Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
File:                     YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft (raw, json)
Hash identifier:          uAFpGcZaJv4JRMYJoDYS6F06ENY8Ti6t4lc3+qgjBOI=
Subject key identifier:   68:CE:90:E7:3C:4E:10:9F:BA:F4:AC:F7:92:F5:78:95:E7:B1:BA:0E
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0197843354E4FCB5C0932E13CDC3D8A834DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
Manifest number:          09A7
Signing time:             Wed 18 Jun 2025 18:00:45 +0000
Manifest this update:     Wed 18 Jun 2025 18:00:45 +0000
Manifest next update:     Thu 19 Jun 2025 18:00:45 +0000
Files and hashes:         1: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (hash: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=)
                          2: ISSEb8mvPD7Wb-BO3eMjyBnQD-A.roa (hash: dUQ5dbyZRiVT9qvtigPflifhbpzSjWdmMJQhCiRK9yY=)
                          3: ITCvofTUKcrPXUX4ThJtq_NekLI.roa (hash: AZpr92O9rMAjpfYJ9xUOlJVoKycP42+TRFWjyvB4His=)
                          4: LLA4IvVGtRI6yA90ov_lLpcYo6k.roa (hash: 7JmnUHmpGf8b/M1tDswRWUSaT/rNeM/CbbqIQS+ZYgw=)
                          5: LXQ5Dl426hhh6QRd3yqtOofjp0o.roa (hash: znv04G+MmU69F8joUAs2FqyoL/VISgL++/Y2Z827I2w=)
                          6: PX1j4imQFBN7657jyc7Zu1gTrXU.roa (hash: 8zsptqmRSRBJaOtfsTJAsFAwYhvmDOrkIMgQNuU7OfE=)
                          7: Sh7JlMJhv-6RtBisv-L0kfbZJks.roa (hash: F+4kBoxCrAhOhNOKd39I4JEpehCkgRYyGrELsXTNP9s=)
                          8: Vhllw2glaqL8EoPQw5XUwOXiBGo.roa (hash: wq9dUzUVsrgsDS8bxTvADCSBnajTq7yo0dmS3z28Cq4=)
                          9: VicI--UiT4J4AutTMYdO2uMhkGg.roa (hash: Y40nMU70m0+2jleYg2nqHmXkrHQzj9QhtyBLW6piLPY=)
                          10: YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl (hash: AktJDxqBBlh2ddHsQS7u65ExnFskodvXfS9woQNNRsE=)
                          11: dGxUQhmXosrd6snNM74Lqxgx6XA.roa (hash: 9vHiXTHPhgjpbGVFJ6NuVl7cW85jEiPNxPoz0tnnkYg=)
                          12: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (hash: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=)
                          13: i39d_g_1_9oM3E5qn-WFCJuc6cY.roa (hash: 3J8AXusWQrGt85CnVf7tcXl4q37hdR3eK7fR6zkLiJ4=)
                          14: l8KpKReixNDHkSubHdfI2z2J0LI.roa (hash: pX4lLViztQ13HYJwweHqkIk+20Vma9iisJYbAnhei/E=)
                          15: rpUidfPLaFOcta7e_Cd7vj4f2yI.roa (hash: SBNCqpl4yY77T1TIQFUe8+GhTqmXQvEg+yrLX2iKkQ8=)
                          16: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (hash: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:84:33:54:e4:fc:b5:c0:93:2e:13:cd:c3:d8:a8:34:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jun 18 18:00:45 2025 GMT
            Not After : Jun 19 18:00:45 2025 GMT
        Subject: CN=68ce90e73c4e109fbaf4acf792f57895e7b1ba0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ad:49:8a:3f:df:f0:58:6d:f1:15:ef:10:2b:
                    e8:f7:30:3b:a7:10:86:a3:66:7d:d5:33:7a:3e:4e:
                    2c:f3:87:aa:07:b9:24:5d:d9:27:f5:52:06:a1:f1:
                    68:bb:91:02:20:96:d2:88:d5:2a:2a:70:6b:f6:0c:
                    41:9f:ff:d9:26:b4:40:46:da:ec:13:ab:b8:0b:40:
                    ed:63:b1:df:6d:6d:f1:a7:ab:95:96:43:9d:98:89:
                    18:a9:00:19:1a:c5:9b:33:56:b4:6d:e4:43:8b:1f:
                    2c:fd:1e:24:b5:71:37:a4:98:de:4f:6e:12:0f:84:
                    c9:71:21:07:7e:83:a8:14:da:30:b6:33:3c:a9:67:
                    fa:86:75:64:08:cc:9f:3a:17:9f:d8:59:ed:92:14:
                    8d:8f:3b:96:95:e6:ff:32:e9:f5:62:58:5a:e0:05:
                    d3:1d:95:5f:05:ff:aa:b8:da:c3:11:94:5a:e4:dc:
                    4f:79:f9:a7:02:96:db:a0:ab:18:cc:3c:ec:13:4e:
                    21:22:3b:3e:27:ce:d7:75:aa:f9:cf:8b:db:bb:21:
                    2b:83:f3:d6:9e:91:a0:74:ac:20:3d:72:fe:1f:d5:
                    df:7b:80:ba:eb:d1:a2:f4:1e:72:ac:a0:65:7b:ec:
                    4d:b2:1a:38:c7:96:7e:d7:91:81:74:ae:fc:13:ca:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:90:E7:3C:4E:10:9F:BA:F4:AC:F7:92:F5:78:95:E7:B1:BA:0E
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:9d:98:21:96:2b:6b:87:67:a6:6f:07:ae:eb:cf:73:31:
         d9:a4:ae:90:19:05:7b:5b:af:78:cf:9a:65:cf:13:fd:9d:f4:
         69:eb:14:1b:26:d8:99:af:93:f0:44:d6:5c:6f:23:b3:94:f1:
         6e:d0:66:c4:ec:08:31:31:ad:17:85:a2:a7:01:20:57:44:e1:
         ac:5b:33:60:31:b5:23:69:6f:85:1b:fb:f1:8b:62:6c:d2:72:
         6a:fd:e7:c9:dd:e2:a3:b4:27:c4:1d:34:d6:23:18:ee:2e:c7:
         eb:31:ed:5e:21:af:83:15:96:37:05:ed:53:db:87:d0:cc:d2:
         e7:65:83:38:69:93:59:e3:e0:7a:46:79:87:d3:2d:59:6a:96:
         a6:b0:34:14:f2:73:2b:d0:5f:f7:77:0a:3a:ea:71:9a:b7:62:
         21:f6:c5:ae:4b:93:f3:29:18:76:ab:9b:3a:5a:8e:92:0a:c2:
         6d:02:b3:b2:8d:98:2b:71:13:0c:4a:59:e2:a8:95:02:43:01:
         39:5b:21:bf:00:30:84:ef:2a:65:81:df:8a:a2:89:e7:0d:a6:
         6f:9e:69:5d:be:19:84:98:54:2c:b2:36:84:59:a2:ab:5e:a9:
         0c:a9:2f:6f:54:b0:09:95:32:56:26:db:d0:24:73:a4:2b:26:
         7e:fc:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:16:50 2025 by rpki-client