Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File:                     Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier:          fXtGHi2dOhpfFYi2Dyv9L3HR+jqf1UqHEqMAF5gfgM0=
Subject key identifier:   BF:85:28:BE:86:B2:4A:FB:FE:87:53:0C:CA:0A:AC:16:56:89:B4:08
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer:       /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial:       019680C6AC36BF67519334322E4D085E0F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number:          151C
Signing time:             Tue 29 Apr 2025 09:00:25 +0000
Manifest this update:     Tue 29 Apr 2025 09:00:25 +0000
Manifest next update:     Wed 30 Apr 2025 09:00:25 +0000
Files and hashes:         1: 8f1DQEzOmVOlZREX0FzyX7_KlmU.roa (hash: vPG/1XLUFUdmTpDY8V/ZQr1qcuxaKozSqJOdcnOMn8g=)
                          2: LwCAbtaHXz3xkzLjIuqPtsgJPw8.roa (hash: ZQnpmGPusbWiubETlU0XXZ0LxbvoWczvpb5Xn9WCOZY=)
                          3: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: Gk9SajNZwZw4dEuSA8+Z5knao+OHZtx0a5NpsVoDU0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 09:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:c6:ac:36:bf:67:51:93:34:32:2e:4d:08:5e:0f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
        Validity
            Not Before: Apr 29 09:00:25 2025 GMT
            Not After : Apr 30 09:00:25 2025 GMT
        Subject: CN=bf8528be86b24afbfe87530cca0aac165689b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:81:b2:0c:f0:4d:d0:93:db:51:b9:09:ec:
                    7c:fb:72:e8:0d:69:d3:a0:ac:1e:a8:6c:d7:85:9a:
                    ab:e5:41:ad:2f:2e:48:e9:46:f4:ce:00:c9:19:e2:
                    f9:a9:c6:05:82:df:8c:85:a9:f6:dc:4c:9d:31:4d:
                    11:c3:68:a0:89:bc:1a:bd:36:25:a8:17:ae:7b:d6:
                    f4:5b:27:55:c4:a8:b8:3d:50:66:ed:99:3e:5d:8d:
                    4e:b7:ee:80:f2:b2:8b:26:58:b9:09:fc:8a:0d:64:
                    ab:8b:41:fe:ac:8a:ae:e2:b7:24:b2:5e:31:1a:04:
                    91:d5:3a:b8:0d:69:f0:3c:79:78:48:d8:51:0a:4e:
                    5d:9f:83:93:f4:fe:4c:8b:9e:79:b1:ea:55:3d:e8:
                    69:41:ca:c3:ee:0a:14:90:37:db:22:9f:d5:a9:ab:
                    16:4e:c9:9d:8b:b1:a7:82:17:c0:20:17:e6:d3:fc:
                    65:7c:7f:5c:6c:da:fe:08:ff:3a:08:f2:94:07:b8:
                    fc:1a:2f:d9:50:3a:79:e1:ea:f3:78:2b:27:5e:04:
                    a5:c3:3d:71:b2:3b:c5:e2:0a:4f:aa:6d:4e:2d:39:
                    27:6c:97:50:cb:85:d2:74:59:53:3c:c6:25:fd:db:
                    07:a8:77:69:9f:8e:18:06:ab:aa:83:02:d0:bd:ab:
                    0a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:85:28:BE:86:B2:4A:FB:FE:87:53:0C:CA:0A:AC:16:56:89:B4:08
            X509v3 Authority Key Identifier:
                keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:71:74:72:dd:58:9c:1b:c4:0a:30:fc:ea:4f:93:c4:87:
         03:a7:e0:94:e3:db:af:fc:95:9c:6d:2e:a0:41:5f:ff:11:39:
         e9:94:fc:87:e7:3d:00:3f:9d:67:cd:4f:b1:a3:44:c1:9a:7d:
         32:7c:c1:4e:96:0c:22:67:8e:19:63:1f:16:79:19:38:08:e6:
         d8:2c:98:77:87:04:18:43:85:0a:f0:82:26:c1:c8:10:6e:8a:
         71:f4:f6:e8:4e:cf:19:24:45:53:0c:99:fb:a0:f3:f1:c9:b5:
         df:eb:83:71:c2:f4:80:4e:23:a6:86:9b:1e:33:27:84:bb:79:
         8f:1c:a9:01:66:7e:6c:71:8b:9a:fe:a8:e9:e3:37:4e:e8:8c:
         b7:0c:a9:ba:3c:76:24:3e:05:d5:17:df:83:bf:db:45:da:e3:
         9c:1c:61:b1:a4:0b:2d:87:ac:4d:46:d8:d8:43:13:b1:b0:26:
         b4:03:44:c6:fe:14:2c:8c:43:53:96:f1:1a:70:d6:48:2d:3e:
         d4:fc:51:47:3d:4b:64:d3:60:58:10:9d:ff:1e:4c:64:86:cd:
         1a:69:9a:81:30:72:fa:5b:e8:cf:27:30:b6:f2:3b:f6:8b:e0:
         99:3a:d6:dc:43:6a:98:60:65:88:47:94:58:3a:2f:d5:d5:fa:
         1c:e7:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:08:26 2025 by rpki-client