Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
File:                     yyBgbecwRW7dczXMiCy99DlvNGA.mft (raw, json)
Hash identifier:          lDQv94By4mjhOmhyu7Xx8UN9dbp6AvRN8Cqgksbduio=
Subject key identifier:   B0:77:E2:67:DE:44:E1:56:5F:89:D2:59:0D:9E:35:0C:74:F5:36:3A
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Certificate issuer:       /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial:       01976F9997FDEA66ECD954F9D37E160B4D8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
Manifest number:          1596
Signing time:             Sat 14 Jun 2025 18:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:26 +0000
Files and hashes:         1: 1-g2qGyIDLotxJr6jyvuCwE9SDoo.roa (hash: ox4h4LnoAr4/PMYjKkzxk/lX+kgpfI0xggGwFC9kUEg=)
                          2: BzvUzHnovBo7nbKCDh0scDdCP1E.roa (hash: XCMbu5qQUTLpP7fneXdNrRlDCpPbQNcvgmAEextNWVg=)
                          3: rHfF7qdYMYkIEjqJPBDOaXebEf0.roa (hash: P0aBQMtyJt0CjcoQ0RWfWtjHju57iTgw6JSMTWTBUj0=)
                          4: yyBgbecwRW7dczXMiCy99DlvNGA.crl (hash: pDqfYqwgvq7tdzS8MSjK3+NeBUw34eTUlYDvCuY7RG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:97:fd:ea:66:ec:d9:54:f9:d3:7e:16:0b:4d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
        Validity
            Not Before: Jun 14 18:00:26 2025 GMT
            Not After : Jun 15 18:00:26 2025 GMT
        Subject: CN=b077e267de44e1565f89d2590d9e350c74f5363a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:a3:98:89:fa:2d:e3:29:58:19:1c:55:d6:
                    2a:87:15:30:46:ec:b5:ed:fc:22:41:2d:96:7a:e1:
                    40:94:0a:be:4e:84:5a:1d:ed:51:eb:28:97:e2:34:
                    b9:a2:61:d3:6e:b8:9a:c6:ac:46:8a:b5:d7:04:b7:
                    66:62:d9:f2:f3:cb:b4:0c:93:db:b3:42:12:44:e8:
                    e0:98:32:c6:a3:27:df:3a:22:f8:8e:8c:37:f9:80:
                    53:8e:16:57:9d:d9:4d:d4:55:c0:4e:e4:52:f7:6c:
                    92:71:19:c4:ec:07:37:9d:d2:3e:29:2e:af:0a:ea:
                    6f:70:21:7b:be:89:62:b8:c3:91:58:47:8a:33:b7:
                    a5:77:9c:b7:c1:87:95:0f:17:a5:10:2d:c1:71:d0:
                    19:49:08:69:13:c4:48:b6:bd:81:fd:33:0c:3a:6f:
                    14:14:15:13:59:c4:2b:c3:d9:c1:69:06:82:65:0c:
                    c3:dc:43:3d:2a:7d:13:3e:fb:56:f1:be:d5:de:09:
                    c7:4a:ec:cb:d7:b5:ae:23:e0:39:77:2b:4e:92:8a:
                    69:93:f5:62:69:d8:a0:aa:ad:0a:9f:c9:62:bc:92:
                    a7:43:a3:07:5a:bd:02:1a:b3:95:7e:73:e3:01:14:
                    4a:9d:03:9a:b7:9a:95:6f:33:d6:9d:0a:5c:08:69:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:77:E2:67:DE:44:E1:56:5F:89:D2:59:0D:9E:35:0C:74:F5:36:3A
            X509v3 Authority Key Identifier:
                keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ee:05:07:12:fa:b9:0e:96:3d:aa:9a:bb:3c:77:63:3f:45:
         8e:16:0c:72:8a:c7:5b:2d:1d:c8:45:51:ed:af:5e:5c:45:8c:
         27:1a:b8:7e:ed:67:ee:d8:c5:de:32:3a:79:33:ac:13:57:eb:
         9c:19:66:4e:11:a8:82:a6:af:25:9d:a6:f8:df:cc:0b:b1:2e:
         a0:53:25:a3:34:43:dc:f1:67:3a:c1:34:71:84:ad:20:b0:dd:
         4c:0c:64:2e:02:29:25:c7:29:7e:03:35:c4:0f:b0:fd:7b:74:
         82:4e:51:56:6b:ff:e9:9b:95:26:63:04:f2:30:3d:21:89:02:
         f5:53:30:23:88:09:d9:e3:aa:34:4a:57:a8:ad:7b:23:82:1c:
         87:b9:54:02:10:e5:e1:0b:32:d3:ea:42:0f:76:1f:d8:22:53:
         9c:89:11:ad:df:7d:ee:39:c4:45:f4:7e:72:22:e3:af:cf:d4:
         60:e5:39:cc:d8:ea:3a:88:50:ad:3f:15:dd:62:66:b7:7e:0a:
         04:31:6c:6c:c8:56:4a:7d:47:a3:ac:81:ca:f7:21:34:b4:48:
         7f:fb:4d:72:3e:59:43:33:6c:66:4b:ec:a2:1b:17:24:66:4c:
         12:2d:36:43:91:d8:69:50:ea:28:10:b6:e9:f0:09:55:b7:7e:
         0f:e6:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:21 2025 by rpki-client