Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
File:                     Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft (raw, json)
Hash identifier:          Hpo9+PJqIPiCW/3yWtn7xiOdQUf13L73VpvCpU/14Pk=
Subject key identifier:   13:A6:AE:32:04:25:34:DE:C9:38:42:78:E0:AA:BA:0C:F9:32:88:91
Authority key identifier: 63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF
Certificate issuer:       /CN=63ef6bdbc42ad06defdad72679414346d8d048df
Certificate serial:       01978432FAFCFF063ABA548A4E4084D0EB3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
Manifest number:          1596
Signing time:             Wed 18 Jun 2025 18:00:22 +0000
Manifest this update:     Wed 18 Jun 2025 18:00:22 +0000
Manifest next update:     Thu 19 Jun 2025 18:00:22 +0000
Files and hashes:         1: Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl (hash: ktmtrymUNIS9Dh3k70erdnA9dnP5PEPax17fg9reAfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:32:fa:fc:ff:06:3a:ba:54:8a:4e:40:84:d0:eb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6bdbc42ad06defdad72679414346d8d048df
        Validity
            Not Before: Jun 18 18:00:22 2025 GMT
            Not After : Jun 19 18:00:22 2025 GMT
        Subject: CN=13a6ae32042534dec9384278e0aaba0cf9328891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:86:d1:52:ea:d7:83:f5:52:86:38:d4:1e:
                    59:fc:07:06:7b:d3:37:8b:1d:6a:db:d8:90:79:13:
                    0e:5e:bc:3a:bf:32:09:38:1f:ba:15:22:c9:5d:e7:
                    43:34:29:fd:17:68:63:62:ad:53:36:32:9a:ad:cf:
                    78:7b:84:e4:d8:ce:92:5b:97:60:d4:86:78:0e:74:
                    ad:f3:02:23:2c:c8:36:02:7a:fc:38:d7:7b:cc:1a:
                    a1:14:c1:00:17:3a:f6:1c:c8:50:95:92:54:f1:bf:
                    67:50:8a:98:59:89:4a:e5:95:71:38:bf:47:d3:80:
                    2a:2b:af:94:99:78:da:c0:32:2b:d4:fc:bf:7c:4e:
                    2b:da:b2:1a:70:4b:be:c7:ac:a3:0d:9f:a2:fd:ef:
                    c8:1d:e6:5b:89:d0:08:65:83:0b:6b:69:16:11:80:
                    d8:f5:bb:b2:56:8d:e2:60:1d:00:4c:a9:44:e0:a0:
                    04:be:db:5d:9d:f7:3a:f4:91:33:f5:97:cf:eb:19:
                    3c:92:6e:aa:8a:ae:8b:07:f7:96:19:3b:4e:40:36:
                    39:53:9b:f2:06:f0:b3:05:8e:35:0c:79:57:d9:58:
                    da:92:48:d4:96:50:84:72:51:7e:39:57:57:fd:e3:
                    67:23:76:39:e8:25:55:a6:1b:90:89:c9:3a:b0:47:
                    6e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:AE:32:04:25:34:DE:C9:38:42:78:E0:AA:BA:0C:F9:32:88:91
            X509v3 Authority Key Identifier:
                keyid:63:EF:6B:DB:C4:2A:D0:6D:EF:DA:D7:26:79:41:43:46:D8:D0:48:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5ab512-9606-42dc-9eb5-0c8368db9563/1/Y-9r28Qq0G3v2tcmeUFDRtjQSN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:23:e5:04:d6:00:cc:8c:90:c6:8f:34:a7:90:e7:6c:6a:
         f2:93:c4:aa:b7:5b:0b:e3:23:b2:eb:bf:bf:d1:f1:2c:42:54:
         ae:87:0a:ce:b1:d0:fd:5b:6b:91:26:25:1a:2a:72:07:7c:8d:
         80:73:a3:1d:82:a3:dd:2f:41:cf:48:db:71:9a:8a:fd:03:0c:
         cb:ef:d2:f5:ab:28:a9:55:8c:73:ec:ca:30:d8:34:07:cf:dc:
         63:e5:a8:f8:69:27:68:4d:51:ce:c2:5b:0d:b6:b3:e1:bc:c4:
         e3:e5:4f:02:a7:6e:6f:17:27:5a:de:97:85:4f:89:0f:81:aa:
         76:40:9a:4e:e7:6b:5f:59:44:c7:4b:92:72:a9:07:ec:a7:35:
         0e:8d:e8:78:91:c9:15:3a:06:da:11:7f:a2:83:3a:91:94:b5:
         01:e2:d8:7a:c5:e6:b7:f3:7c:ed:88:e9:59:48:ce:c9:5b:fe:
         d4:ee:36:5d:b2:11:08:9d:96:67:39:1f:a8:33:27:b8:0c:ca:
         1e:c9:24:9b:95:fe:64:ab:9d:10:5f:0f:7f:c4:79:b7:a7:ae:
         e2:f2:9d:71:cd:03:47:e7:d8:c6:ee:77:02:94:6b:79:27:e9:
         1a:c1:3c:93:91:89:0d:85:17:0d:cb:20:ed:a9:7d:99:ac:16:
         16:21:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:19:28 2025 by rpki-client