Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
File:                     yuBptmPuJf0TVZEB2sHVAyuf1m4.mft (raw, json)
Hash identifier:          VtcN3ho7YaxMDN+wXIIpSp8xtSN6EQNZ2Oth4iEjpAA=
Subject key identifier:   67:16:7B:08:E3:F7:A4:53:1B:77:54:A6:89:F2:6B:C5:B4:2C:6C:82
Authority key identifier: CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E
Certificate issuer:       /CN=cae069b663ee25fd13559101dac1d5032b9fd66e
Certificate serial:       01976F99E12118AD1FB77779AD8AE8D27F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
Manifest number:          0EDF
Signing time:             Sat 14 Jun 2025 18:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:44 +0000
Files and hashes:         1: J-eKojxMi6UoXnAnWpcgCgfxWzI.roa (hash: 3mfOivDPBdA5JQvXcz+RrhjkTiZkiP3KgPuzQa9ZrxM=)
                          2: yuBptmPuJf0TVZEB2sHVAyuf1m4.crl (hash: hYVE7Ufrb2OxzxxKCN9uZxTREUg9MdNMty16EzateSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:e1:21:18:ad:1f:b7:77:79:ad:8a:e8:d2:7f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae069b663ee25fd13559101dac1d5032b9fd66e
        Validity
            Not Before: Jun 14 18:00:44 2025 GMT
            Not After : Jun 15 18:00:44 2025 GMT
        Subject: CN=67167b08e3f7a4531b7754a689f26bc5b42c6c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:c6:1d:81:9d:d5:84:ef:a5:ef:e9:b7:55:
                    a6:2f:0d:1d:52:b5:34:8e:bf:80:cb:81:40:4a:4f:
                    4c:0f:73:21:e8:00:84:7e:c4:16:6c:44:47:a4:47:
                    8e:39:73:ed:75:69:2d:bf:23:9b:ad:fd:70:40:8a:
                    ed:ca:c0:1f:85:ec:73:76:38:f9:36:4a:ce:86:89:
                    d6:e5:4e:49:4b:4f:0b:76:88:a9:d5:6b:67:e8:2c:
                    58:94:6f:7b:46:cb:b7:a4:8f:e8:5b:1a:58:37:fd:
                    21:87:bc:f9:f1:32:00:91:09:69:02:ee:1d:60:7d:
                    67:b0:30:37:0a:f3:83:6f:00:72:d9:93:af:92:7e:
                    9f:34:49:65:ba:85:76:94:74:58:6d:d6:84:b7:35:
                    5c:26:9b:4e:3c:3d:e0:e5:61:58:4a:7e:8b:61:e7:
                    2d:74:80:ac:37:c7:5e:6c:bc:e2:fc:6b:a2:e6:2e:
                    02:a7:4b:09:5e:44:93:1e:ef:e1:03:f2:5e:9f:45:
                    b1:c1:49:05:4d:12:b0:8b:39:74:8b:7c:7f:40:df:
                    fa:e5:56:0d:36:f0:fe:84:7d:61:23:54:70:70:48:
                    bf:68:ac:1d:29:b4:80:e7:aa:4e:91:e7:00:fc:78:
                    78:1d:b4:6f:5f:f6:59:27:e1:1f:11:7e:16:17:cd:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:7B:08:E3:F7:A4:53:1B:77:54:A6:89:F2:6B:C5:B4:2C:6C:82
            X509v3 Authority Key Identifier:
                keyid:CA:E0:69:B6:63:EE:25:FD:13:55:91:01:DA:C1:D5:03:2B:9F:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuBptmPuJf0TVZEB2sHVAyuf1m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e5f5f8-1ca1-4234-9a3c-ecceeee110a4/1/yuBptmPuJf0TVZEB2sHVAyuf1m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:94:b2:56:64:f9:a9:ed:5c:56:09:6b:80:7e:1a:1c:a4:d9:
         b0:66:54:89:a0:58:de:20:92:e6:c2:6b:e0:88:bd:f5:83:1b:
         51:b7:d7:46:e2:37:14:45:1f:8b:5d:9f:04:d3:b9:d6:5a:25:
         74:7e:e7:2d:f3:fb:ff:2d:38:bf:a2:16:80:fd:8d:b8:1a:69:
         ad:71:35:b1:88:9d:60:ab:92:96:2c:06:3e:6a:ac:64:f6:b1:
         b9:5c:a6:a9:7e:c9:5f:4a:7d:93:72:74:4e:52:f8:56:50:02:
         a1:e3:58:1b:5c:fd:91:ad:26:bd:60:c0:98:77:6f:23:28:17:
         27:4d:61:85:3f:2b:d3:fd:db:02:bd:3c:93:ee:0e:ea:16:5e:
         ad:41:a3:b3:11:23:1c:62:2b:53:8c:61:a5:2c:04:ec:51:ea:
         73:ce:7e:76:ac:30:80:32:c1:75:17:49:f1:4e:cb:e5:20:3d:
         f1:ea:b8:73:f8:2c:97:87:0e:f9:25:9d:c6:b6:b7:fe:a8:6a:
         03:3c:e9:6a:29:14:5f:8e:2a:97:2b:7b:a5:0e:d7:1b:01:23:
         2f:0e:56:bd:5f:04:b0:47:fd:47:99:03:22:ca:13:b7:4f:9d:
         2a:21:a7:8f:4b:25:85:37:4d:68:0c:fa:1e:9d:f1:bc:76:41:
         f4:84:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:37 2025 by rpki-client