Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File:                     Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier:          VjIX6k5Vn5vGgtkIz4Ew14f+5yB0DByZceZYvYf/sRA=
Subject key identifier:   8A:47:33:29:3D:2F:0F:86:B2:82:0A:47:53:BD:DF:D7:74:7B:6D:14
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer:       /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial:       01976F62DD064827FEF7F2DBD1974B01158F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number:          0792
Signing time:             Sat 14 Jun 2025 17:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:39 +0000
Files and hashes:         1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
                          2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: eLz78/jCrAv559TvfX8ORqnHcILTxVkzvFcrwCpttbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:dd:06:48:27:fe:f7:f2:db:d1:97:4b:01:15:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
        Validity
            Not Before: Jun 14 17:00:39 2025 GMT
            Not After : Jun 15 17:00:39 2025 GMT
        Subject: CN=8a4733293d2f0f86b2820a4753bddfd7747b6d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:fd:e4:43:02:03:82:12:14:36:16:93:d8:
                    7c:af:94:3d:9d:3f:36:ff:39:4e:4c:49:94:0c:c0:
                    c1:26:e5:83:12:96:75:4e:91:fd:7e:31:81:74:60:
                    f3:4e:7d:23:7f:1d:1d:57:11:c5:50:d8:44:f0:3a:
                    a2:f2:b4:f2:66:c8:f4:5b:0c:9a:43:d3:20:22:db:
                    73:c1:35:9c:3e:f7:f0:e7:51:0a:5f:98:d4:4d:51:
                    aa:8e:25:4a:d6:de:1f:5e:cb:b7:d9:ca:9c:3c:06:
                    c6:0b:51:8a:9d:93:fc:04:5f:80:ef:fd:81:5f:b4:
                    d0:3f:37:1e:b1:96:b4:1a:d4:f7:4b:0f:46:50:1f:
                    54:bd:fd:9e:92:2d:77:72:50:92:1a:bf:fb:8e:48:
                    9a:42:7f:01:a1:e2:60:3c:d1:68:06:83:e8:3f:63:
                    04:e7:18:05:e0:dc:4e:7a:f3:aa:78:bb:82:3f:e2:
                    d6:8a:50:c4:99:14:17:4d:4d:77:6b:21:10:5d:f5:
                    5b:01:cc:44:5f:83:40:a9:81:92:db:f6:4b:3c:1d:
                    71:5f:77:d4:7b:0b:ed:b9:6a:80:d6:ef:41:ea:0f:
                    cf:d5:f6:05:d0:b4:80:7e:92:68:60:3f:ca:38:22:
                    ff:b1:f5:a2:78:37:ca:ed:91:cf:97:70:2e:99:6d:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:33:29:3D:2F:0F:86:B2:82:0A:47:53:BD:DF:D7:74:7B:6D:14
            X509v3 Authority Key Identifier:
                keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:2d:fa:3c:9b:35:6e:e0:98:12:5a:e2:6d:13:60:c0:da:
         61:58:73:7d:be:aa:fd:dd:32:fa:28:1d:42:41:3f:48:74:00:
         68:6e:92:11:f5:aa:da:b3:38:8a:51:0c:f9:db:22:28:b0:66:
         24:36:a1:37:36:d5:a4:2e:8e:d5:02:e0:c6:af:35:ae:f0:08:
         e5:36:0c:18:42:8d:3b:04:2c:e4:59:3d:8b:b3:b2:f0:51:1b:
         0d:56:40:67:93:cc:ba:29:95:51:3b:4b:a6:97:83:1b:f3:4c:
         61:75:3f:1d:5b:33:7c:79:65:a6:da:48:24:06:0a:a4:56:67:
         70:d4:9f:d1:eb:96:22:8a:d3:d7:9c:ae:c2:74:28:34:66:94:
         96:c8:d9:d8:bd:c1:89:28:6e:ad:e4:05:69:62:ac:6e:95:8a:
         21:02:a4:45:a9:10:40:f2:a8:94:f7:cd:9f:12:09:48:27:86:
         6e:e4:e2:b7:fc:5c:f1:2c:60:9c:19:7e:66:0d:13:bc:9f:7a:
         6d:48:f5:5c:cc:3d:c4:6d:16:34:a8:bd:43:06:d2:82:96:e1:
         f2:4f:96:5e:c2:bb:70:a5:74:dc:33:1d:b7:d6:41:27:a3:e0:
         2f:de:06:81:0b:df:d9:a5:8f:d6:db:bb:4a:53:5d:8b:97:de:
         46:18:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:24 2025 by rpki-client