Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          8Nx83KXV+CUr7MkZQrsBQRonx8pVP9GagN5VsQ5yE9o=
Subject key identifier:   F9:77:71:55:A8:AF:7F:04:3D:94:A0:15:2A:42:92:6A:B9:99:C7:74
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       01976F2BEC8C854268BB932AE97AA8555D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          0EF9
Signing time:             Sat 14 Jun 2025 16:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:38 +0000
Files and hashes:         1: 1bT_z3QhDrRtR0bAMfMHm2giTF4.roa (hash: UdAyHLTajp0O5fgzTOphNRIpwXVUSlhxrrLMkoKDUAw=)
                          2: C1FyQJSK2-uv7URyciZXxMvVb6c.roa (hash: CAmInxyQhyb9MZHRVwkcOEX1WeCGUI9sXRoPqIH4UiI=)
                          3: IELJH6M7c-qGa_xF_N_rVAXGjYc.roa (hash: QPFfU1BkEUCanKp/XJb5ENTQ74R8UjYATL4PwXWDHyg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: 2AgLCdwuyo1YzIOsTZztB8wkM8/lC/AV9v65uyJ2VKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:ec:8c:85:42:68:bb:93:2a:e9:7a:a8:55:5d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Jun 14 16:00:38 2025 GMT
            Not After : Jun 15 16:00:38 2025 GMT
        Subject: CN=f9777155a8af7f043d94a0152a42926ab999c774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:59:48:82:6f:b3:59:db:86:ab:b6:52:a4:
                    62:fe:4e:c1:96:95:1c:6f:44:88:b7:82:89:dd:4f:
                    66:e2:07:5f:2f:c6:0a:66:3c:e5:f2:8e:4f:88:00:
                    db:d3:bd:c2:10:20:46:58:89:bb:55:6d:db:cf:8d:
                    12:ca:0a:3b:18:1d:22:4b:66:a8:bc:9e:f2:44:d0:
                    28:8d:c9:b2:4d:6b:b5:07:7c:f7:84:5e:c0:0c:ce:
                    3f:80:a1:46:9f:56:cf:61:1d:3d:32:c2:a6:aa:14:
                    d6:fa:70:d4:1a:66:9c:75:44:c8:9f:fc:55:0d:54:
                    39:aa:4d:a8:27:af:41:c7:26:b2:0d:0f:ed:15:db:
                    ed:f9:bf:b1:18:34:82:4c:83:8a:c5:ab:be:1a:e3:
                    5c:e2:dc:83:33:b9:15:0f:b8:9c:56:49:c7:ea:3a:
                    65:27:52:6d:a6:a1:9b:84:ad:33:67:00:7f:5f:73:
                    8e:25:76:e8:92:8d:89:c2:bd:97:a9:86:3c:67:4e:
                    ad:39:db:97:6b:79:2d:fe:58:e2:ea:9d:5b:a6:28:
                    ff:75:65:58:e7:14:30:0d:f2:6e:0d:29:c0:83:71:
                    1c:f2:c3:81:33:69:b9:9a:12:c1:9a:0a:a5:ee:a7:
                    c3:64:f5:bc:bc:94:81:13:57:00:2a:1f:83:9b:78:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:71:55:A8:AF:7F:04:3D:94:A0:15:2A:42:92:6A:B9:99:C7:74
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:67:82:cc:77:68:da:9f:c8:7e:85:14:5e:e6:67:0f:2e:f2:
         d8:17:0e:64:94:51:3c:57:62:37:59:5d:5b:d8:91:f7:06:1f:
         e2:06:30:b2:c7:84:63:5c:97:51:ff:0f:c9:52:f4:77:5e:58:
         59:c7:ad:b4:ef:4f:0b:4e:27:12:a8:c7:ad:c9:ed:24:20:54:
         c9:bf:0a:d2:47:ff:3f:b5:3f:3a:fd:83:c8:97:04:da:9c:b0:
         0c:1f:fe:a3:6d:06:f0:9c:65:7c:74:b5:29:2e:f0:c8:29:3f:
         dd:64:ad:00:5b:d0:e3:50:0b:19:2c:a1:cb:74:1d:78:3e:b3:
         35:ff:05:1e:e7:e1:7e:fb:4a:1f:c6:12:c2:67:1f:fc:28:37:
         4f:4d:16:7c:5a:39:86:63:ef:4d:c6:ab:30:41:2e:99:0c:15:
         9f:32:bc:b7:a9:f4:81:e8:72:91:f4:64:13:6c:4a:b8:74:f8:
         65:3b:3f:80:ad:89:7f:91:86:99:00:b7:66:30:c4:4a:ea:7a:
         e0:e7:f4:33:96:04:88:76:a9:73:a8:8f:53:3d:9d:85:d0:16:
         99:c0:0b:7c:09:9e:f9:4e:32:a0:01:bd:83:fb:45:91:18:59:
         12:4e:30:8f:cb:b1:e9:f3:79:8b:4a:ed:4c:50:eb:7f:d6:31:
         a4:50:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:38:52 2025 by rpki-client