Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
File:                     YPp_3868B6Jy24nNr4d4cMaH4E8.mft (raw, json)
Hash identifier:          t8uwpi4xADIeWeaK+UYIqw55VuBSKVeWwwi9OcpoE6w=
Subject key identifier:   94:53:E0:D6:6F:8F:DE:10:3E:7E:01:8D:EF:72:2F:7F:E8:5F:4E:C5
Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F
Certificate issuer:       /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
Certificate serial:       01976C623155FD8547764E40AF81CCEC2501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
Manifest number:          0403
Signing time:             Sat 14 Jun 2025 03:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:03 +0000
Files and hashes:         1: FYyJuOlatGIlA61s4f07XUGlkGY.roa (hash: Py+5NmYVZfVm5rbvNCZVmCmJkN1lML6LlEnI73AYMuo=)
                          2: YPp_3868B6Jy24nNr4d4cMaH4E8.crl (hash: B2MvsBJhgA6ulgfOu3u1b/uVlMPp5x+/oc1AuVOpkEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:31:55:fd:85:47:76:4e:40:af:81:cc:ec:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f
        Validity
            Not Before: Jun 14 03:01:03 2025 GMT
            Not After : Jun 15 03:01:03 2025 GMT
        Subject: CN=9453e0d66f8fde103e7e018def722f7fe85f4ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:cc:46:e8:7b:a0:f6:a0:87:22:aa:7b:84:
                    f2:dd:ef:17:94:e2:20:20:50:ee:dd:72:6f:aa:f1:
                    44:72:2d:b1:6b:b1:ba:0f:21:f1:32:de:7f:b5:2b:
                    04:d4:b4:35:93:eb:9d:a0:c0:3d:83:88:0e:a8:d7:
                    6f:77:58:c4:ec:ad:16:49:db:14:92:e0:24:30:e8:
                    8e:cf:0a:d7:a8:db:f1:7e:1e:66:63:b8:22:05:7e:
                    66:d5:b0:39:5c:cb:08:df:f2:4a:67:7b:d9:8b:4c:
                    5d:23:de:30:05:9d:28:36:78:fa:31:43:a2:e2:8e:
                    6c:08:1f:dd:44:8f:ca:d9:74:3b:43:e2:9c:2a:4c:
                    52:91:6d:78:7f:6a:9d:32:05:36:bd:e2:63:f4:d1:
                    03:c2:d9:c4:8f:fd:c7:92:02:0b:a1:9f:3f:b1:3e:
                    9c:a4:6b:f5:e5:36:34:3b:dd:04:b5:a9:c0:a3:a7:
                    8c:ed:0d:4d:3b:ef:98:ea:e2:94:30:ba:4f:82:4a:
                    cf:2c:1a:7e:96:4a:4d:0e:3e:ae:dc:71:32:58:40:
                    40:af:ec:d9:17:bb:52:8a:d4:0f:c3:cc:aa:bf:95:
                    a3:db:f1:f7:ec:9a:cd:45:a3:d9:26:45:4a:33:1c:
                    58:dc:79:cd:57:6c:f1:4b:ef:cd:df:d2:23:63:e3:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:E0:D6:6F:8F:DE:10:3E:7E:01:8D:EF:72:2F:7F:E8:5F:4E:C5
            X509v3 Authority Key Identifier:
                keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:13:bb:e1:86:50:57:88:d3:08:99:3a:dc:39:65:7f:70:78:
         21:5f:56:86:71:39:83:c2:b6:3d:82:a7:17:4f:c7:e4:9f:82:
         44:fb:c8:69:e2:fb:da:48:28:cd:fe:8e:93:6f:99:24:18:df:
         e6:60:78:a5:a3:ed:d4:b4:f8:ee:0f:04:2c:d6:b0:fb:fb:32:
         2b:09:57:80:ce:dd:47:51:e8:5b:1f:1d:e9:19:7b:f7:e3:17:
         cd:8b:09:2d:b5:d9:de:fa:b3:b2:c9:56:93:94:73:06:74:37:
         93:8a:b3:62:e3:bd:18:59:ee:1c:29:ab:f8:82:d6:65:89:e2:
         c3:68:04:ab:f1:f5:3d:d8:e8:14:60:b5:ee:1d:4a:b0:a4:96:
         06:dc:aa:b2:72:19:90:b1:a0:8a:97:6a:c0:83:c1:a1:9f:44:
         25:a6:19:2c:84:1e:c4:7d:33:cc:66:b5:83:c9:1c:b0:ec:1b:
         c2:5b:8d:bb:e8:f3:c3:7b:c0:15:c3:61:cd:4d:23:58:d2:99:
         2c:a6:db:e0:c9:48:4c:15:59:87:e8:08:42:d9:6f:55:d0:a2:
         7f:b6:bb:0d:c6:fb:14:8a:a5:ad:81:1b:8d:84:e0:19:0b:df:
         5d:ef:7e:3f:f9:8a:58:2c:2a:6e:8f:b8:fb:3d:0d:fe:d2:5f:
         ef:8f:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:44 2025 by rpki-client