Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File:                     yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier:          OQegncbb0M7YrT/nlYMK729zPcL3ILtSQ4YOPzIBEZg=
Subject key identifier:   55:F0:D6:AB:70:29:12:BC:09:92:3E:EB:3F:52:B9:D6:C2:87:6C:F4
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer:       /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial:       01977075C6C6397A08441671C61A377D7F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number:          0194
Signing time:             Sat 14 Jun 2025 22:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:56 +0000
Files and hashes:         1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
                          2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: GbeHhpxqmhtYUGXFG7Et6DgwAyP/+wiTXJb6bIHnZug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:c6:c6:39:7a:08:44:16:71:c6:1a:37:7d:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
        Validity
            Not Before: Jun 14 22:00:56 2025 GMT
            Not After : Jun 15 22:00:56 2025 GMT
        Subject: CN=55f0d6ab702912bc09923eeb3f52b9d6c2876cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:cc:1e:a1:e8:d5:3f:0e:e4:bc:9e:d2:46:
                    8b:78:45:47:64:bc:12:ef:d8:28:11:fc:15:82:bb:
                    53:97:94:9c:2f:6d:fa:cb:9d:1b:86:3e:d1:71:a4:
                    b1:4b:ad:8c:f9:f3:5e:89:f1:71:99:65:da:85:bc:
                    33:a2:eb:c0:2c:94:e2:c1:1e:76:0d:ce:50:a4:b6:
                    4d:15:8e:76:e1:be:20:a8:79:b8:c2:a3:0f:4f:56:
                    12:69:0b:61:3d:cb:8c:60:44:bf:a4:21:8c:17:b1:
                    16:89:3c:99:97:4d:bf:2b:b4:7e:27:da:d3:8e:c2:
                    e6:11:1e:de:8d:80:db:b5:33:b4:16:9b:1a:64:48:
                    48:13:f2:5e:b7:06:83:63:86:4c:96:22:b8:ee:4f:
                    45:55:c9:1c:04:53:ce:0b:84:ed:13:b3:16:9a:0d:
                    ea:30:ab:58:5e:99:f0:8d:91:8a:ba:8e:0e:16:78:
                    a4:57:69:80:a6:fc:f0:16:46:0d:30:c7:a0:8d:85:
                    8c:c2:79:2f:e9:5b:5c:96:1f:b7:35:44:77:10:96:
                    1d:71:1c:e6:d4:db:06:3d:e0:b8:c8:66:f2:be:b0:
                    fd:e4:b1:3d:29:36:8d:16:4f:17:f3:c4:66:95:25:
                    9c:58:18:50:41:05:ab:18:48:59:2a:73:62:5c:a3:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F0:D6:AB:70:29:12:BC:09:92:3E:EB:3F:52:B9:D6:C2:87:6C:F4
            X509v3 Authority Key Identifier:
                keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:89:8c:78:2b:70:60:d4:69:78:83:d1:56:49:38:c6:07:
         64:ec:91:4a:6f:14:3d:3b:d5:53:cf:98:db:e3:1b:58:9f:4d:
         65:69:78:35:41:64:3e:5e:bf:d6:a2:81:d9:c5:e2:43:c4:78:
         bc:78:7b:8c:67:9e:42:69:ad:98:36:9b:c7:87:81:11:bb:f7:
         a7:cf:ed:19:ce:60:d7:3c:e3:97:eb:5c:6c:48:a4:b2:5e:55:
         3c:e0:af:0e:be:2d:8d:e2:a9:e9:0e:8c:e1:ef:c5:37:4b:11:
         e1:b1:8d:e1:c2:07:2d:4e:76:b4:28:e8:68:c2:d6:d8:58:4e:
         77:38:27:2f:8d:97:b8:6f:9c:82:d7:56:a4:6d:98:b2:0e:ea:
         0a:af:ac:cf:c5:25:db:0d:a0:80:7d:46:7f:32:3e:c9:e3:47:
         48:16:2b:18:95:d4:ce:b1:43:ad:fc:00:89:df:c5:62:09:4d:
         f9:6d:12:40:7a:8a:93:1b:6e:24:c1:c2:fb:9a:56:e5:55:be:
         c1:59:14:18:81:6c:2b:87:f9:d2:fb:2c:9d:fc:ac:b3:7e:c9:
         fa:bc:10:c6:73:c6:84:8a:59:95:08:3d:08:05:4d:04:10:bb:
         a8:dc:54:b6:3a:f3:1e:f9:db:2e:92:11:8f:26:c7:ad:73:e2:
         d0:89:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:56 2025 by rpki-client