Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File:                     Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier:          MIeYFz9UDvYu4oNkBOXHsYea5p7urNkM7k21x5LhE9E=
Subject key identifier:   C4:6C:F3:14:C9:38:94:35:9C:0F:64:5C:43:42:22:0A:20:3B:72:03
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer:       /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial:       01968C26149E730E68CD7B01EB270C495839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number:          1446
Signing time:             Thu 01 May 2025 14:00:27 +0000
Manifest this update:     Thu 01 May 2025 14:00:27 +0000
Manifest next update:     Fri 02 May 2025 14:00:27 +0000
Files and hashes:         1: MluEItNzhsZo0KlEkHW2gGjFsZA.roa (hash: hoWRhUtEL622AwT/94vc4oZQjrwHDprmF8UFYzmZ0qI=)
                          2: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: MB/18R92/gnZzk1URWsgi59GZ0W0L/VyPu3lq60UL8k=)
                          3: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (hash: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:26:14:9e:73:0e:68:cd:7b:01:eb:27:0c:49:58:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
        Validity
            Not Before: May  1 14:00:27 2025 GMT
            Not After : May  2 14:00:27 2025 GMT
        Subject: CN=c46cf314c93894359c0f645c4342220a203b7203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c3:39:28:a4:12:a7:3e:ec:6b:43:ae:d8:f4:
                    f3:09:57:8c:1e:89:a2:ec:3a:f3:1d:74:7e:ad:94:
                    b8:a8:9e:d8:80:84:a1:a0:5f:f5:38:da:7f:b9:12:
                    0e:33:c1:c9:df:86:6d:3b:b6:79:cd:17:3a:dd:e8:
                    fe:54:65:d5:0e:1e:a6:61:3b:93:1b:d2:9a:e0:dc:
                    c1:c5:a9:62:e0:62:e7:44:fe:f8:b9:66:37:5a:8e:
                    8f:b1:84:f6:c9:9f:e3:8c:41:ad:17:95:69:ee:02:
                    51:03:eb:1b:cc:da:68:45:05:7b:1e:3e:c9:ca:96:
                    e3:9b:ea:86:70:22:c0:bc:70:9b:5b:0d:f0:42:c0:
                    25:fd:a0:01:50:0e:b3:e5:40:90:8f:c1:4c:29:57:
                    67:25:ef:e6:7e:76:07:5e:bd:7b:75:f2:9c:a4:af:
                    4f:aa:c6:1b:97:79:b2:1a:1e:e6:f4:7f:e1:30:28:
                    0a:33:86:c7:79:b4:10:dc:7d:9b:b9:75:46:eb:fe:
                    13:ab:ad:69:66:af:c4:50:c1:14:90:d7:55:d5:c2:
                    18:a2:a1:57:1b:e2:31:dd:06:bd:0e:d1:9f:9e:10:
                    30:22:dd:e6:12:02:7f:31:d0:61:83:05:ff:26:36:
                    bb:81:4e:cf:21:4b:05:16:89:ff:cf:5e:56:b3:fc:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:F3:14:C9:38:94:35:9C:0F:64:5C:43:42:22:0A:20:3B:72:03
            X509v3 Authority Key Identifier:
                keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:de:5c:65:64:f7:80:92:5d:2a:1f:10:c4:a5:ac:1b:27:
         0a:26:4c:df:9a:51:ef:3d:84:4d:0b:78:81:a8:e4:d6:3a:5e:
         6d:3e:80:f0:25:c0:ba:07:d0:cc:92:e0:81:10:08:9d:c7:46:
         61:8e:87:24:55:f5:29:7d:ce:4a:08:3c:37:cb:ad:d8:14:eb:
         a5:54:83:a8:6e:4b:a0:ea:5c:b0:b1:89:b5:95:a9:f8:c3:49:
         a6:b4:53:09:d6:79:56:a3:ca:2b:10:73:80:2f:11:b5:a3:3f:
         1a:bf:89:d3:e1:3f:97:ce:24:25:ff:6d:a3:60:ef:bb:39:af:
         97:81:8b:79:34:4f:8a:6e:86:65:bc:46:72:d6:04:d1:44:ef:
         0a:00:65:99:14:ad:14:f5:29:35:69:9f:84:7f:91:4a:32:ee:
         07:0b:56:55:38:72:34:90:5e:40:a8:09:1b:c6:0c:de:f1:b8:
         3d:1e:0d:35:4c:d9:3d:38:05:99:69:dc:d8:5f:b5:3d:d4:46:
         89:24:e9:57:01:90:50:8a:99:18:2e:c2:e7:c9:5b:f9:18:58:
         20:6a:18:e8:ff:8f:0f:25:08:0a:25:b8:4e:a7:1f:a2:d7:11:
         77:9f:84:54:fd:cb:62:00:a3:33:10:81:c0:7f:34:74:6f:a4:
         96:57:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:50:21 2025 by rpki-client