef:7f:2b:61:
                    6c:21:4e:a6:b2:2e:1d:d0:0e:28:7d:0e:a4:dd:b5:
                    e9:e4:9b:75:d7:89:d4:40:22:1a:b6:52:43:47:9c:
                    43:f6:5c:c6:72:2b:60:c8:bf:b0:25:5d:2c:14:ff:
                    a8:df:39:23:a7:2b:85:ef:85:1d:d3:dd:2c:ff:f2:
                    6c:42:fb:d0:33:c3:0b:a8:a5:7b:67:f3:f5:37:c2:
                    02:1b:95:9f:6a:ab:d1:1d:3c:ba:7a:83:5c:5b:24:
                    30:b9:9c:ba:b6:9e:4f:cd:c7:98:9b:2c:6c:6c:23:
                    cf:e2:77:dd:72:7a:98:5f:e8:8d:58:24:7a:ea:6c:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:86:60:25:BE:A6:C4:D6:E1:4C:06:B6:7F:46:81:10:AB:27:12:87
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:9c:d8:7c:2d:b2:dc:18:aa:6e:af:c7:be:b8:a8:d7:a3:
         57:d0:14:43:e0:52:bf:dc:16:ef:5a:fe:3c:97:d9:6b:55:5d:
         ea:23:de:44:19:98:37:ba:52:55:3e:75:bc:48:83:cd:ac:4d:
         27:4b:ec:42:43:66:d0:c3:cc:85:f8:f3:11:6c:d7:5d:b2:cf:
         63:e8:f1:c0:4c:03:85:a8:cc:eb:97:e9:75:2a:ea:c9:89:fe:
         cd:ea:39:5f:df:8d:f0:0e:7b:27:67:5b:9d:ab:e0:0d:10:7b:
         1c:30:14:b7:6c:a3:c9:20:ae:3f:a3:da:f5:4c:0e:1e:6b:44:
         5a:16:ff:27:90:5a:53:83:f3:7d:8b:d2:b9:0e:e4:b6:7a:49:
         4d:d3:e9:4c:bb:a0:fb:4e:a2:c6:05:1c:3b:7f:fe:20:cb:ef:
         38:e1:b2:83:be:d2:d2:e2:2a:76:eb:84:6c:f5:08:21:ac:c8:
         eb:3e:08:4d:c8:d6:6b:1e:60:b0:1d:11:75:f1:a3:c1:a9:0f:
         db:53:8d:b7:a4:c0:3b:77:08:66:6d:00:a5:57:69:95:5e:3a:
         2c:6c:7c:bc:b6:a8:2d:20:ba:69:b8:c6:67:71:a6:39:b8:a8:
         05:3f:e0:f9:c6:73:68:3e:1f:0c:43:a2:3c:4d:5c:7f:f8:33:
         93:a5:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:43 2025 by rpki-client