Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          TXX76im3kAhXyHL/5S2DboFMtWSSbF2jXk5PTGuby30=
Subject key identifier:   BC:1F:E2:14:E9:1B:12:B3:3B:35:2D:02:B3:02:77:3E:63:9D:F5:2C
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019768BC50061AF993D2AE763582ABCA2E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 10:01:01 +0000
Manifest this update:     Fri 13 Jun 2025 10:01:01 +0000
Manifest next update:     Sat 14 Jun 2025 10:01:01 +0000
Files and hashes:         1: 0DkU2fgO6IQWtgrbjz4ILjM1Zl8.roa (hash: GEp4fdAPa044+J00YTmo8n4i3COcJ21fXImaGvohmEY=)
                          2: Vuv4D49Do3ihPrgPrplFw5fVmzc.roa (hash: jtLLMKBGV7msWBJkQMiWYOk1XXEmcC3ekc6iXglJO4U=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: EQmHTtiO42KToP4uKEdKRNtpHPNJozUubwWYQry10TM=)
                          4: jsd32GyUcOABxL3lbaYKa1U9QxQ.roa (hash: iIGtz/WTQ1JA6imPxlRGSNb4RKMQ3XrYAPCJJH9Foiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:50:06:1a:f9:93:d2:ae:76:35:82:ab:ca:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Jun 13 10:01:01 2025 GMT
            Not After : Jun 14 10:01:01 2025 GMT
        Subject: CN=bc1fe214e91b12b33b352d02b302773e639df52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:bb:3a:d6:72:a8:da:04:27:8d:58:3c:48:
                    73:c4:33:92:ef:86:89:c8:7a:48:5f:b7:80:87:97:
                    1e:53:7f:40:ba:53:62:0e:92:99:de:c0:8e:5e:17:
                    4f:ab:6e:0b:a3:58:8a:19:ee:8f:61:63:47:3c:05:
                    99:f4:2a:b7:67:b4:45:39:5e:9d:4e:e7:f3:9e:8e:
                    22:21:23:df:28:ba:a2:d7:62:c1:b1:8a:de:26:7b:
                    18:f4:9c:0e:5c:0b:16:0a:01:bb:8e:67:31:4b:7b:
                    dc:f7:7c:9d:e0:7f:6d:83:4d:f0:a7:e4:4a:7e:89:
                    fa:43:e6:8b:18:c6:80:db:b8:57:6c:a0:c8:89:92:
                    f4:a3:ee:f9:37:78:d8:e7:15:3b:92:b3:f9:ab:48:
                    eb:15:f4:3c:4c:d4:a2:8f:e5:f6:2e:c7:6b:b8:e0:
                    31:2d:0c:c7:0c:74:32:83:e4:dc:dd:4b:f1:94:fa:
                    90:04:8d:4f:d9:30:26:cc:d1:eb:15:bb:6f:aa:b8:
                    19:07:33:20:21:10:ba:b6:f6:e5:dc:f2:ab:22:7b:
                    6c:62:fd:f6:36:4a:b0:47:6a:19:d3:38:71:04:6f:
                    a8:6f:34:d7:81:d1:ac:71:cc:ed:c8:bb:eb:99:b4:
                    50:09:de:98:70:11:5b:51:6a:44:7e:1e:25:e7:9b:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1F:E2:14:E9:1B:12:B3:3B:35:2D:02:B3:02:77:3E:63:9D:F5:2C
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:05:c7:64:98:4c:8c:95:87:3b:cb:c4:a4:9f:fb:52:b9:
         8c:aa:31:7a:f7:ca:d4:db:f9:a1:35:2d:2d:ee:5e:bf:a7:74:
         61:f4:ed:eb:e4:cf:9c:c5:4c:c8:3e:b2:e5:1d:44:2c:67:20:
         89:6b:c0:15:19:1c:3f:56:9b:ed:ff:ff:a4:4d:21:7b:55:2e:
         94:7c:e7:11:25:a0:6d:f1:78:e2:f5:22:41:23:ba:b0:b4:6f:
         30:2c:be:c1:8e:49:af:77:ce:a5:6a:6d:09:92:7c:ac:3a:5c:
         81:42:2e:bd:c1:10:0f:a2:b9:cf:d5:ee:41:77:46:d6:d0:5b:
         8a:67:bd:ba:1b:75:50:50:46:7c:57:3c:54:be:43:6c:ed:3a:
         f6:ce:76:88:f2:c6:62:93:e6:14:f2:0b:69:56:2a:93:5a:93:
         81:45:37:0c:b9:e3:66:88:46:70:77:7a:2e:79:a3:ff:07:c0:
         d9:90:a0:07:a5:78:e5:0b:ae:00:3f:2e:62:6a:bd:e8:a2:85:
         bf:46:de:1c:5a:15:75:31:90:b4:34:e8:f8:90:27:3d:37:88:
         7d:62:5e:55:1f:e2:aa:eb:f7:65:d8:4f:83:99:55:8a:f0:24:
         46:94:63:bb:be:59:ff:52:0a:b4:fd:26:10:f3:c3:15:47:ce:
         de:f3:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:38 2025 by rpki-client