Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          wndVM3kg9CONQKoclUJXVEOFOKJzgi3P+ZbDlSD6kbE=
Subject key identifier:   82:D2:D0:F2:61:49:4A:8D:FE:9B:11:78:C7:B7:3D:19:2B:78:CE:8B
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       0196797B5F6A6A0C349A7903CF1F2700471D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          10BE
Signing time:             Sun 27 Apr 2025 23:00:50 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:50 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:50 +0000
Files and hashes:         1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: oQD9qzIFYM0YZFldg2f6jyZhiw5229nXjIjU16wz+zQ=)
                          2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:5f:6a:6a:0c:34:9a:79:03:cf:1f:27:00:47:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Apr 27 23:00:50 2025 GMT
            Not After : Apr 28 23:00:50 2025 GMT
        Subject: CN=82d2d0f261494a8dfe9b1178c7b73d192b78ce8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:0b:87:8a:ff:05:46:75:5e:37:cd:0a:b0:
                    a0:5a:5f:3e:cf:fd:45:61:1c:65:46:2d:34:3e:df:
                    94:a2:18:8e:05:76:5b:f1:c1:68:f1:2e:56:7b:c5:
                    63:17:35:14:b2:a5:9b:72:1c:fa:4c:76:cc:a4:e5:
                    a3:3b:b4:9b:7a:fa:d2:75:b0:3f:5b:1d:c2:86:42:
                    c2:37:46:d4:81:ec:53:b3:21:2f:9d:db:89:dc:fc:
                    67:7e:a1:dc:82:17:6c:45:bb:44:f9:23:4c:72:49:
                    cd:3f:2c:63:5d:be:38:8d:e2:70:86:72:d6:5c:c0:
                    63:c2:8a:d3:e6:10:7d:bd:86:b0:40:8f:23:27:67:
                    86:cf:e4:d4:06:42:b6:79:ae:fa:a1:99:c4:23:2a:
                    c0:de:3b:b7:28:fb:8d:13:30:34:0c:a6:ce:95:ce:
                    e5:a5:52:3f:2a:97:2e:15:86:20:f6:b2:df:db:a3:
                    40:ef:95:8b:3a:2a:ef:dd:10:a6:23:33:30:6a:ab:
                    17:93:2d:29:92:d9:91:06:cb:fe:f6:89:64:ed:d4:
                    62:d1:e2:3e:59:b8:33:a8:a2:82:88:2a:74:a6:2f:
                    8b:28:8b:19:46:e6:34:36:51:aa:50:32:54:fa:b9:
                    76:6c:49:97:a8:29:15:c1:ff:74:fb:31:dd:70:91:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:D0:F2:61:49:4A:8D:FE:9B:11:78:C7:B7:3D:19:2B:78:CE:8B
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:d9:02:87:c2:7f:c9:43:1f:d9:7b:07:22:27:44:e6:09:
         f4:13:ce:cd:9f:87:cb:af:be:3a:88:98:70:51:cc:22:2e:3a:
         cb:c9:94:54:07:51:12:bf:f1:d0:cf:40:8a:84:10:0f:45:dd:
         82:a1:86:eb:bc:11:71:97:08:9c:cc:1c:a5:21:8f:28:9a:1f:
         47:a4:7c:30:d0:42:a7:44:30:38:52:56:c5:2c:32:72:d4:c6:
         08:90:4a:2f:61:e8:fb:f4:9a:50:89:c7:aa:ba:6a:e2:75:d4:
         51:dc:e8:c9:31:f5:55:75:54:66:a7:4e:d1:85:30:09:db:eb:
         dd:f0:b9:bd:ad:de:16:64:64:ee:5f:19:09:f7:b8:93:c3:b4:
         92:4b:34:76:ff:98:0b:9a:58:71:c0:ac:ff:ac:45:cc:ce:e5:
         61:0d:1d:48:27:04:6f:c2:a6:c8:fd:07:45:56:d0:8e:c7:c8:
         1f:4f:3d:8b:1c:61:18:43:6e:35:26:03:d8:c8:59:33:90:27:
         f6:6f:b7:31:06:ae:f4:22:46:5e:ce:c1:ad:7e:c9:6c:1e:19:
         3f:b3:c2:ca:fa:3e:87:5b:9b:92:87:93:41:70:5f:fa:43:ad:
         dc:a2:9a:6e:ab:ce:0a:f7:db:bd:fb:8b:ae:c0:6c:46:82:1e:
         3e:4b:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:11 2025 by rpki-client