Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          LGJwLJm3wHKSse13CKzu/1aFyKbgM5U2K0iFv1ze928=
Subject key identifier:   B4:0C:04:6F:53:30:6F:77:9E:F7:B1:99:25:30:A0:E7:7B:1C:97:B1
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       0196729D3CC862226C1D79FFEA81ED523A19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          0C89
Signing time:             Sat 26 Apr 2025 15:00:29 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:29 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:29 +0000
Files and hashes:         1: 7Hb0cxDKgEME9YU1nJ9t4uvfRA8.roa (hash: AkQY9ppbVhy4tGFhPFQeNdZuvfoba48WrfFAMllJVEc=)
                          2: 98yJd6CKF69Dg_9ycsUvR-BETQs.roa (hash: 3Ev+3DyYqmisojiXYuD5v3lmrru0HzcvSLE+oEhCf8E=)
                          3: CP5sV6hwKPPrFY5ssKzLxRDP72o.roa (hash: iGdJHjf6CqwTU/xy4cIPz3bE82CjxmDjP95RDzpcBGQ=)
                          4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: QYMj3sSzsf9cA9q6HZXiAHojWhdO9N2+cMmzZpldyEA=)
                          6: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=)
                          7: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=)
                          8: jvff6WGoYFxaA4PYboUwWnOfv3c.roa (hash: +TXfc4B1fLIeKgxG681JTLQSo3SYOu7646Py3pWF6TA=)
                          9: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:3c:c8:62:22:6c:1d:79:ff:ea:81:ed:52:3a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Apr 26 15:00:29 2025 GMT
            Not After : Apr 27 15:00:29 2025 GMT
        Subject: CN=b40c046f53306f779ef7b1992530a0e77b1c97b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:73:68:c4:f7:2b:ac:24:d0:a0:d0:ac:f9:
                    e3:02:12:a6:05:66:95:40:a3:f6:bc:d3:f1:86:da:
                    89:e2:72:ea:4b:5e:e5:d3:e8:d6:ff:ca:e9:40:1b:
                    a8:ed:49:e7:13:91:67:cf:0a:35:36:1d:a6:14:bd:
                    62:03:be:36:0d:f4:9a:40:31:ea:e7:49:8a:ad:69:
                    bc:88:bf:4e:5d:b3:9e:8b:bd:a5:59:90:fb:dc:b7:
                    29:d0:eb:e9:47:45:05:8d:6c:79:57:79:1a:4a:d3:
                    0a:d3:bd:d0:1c:ff:ef:74:2a:63:9b:24:f6:1b:36:
                    dd:9f:10:88:92:d7:f0:23:39:14:bc:5c:ec:14:97:
                    e6:aa:77:83:4f:03:61:09:e9:25:76:81:f1:3b:f2:
                    c8:aa:04:89:08:e8:da:df:49:1e:ea:e5:d0:c2:19:
                    c6:10:90:22:86:84:f4:0f:cb:e1:80:98:3a:46:53:
                    5c:ca:32:b2:41:be:bc:88:70:27:f8:96:b4:5c:63:
                    d7:11:45:66:2e:b6:f9:ef:73:5e:e0:3e:f5:a8:d0:
                    13:8c:16:59:fd:21:43:e7:a2:01:ce:45:c1:33:3c:
                    7d:46:ab:eb:ee:78:79:d7:76:db:b4:2a:44:94:25:
                    cc:bc:1b:b1:58:b2:14:5c:dc:6c:94:d0:2e:c8:17:
                    05:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:04:6F:53:30:6F:77:9E:F7:B1:99:25:30:A0:E7:7B:1C:97:B1
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:12:da:d4:3c:4d:0f:39:92:68:2a:ec:52:ac:92:01:42:2b:
         e5:06:2d:cc:f9:54:54:6e:04:c1:cb:ed:2f:55:38:7f:e6:8e:
         ee:87:ee:6a:c8:e6:05:9d:5f:37:a8:ab:8a:a3:67:7a:a4:13:
         1d:46:4d:72:af:79:4f:df:a8:bc:b7:74:f9:1c:77:7c:a9:23:
         d8:be:a4:2c:b7:af:ef:b9:cf:be:2c:2a:e7:47:ee:3c:37:ae:
         ea:2f:7d:7a:a1:e9:6b:69:08:3a:ff:1c:d7:02:64:48:4b:13:
         0b:9b:ec:c0:28:b7:89:27:fb:dc:bc:a1:ec:cf:ad:09:62:49:
         9b:aa:82:e2:8e:3f:ff:5c:31:4b:68:e6:59:32:ce:ce:0d:43:
         84:ae:4c:23:3c:f8:48:54:6d:3a:89:72:8b:23:49:33:83:33:
         92:13:43:9c:63:72:dc:f1:80:e1:98:dd:7f:ac:37:63:5e:40:
         3b:2d:2c:c3:d6:18:b2:4d:ed:15:bc:56:ea:e9:ab:a8:c3:21:
         b2:4a:10:11:cd:0b:10:2a:1b:fc:5c:5b:e7:d6:ff:5b:ba:f7:
         74:a2:c8:67:e9:fa:b2:a2:0c:00:46:fa:5b:66:a4:45:92:77:
         55:58:27:ea:cd:51:25:73:ff:65:e9:db:5a:0c:87:16:8a:e9:
         02:00:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:50 2025 by rpki-client