Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File:                     yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier:          Lo03eOuaX5n9XCnyxbC4KraHZx3FpYSr0Ss8yZPzw3k=
Subject key identifier:   51:82:59:27:E6:87:AA:CB:23:BA:CE:F1:63:0E:DA:C5:21:C1:B5:72
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01976EBE03A32D948AE79A85994F12918595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number:          12A8
Signing time:             Sat 14 Jun 2025 14:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:35 +0000
Files and hashes:         1: 1S5NGl_9XzrIZlMPmsHgEW4H8RI.roa (hash: ZQeIY/xttmXPutXEtut0kcab8CenHX3mGEuBNFgJJJE=)
                          2: DW7jRSnbY34hE_RIyO6FIl_U_i4.roa (hash: Bs5rd92ASGZAZDzYbnXm9tO9ObUBPqRSYN5EMjrMJfE=)
                          3: VcjKNddvZkM3oUg77hjobEZD-v4.roa (hash: j2f1vP0hAJR3dBAkt/cdLLMXOKpHx4r5QIkrRuPhSCk=)
                          4: ikC3r3gDMRV7rzOGGg-rqokymXI.roa (hash: zgCMDOXPzxWDouvwv/WvFaJhABZR8ZFNubvE8NCbA04=)
                          5: lsoRvhBYP4BFjB3EPLYb5DfAt-k.roa (hash: 4aBF5aNmJAlF3RgZKlr2lhS8/MOTaZfHHnjAN6dRE6w=)
                          6: m6E5AD8wpEBEEQ77d1tMbWvBITQ.roa (hash: mggrbaaSW2ESSjaD/emCk5C8EL7zyXuegQnueWT+nQk=)
                          7: wzadBw7uhjprp9F5uJq5T8ApPtk.roa (hash: uUYBqpYur2LbXv+L36BoiBD056HnrM6iitJd8ms8xzs=)
                          8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: 0NHn7tiyGxuaDlSjfwAo07RSk1w0n8HoX5P3+h9swF0=)
                          9: znIVaHKYkyKBEQBVptVbnSPMRT0.roa (hash: g4EHnnn85toCFef30TdaJ5KqFEtNZHscTK/ZYfzTE6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:03:a3:2d:94:8a:e7:9a:85:99:4f:12:91:85:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jun 14 14:00:35 2025 GMT
            Not After : Jun 15 14:00:35 2025 GMT
        Subject: CN=51825927e687aacb23bacef1630edac521c1b572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:1b:2f:f9:79:f9:2c:59:d0:b3:b0:0a:ce:
                    1f:44:2b:20:3d:ef:46:a4:20:5f:89:5b:12:83:56:
                    84:9d:a4:1c:6a:af:7f:7d:cf:38:ad:8b:87:4d:93:
                    7a:db:c5:46:15:39:3a:3d:74:ef:42:48:8f:e6:6c:
                    0d:58:04:6d:2a:6a:13:22:8c:79:90:97:53:6c:02:
                    a4:44:d8:80:5e:47:36:92:8e:43:64:9e:4c:4b:bf:
                    fe:46:30:d9:17:40:d0:dc:79:28:d5:27:29:9b:13:
                    63:4d:6c:d0:36:86:b7:96:c3:e0:d2:b7:49:bd:03:
                    ef:90:e2:b9:69:28:f9:0e:e0:fb:ee:2b:ef:3a:9c:
                    75:ac:82:11:0a:f1:27:54:b9:09:98:82:9c:2b:5e:
                    f6:c5:3a:90:57:74:59:84:cc:f7:88:d9:30:3d:7b:
                    16:2c:95:dc:7d:bb:e6:d0:23:7f:25:1f:99:b8:10:
                    f6:fc:38:72:1a:e6:80:a0:9f:94:a7:84:f7:e6:18:
                    d6:d4:b8:e5:31:f8:2a:67:26:25:2f:bc:24:5e:fe:
                    09:c9:35:21:63:08:e0:cd:89:0e:e4:ca:dc:b8:d5:
                    f8:ae:5a:91:37:89:bd:4b:54:94:49:ff:eb:84:3c:
                    52:c4:7d:a6:aa:60:42:15:44:1e:71:6b:e0:55:06:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:59:27:E6:87:AA:CB:23:BA:CE:F1:63:0E:DA:C5:21:C1:B5:72
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:38:77:e0:b6:fc:71:2f:66:d4:63:6d:e1:c8:0e:22:a8:
         f8:99:bc:19:6e:96:cb:7f:0e:1d:8c:6f:6f:79:2c:fc:ab:91:
         16:1a:38:c9:b2:88:44:3d:d1:30:89:1b:08:94:5c:85:70:1c:
         99:4c:4a:2f:50:36:39:65:91:19:19:72:c3:70:ad:95:05:88:
         56:a8:95:97:85:e7:68:88:67:f6:1f:51:42:8e:13:c0:ac:d7:
         fd:cc:43:ab:74:d3:21:c4:35:c9:dc:01:a2:42:14:c3:99:9d:
         85:77:18:4e:cf:d1:02:bb:31:ad:91:4c:c5:b2:f0:e2:e5:8c:
         a9:05:4e:de:19:8d:75:f8:d7:8a:80:c3:0e:99:5c:d8:6a:37:
         99:e3:27:1a:21:87:5f:ed:4c:85:3b:96:32:bb:6c:8e:12:d3:
         93:ca:31:4a:04:9b:51:49:dd:d8:73:af:cd:51:da:90:80:19:
         7c:a3:9f:52:2b:4a:df:60:d5:d9:2d:cb:b6:48:d8:d5:89:85:
         1b:cf:88:29:f7:67:75:68:d7:a0:ea:06:44:70:0d:9e:22:bb:
         6e:70:ab:c1:d4:ca:94:f7:0c:e3:37:47:61:b0:3d:de:a2:d7:
         8c:16:04:16:53:27:87:f2:0b:74:b7:d5:6f:ff:98:3b:43:e6:
         38:66:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:23 2025 by rpki-client