Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          IJNXWA2JMJyRiKxlfwWx0MxrLf3IrhZEZWhBfj7cxj0=
Subject key identifier:   82:1A:FC:6F:86:37:C0:A0:65:04:92:87:51:7D:D8:DF:88:CE:66:E9
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       01967D8E94664CED129C18A9AE7F98AC4B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          0481
Signing time:             Mon 28 Apr 2025 18:00:18 +0000
Manifest this update:     Mon 28 Apr 2025 18:00:18 +0000
Manifest next update:     Tue 29 Apr 2025 18:00:18 +0000
Files and hashes:         1: C8L1z84_2r_lzc2Lk6eIdrAoayw.roa (hash: phPZynXPFJJG35B8r3oO6DnbXPe6XC6xJ8y/JrqkIqE=)
                          2: NGUX_wUecUWqzbndlWjKyvgn_L8.roa (hash: 17HMuISkbpyzncjWQXNjl1zx9g2Y5g9g+2mcpzxaFWE=)
                          3: RL3xJ4ezhmNdZ1rcVqISik-0MMo.roa (hash: xlGD8LTXAgZF6ai7L4BH7qy3aFEkBhgRkokviaW4/Ws=)
                          4: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
                          5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
                          6: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: Fuf987HAHY7ePWY1fs7LaFWUxG2F/Sq9HywkuJTXvAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:8e:94:66:4c:ed:12:9c:18:a9:ae:7f:98:ac:4b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Apr 28 18:00:18 2025 GMT
            Not After : Apr 29 18:00:18 2025 GMT
        Subject: CN=821afc6f8637c0a065049287517dd8df88ce66e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:95:00:cb:29:08:47:35:41:c0:27:54:9f:cc:
                    be:d5:88:c5:89:ea:d6:9b:c1:c4:f4:9f:7e:e4:e3:
                    e7:5e:dc:ac:37:f5:0a:da:2e:95:7c:5d:9e:fb:9e:
                    a7:a8:be:06:9e:57:06:c6:6f:0f:af:dc:66:95:80:
                    81:44:d5:9e:1d:c8:3d:09:a2:48:f8:2c:82:aa:9e:
                    03:be:52:93:ca:21:d9:53:3b:ca:34:d9:31:f7:f5:
                    23:b3:41:26:f9:0b:3e:11:ba:7f:0e:27:a2:70:66:
                    49:10:a4:1b:4f:31:31:4e:65:f9:63:f4:9b:73:f7:
                    53:a6:9c:f8:0e:e7:10:6b:7f:57:ce:5b:7c:47:6a:
                    1f:86:c7:d1:7d:13:3a:10:aa:47:f5:ac:09:de:e6:
                    3a:26:ce:dd:e1:de:0d:23:e5:99:3e:1d:07:62:e3:
                    bb:7a:f6:8f:ac:c4:82:cf:1c:65:5f:78:e1:7b:21:
                    bf:3f:6e:b8:30:e6:ff:23:19:23:2a:02:c7:2c:19:
                    1e:62:cc:50:b4:94:90:5c:3a:82:35:32:0e:df:22:
                    38:d5:71:90:d0:bd:55:12:cc:9e:dd:20:cd:40:b0:
                    97:c3:19:1e:20:60:63:00:35:0c:4e:d5:48:00:42:
                    a3:cd:b8:1e:76:9c:07:5a:3c:a9:6b:b5:36:ae:d4:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:FC:6F:86:37:C0:A0:65:04:92:87:51:7D:D8:DF:88:CE:66:E9
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:ab:67:5c:3a:80:71:46:97:a6:bc:ab:28:f7:6f:38:7a:
         1d:d0:e9:7d:8d:65:41:fe:1c:a2:cd:b9:70:4e:a1:d2:4d:5c:
         06:37:68:6e:0a:8d:54:d6:ec:06:96:1e:a0:ec:90:03:9a:87:
         d0:44:26:26:58:b2:91:4f:24:5d:89:4f:c5:ec:15:ef:03:e8:
         ba:2b:23:17:4a:8d:42:5a:27:39:08:8d:c3:40:01:33:18:3c:
         2a:1c:f4:55:20:07:44:21:e3:8b:5a:c5:90:91:34:b2:0b:b2:
         b7:e5:83:78:db:01:9e:59:f7:d7:58:d4:4f:51:21:a8:d0:26:
         46:56:ae:03:b2:66:1f:37:bf:a3:09:b0:d6:b0:5a:c0:4e:c1:
         f0:34:97:13:7b:f8:b8:db:2d:9f:b2:51:22:a6:4b:a0:fe:a2:
         bf:fb:1a:27:79:d0:cd:cd:70:ac:f6:09:77:c4:c4:f8:98:92:
         2b:b8:66:e1:18:a9:b8:88:e6:55:b8:f9:a2:73:88:80:1f:b5:
         c2:c7:9f:68:76:ec:99:3d:69:ac:39:a1:ea:f0:5b:b8:e2:ea:
         70:bd:d7:db:93:69:af:db:e0:0f:63:52:64:bb:ca:40:1e:48:
         1d:74:4d:56:dc:e7:95:47:d1:8c:b4:8c:ed:aa:32:52:84:02:
         81:78:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:45 2025 by rpki-client