Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          bHZ5GXHHEMbbbv7Jgdx7PcLLy2KfgXKqrI/AshyxfVk=
Subject key identifier:   EA:36:16:F2:62:62:96:F7:FB:50:E3:52:AE:BA:A3:32:7A:E4:DC:12
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       01976E86F44B7D7D5D1D6D1A8AACD0E06DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 13:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:27 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: rWNrOJNCNd5ATErqIJ+QIWxA8WnQrpUx7A8jOkYIqAo=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:86:f4:4b:7d:7d:5d:1d:6d:1a:8a:ac:d0:e0:6d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Jun 14 13:00:27 2025 GMT
            Not After : Jun 15 13:00:27 2025 GMT
        Subject: CN=ea3616f2626296f7fb50e352aebaa3327ae4dc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:03:44:b1:69:68:b2:e6:93:11:f6:71:95:
                    fc:cd:b2:34:71:a9:72:5a:5d:bd:3d:c2:5f:07:54:
                    52:bd:76:43:cb:28:f4:bd:30:ce:3d:c8:de:cd:bc:
                    77:ad:53:c3:14:82:7a:96:58:fc:e6:8b:d7:ed:64:
                    26:ba:f3:50:1b:c5:f4:a5:cd:e3:17:1a:68:20:29:
                    47:17:a0:93:1b:d7:ba:4d:0f:38:be:41:aa:61:31:
                    b4:88:58:b1:c5:4d:35:3e:05:25:2d:8c:79:e7:2c:
                    aa:a7:66:73:d3:a2:f0:b5:0c:84:cc:6c:c7:5b:4b:
                    0a:e5:dd:a4:35:3b:69:82:23:86:a8:44:76:9e:0d:
                    2c:b7:40:d1:4b:99:24:af:b3:6d:8a:30:95:cf:56:
                    be:01:c7:5f:e9:9e:fb:2b:90:34:85:dc:5b:e6:c1:
                    15:a9:dc:0b:5e:87:7a:09:78:e5:30:02:c6:9e:3e:
                    28:77:ec:89:b8:f8:ee:b3:ab:8c:f6:57:50:39:5a:
                    76:5a:8a:99:17:16:33:f6:4b:23:b6:2b:1b:e2:b7:
                    db:a5:b0:4f:04:7e:89:f6:1e:80:d9:66:41:a1:37:
                    c7:a0:3b:f2:93:4e:59:67:58:2e:b6:be:ed:a0:cb:
                    3e:5c:5e:fc:b9:a6:e3:34:a3:de:1a:8d:80:74:23:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:36:16:F2:62:62:96:F7:FB:50:E3:52:AE:BA:A3:32:7A:E4:DC:12
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a5:a3:bb:4a:37:b7:1e:e6:80:88:10:0c:d3:7e:05:49:9f:
         bb:6f:8b:63:b4:03:ce:8b:8e:db:e9:66:4b:ce:3c:86:e4:c0:
         d3:6a:d0:5c:38:94:81:f2:a4:a0:4d:dd:15:2e:5c:89:b2:81:
         41:62:59:e0:b6:92:03:72:6a:70:67:41:d1:1a:09:60:49:b3:
         44:8d:6d:68:53:ee:d5:93:b1:3c:d6:de:39:d5:15:f7:4c:b6:
         89:a2:f6:fe:90:14:6f:18:32:59:a3:37:7f:df:47:43:3e:6b:
         39:92:28:59:1b:04:4b:38:24:85:e5:5a:fd:01:8a:aa:29:0c:
         15:4a:69:61:65:7e:25:b7:24:ef:4a:cd:fe:4a:4e:38:54:c7:
         4e:fb:ff:d6:6c:70:a9:b5:4d:55:0e:4a:46:ab:d3:89:f8:a2:
         0e:e8:a6:2f:c8:af:c1:f9:43:14:f6:87:2e:8f:fd:0b:38:e7:
         3e:63:03:ab:fa:4a:48:90:af:aa:47:03:02:b4:75:7f:58:4a:
         a4:82:46:f9:ea:c5:88:f6:e7:13:4f:7a:1c:af:56:65:ec:f3:
         1e:ef:96:d2:cb:29:28:58:14:6f:fc:84:1b:e9:d8:1b:58:e6:
         73:82:7c:84:2c:8a:c8:f9:7f:97:90:13:07:e2:cb:fd:f0:7b:
         37:1c:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:51 2025 by rpki-client