Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File:                     yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier:          7MFDu/WKOcntpEdF33TWKrjDhgXWY0Tx/vnGkfnBisI=
Subject key identifier:   99:C4:59:87:C2:35:E1:CB:B7:93:D3:B8:6F:C0:E5:B5:F1:46:28:F4
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer:       /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial:       019676E7CF3EC54A1F4BD94CB14A1A95344D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number:          0160
Signing time:             Sun 27 Apr 2025 11:00:25 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:25 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:25 +0000
Files and hashes:         1: Zja22H7huKyd4DPgiFnlD1La7Es.roa (hash: AXLErsCzJc/qr3Tna9lN0B3Ap4Vz9K2Svk3Dy2hJER8=)
                          2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: J7tyaYefk5ihnmVpvlDAF45druy+nqEXMrcP/PcT7OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:cf:3e:c5:4a:1f:4b:d9:4c:b1:4a:1a:95:34:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
        Validity
            Not Before: Apr 27 11:00:25 2025 GMT
            Not After : Apr 28 11:00:25 2025 GMT
        Subject: CN=99c45987c235e1cbb793d3b86fc0e5b5f14628f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:07:1f:67:3f:f0:26:94:e4:1c:37:2d:b9:67:
                    c8:1a:f4:11:99:8b:af:7a:cc:c7:85:c8:73:82:d7:
                    9f:e4:7a:44:81:33:52:77:22:b6:8e:26:23:b5:a2:
                    8f:52:e1:22:c7:cd:78:2f:80:5e:4f:7f:0a:c5:e5:
                    63:37:9a:3d:ce:2d:5b:64:4c:31:65:1b:09:66:f9:
                    4c:9e:65:95:38:21:47:54:94:44:bf:9c:f7:83:60:
                    e0:7d:f7:9d:23:fc:f3:b8:62:b7:a3:7d:9f:64:a8:
                    f8:80:31:b7:e0:c2:d2:ca:01:3c:a2:18:8e:90:df:
                    3c:0d:0d:9b:72:7e:86:d4:23:44:5e:b6:65:ab:27:
                    29:39:38:e4:ed:23:6b:29:44:13:07:8f:c9:6f:07:
                    1f:2f:55:c7:1c:a6:b6:ec:b4:97:e6:35:d1:35:93:
                    3f:71:e3:d7:a5:b6:d9:58:43:9c:96:fe:c0:01:d0:
                    e0:cc:fa:cb:5b:a8:07:2d:7b:5f:e4:3b:7f:0d:00:
                    6a:3f:ea:1c:d5:af:d0:66:6b:06:15:93:85:19:69:
                    ca:e0:85:2e:22:a4:b1:34:81:99:37:2d:22:a8:17:
                    e1:6f:27:c7:6f:14:97:14:95:fb:ab:88:dd:73:c3:
                    1e:20:b7:88:53:21:10:ce:61:c6:85:88:ac:93:21:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:59:87:C2:35:E1:CB:B7:93:D3:B8:6F:C0:E5:B5:F1:46:28:F4
            X509v3 Authority Key Identifier:
                keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:bd:c4:cf:4a:2f:4f:34:93:70:0f:f7:81:91:2c:bd:f2:f0:
         39:20:62:52:b5:f9:fc:60:ad:57:b2:4b:ee:7e:dd:59:09:49:
         d3:1b:30:77:1d:5e:5a:c7:93:19:54:3d:22:79:a6:4f:f9:a7:
         1a:89:b7:bb:8e:55:bb:3a:dd:bd:2f:c6:d9:18:4b:41:fe:ce:
         93:e5:31:d5:c9:c6:12:ff:75:2b:fe:4a:a0:5a:42:69:ba:4d:
         8e:da:bd:19:84:3b:aa:e7:f5:8c:74:e7:c5:97:ee:33:ac:99:
         15:c4:a2:72:d7:99:87:96:ac:ae:3c:35:44:74:9c:76:5a:1c:
         4f:5b:9b:98:a2:db:55:78:bc:cb:2c:91:ea:20:74:94:0c:32:
         04:66:51:33:fe:7e:f0:d0:53:e3:fa:2d:15:8f:8c:44:84:b8:
         b4:8f:14:72:3a:2d:d0:56:21:e5:f6:17:d8:13:4b:0c:84:99:
         07:fa:bd:d3:71:14:ed:e5:72:3a:1a:a5:c2:f5:e6:4f:be:3d:
         2e:b3:7f:24:31:69:4a:c8:60:a5:f9:28:c0:2b:1b:8e:b9:0f:
         e4:5b:72:4d:34:1e:fc:ed:5d:38:06:ab:3b:33:c3:f5:2c:cc:
         65:34:07:e2:96:43:99:e7:36:53:dc:36:6a:19:bf:56:d3:ed:
         7c:2b:98:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:46 2025 by rpki-client