Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
File:                     YihBc2HBxAaumnJX2qn7BiB4LTU.mft (raw, json)
Hash identifier:          cpMC6/jRu7PyexQfUBdjDgoH073tLZL56ekhnDnrJZ4=
Subject key identifier:   CD:82:50:00:31:6F:EE:02:37:08:B9:9A:38:ED:5B:7B:81:D8:13:07
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Certificate issuer:       /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial:       01976D3E93E0E38C1CCEF24CC2691A064305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
Manifest number:          0E34
Signing time:             Sat 14 Jun 2025 07:01:46 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:46 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:46 +0000
Files and hashes:         1: YihBc2HBxAaumnJX2qn7BiB4LTU.crl (hash: IM0EaaYPuIls3226JzDvf5jo4MOTOExN1vTuXvcWvxs=)
                          2: orR6QmUobPq58IiNnqewDNf0I7s.roa (hash: cEMGLelbH1U4lpzSE43pcUZRdK2/HRG/uJ16sgFxOVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:93:e0:e3:8c:1c:ce:f2:4c:c2:69:1a:06:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
        Validity
            Not Before: Jun 14 07:01:46 2025 GMT
            Not After : Jun 15 07:01:46 2025 GMT
        Subject: CN=cd825000316fee023708b99a38ed5b7b81d81307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:82:95:5b:76:45:d1:8b:54:d0:f7:b4:f1:
                    99:a8:47:bd:30:4b:7c:ab:f8:f0:b3:a8:c9:d6:d7:
                    c8:9a:18:72:9f:f1:2e:0f:bd:01:52:1f:ac:4d:af:
                    02:80:a6:d6:dc:6f:00:09:86:93:21:97:72:97:20:
                    99:5d:d3:d1:23:a1:36:3e:75:ec:21:d0:2b:fe:f4:
                    02:fc:64:9f:25:57:30:09:d4:20:96:f7:89:3b:44:
                    6d:46:bf:ab:ec:8c:b3:2c:4e:b4:62:a0:73:ae:4d:
                    e2:19:46:3a:ed:ac:2c:b5:f0:3b:1f:fb:a5:1d:75:
                    1d:c7:1f:fc:56:8d:d2:4d:e3:f3:0b:1d:68:68:b2:
                    51:f3:59:01:ea:88:85:86:8d:26:54:f9:90:4e:ac:
                    51:ea:6c:c4:ed:d1:cb:f8:8a:a9:f1:33:9f:ec:f8:
                    8d:4b:5e:07:c3:cf:3a:ec:43:d7:99:4c:4d:82:a2:
                    9e:0c:ba:00:f9:db:23:ce:02:c2:ae:07:86:bc:38:
                    6e:c2:f8:26:a5:1d:82:18:8d:ef:79:44:4b:29:07:
                    08:c0:21:b5:94:0a:67:0f:37:f1:48:2e:b2:b1:be:
                    23:78:63:ed:b6:bc:2f:8d:65:cf:19:d6:39:3b:23:
                    49:f8:cc:3f:d6:2a:b9:8d:e5:37:82:d1:8a:2d:a6:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:50:00:31:6F:EE:02:37:08:B9:9A:38:ED:5B:7B:81:D8:13:07
            X509v3 Authority Key Identifier:
                keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:6c:75:a2:02:33:21:a6:73:5a:73:57:0c:c7:a4:03:2b:
         26:ea:af:87:de:bd:03:e4:28:53:65:1d:70:93:79:c6:ab:25:
         70:8b:4f:9a:50:92:ac:e8:6d:60:ec:0d:d1:aa:a3:21:ac:c1:
         21:a8:8a:e6:13:63:f7:0a:4a:35:ab:0d:77:5d:3f:1b:8a:b2:
         30:b8:a1:62:14:bd:03:a5:e6:c4:a1:bf:fa:f9:7a:fc:49:7f:
         45:cd:a4:6f:5d:26:6e:a6:d2:f9:9a:09:b2:95:14:76:98:b6:
         34:6b:c2:c1:82:ee:7c:9a:b7:a4:3d:23:33:81:7d:ff:05:e5:
         f6:c1:eb:e0:cf:b1:c7:a6:74:44:20:49:24:46:2a:c3:05:2b:
         98:a8:31:69:8a:de:20:3b:08:ad:56:60:1b:3f:11:1c:8a:73:
         a7:3e:8d:f3:06:7a:d1:0b:68:41:cf:a5:86:37:4a:79:48:6f:
         0f:e1:19:67:4b:e2:ae:43:55:1d:f6:19:15:c2:b9:f9:13:9a:
         4d:86:ce:8f:76:08:3a:5b:cf:0e:84:5e:28:c3:3b:8f:26:ef:
         1c:02:3e:ae:90:7b:4a:1f:f5:70:d1:50:49:1e:44:90:da:bb:
         cf:85:91:62:4e:97:d4:ef:6c:68:1c:53:ae:8f:06:50:52:d6:
         cf:68:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:40 2025 by rpki-client