Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
File:                     mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft (raw, json)
Hash identifier:          DLsoWNf24WaMbf/P6r1d9eLSO65fkZbcYERInsgl9AY=
Subject key identifier:   D5:57:57:A9:F6:6D:54:F6:D3:FC:D3:A5:15:6B:C2:E2:DF:A3:C1:DA
Authority key identifier: 99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6
Certificate issuer:       /CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
Certificate serial:       01976E19DEBA3002BAAAC71B2055F6960294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
Manifest number:          0C71
Signing time:             Sat 14 Jun 2025 11:01:18 +0000
Manifest this update:     Sat 14 Jun 2025 11:01:18 +0000
Manifest next update:     Sun 15 Jun 2025 11:01:18 +0000
Files and hashes:         1: YErVt-7gu1jQqcup8-GVaaYjMj4.roa (hash: nT1lcrWfw1dtZ1xk/0YupjRA64MYT4KdIF9Y0byNnSM=)
                          2: mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl (hash: ay9kd3N3IsZ2ezZ2Z8hMegOMNU6yGgGJ1S544DOdj2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:de:ba:30:02:ba:aa:c7:1b:20:55:f6:96:02:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9980c70f76f0b5f5c8457a0337ad5d63122cf7e6
        Validity
            Not Before: Jun 14 11:01:18 2025 GMT
            Not After : Jun 15 11:01:18 2025 GMT
        Subject: CN=d55757a9f66d54f6d3fcd3a5156bc2e2dfa3c1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:86:9e:98:21:4c:e0:97:f0:be:e4:7f:05:
                    20:c6:e9:28:63:b6:76:b9:57:37:6f:5c:4c:a0:f6:
                    e1:c5:ea:0b:ce:11:b2:ec:68:f3:c6:27:30:9a:49:
                    e9:51:00:00:24:e4:96:86:04:45:3a:95:c5:b9:39:
                    a1:d7:cc:54:af:e9:6a:ba:51:92:17:48:e5:4f:be:
                    40:7b:4a:6d:2e:a2:50:52:bb:0e:bb:69:14:db:5e:
                    05:e1:83:c4:06:9e:24:7d:c3:32:23:e7:75:50:aa:
                    11:6b:b5:d7:60:52:7b:5f:af:20:a5:83:13:13:bc:
                    71:09:9f:96:54:62:24:4f:d9:96:87:45:eb:07:6c:
                    9e:f5:fb:ba:ae:5d:2e:ea:ce:82:5c:a5:ce:52:a4:
                    ae:54:4c:45:0d:7a:61:84:94:16:42:fb:d3:2d:20:
                    65:c2:68:cd:83:f1:93:2e:76:73:08:d1:d8:84:74:
                    50:39:2f:f0:58:38:f8:53:19:9a:f6:fa:73:d8:ce:
                    2a:3d:a9:07:b5:6e:56:34:0d:51:29:dd:45:c6:8e:
                    ef:8b:6b:00:67:46:60:ed:82:f0:0c:76:2e:35:b1:
                    7b:fb:c2:28:93:2d:e3:72:84:ee:2f:93:e2:1f:70:
                    cc:7d:44:a2:49:6f:61:ce:4f:8a:a0:dc:09:85:92:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:57:A9:F6:6D:54:F6:D3:FC:D3:A5:15:6B:C2:E2:DF:A3:C1:DA
            X509v3 Authority Key Identifier:
                keyid:99:80:C7:0F:76:F0:B5:F5:C8:45:7A:03:37:AD:5D:63:12:2C:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYDHD3bwtfXIRXoDN61dYxIs9-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/42ec68-d433-4000-906c-c3eae6b0fb9c/1/mYDHD3bwtfXIRXoDN61dYxIs9-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7d:66:b2:32:07:74:8b:da:68:52:92:c9:49:fc:e6:0a:53:
         c8:14:cf:d0:34:0e:4a:5e:ac:e0:88:81:b1:8a:ec:ed:0a:06:
         32:f3:34:96:93:1f:0a:2f:17:57:a1:05:40:cb:be:c8:9d:08:
         ab:11:5c:c0:22:fa:31:3c:ee:96:cd:5e:4b:2f:7c:ee:99:3a:
         e9:c0:aa:47:fc:c3:a0:f3:ca:15:52:18:c2:9e:e2:2c:2a:99:
         b3:89:b6:b0:91:d2:03:b6:9e:72:e6:ac:b0:c4:46:ba:2a:8f:
         9a:68:de:db:2d:4c:bc:09:d2:39:ec:d6:2b:53:c0:6b:1b:e1:
         79:b7:08:a0:2f:85:da:33:31:ca:8f:ea:53:7d:6d:cc:c9:38:
         3e:1c:3d:3b:6b:9d:04:2f:c4:64:fc:e6:3e:79:a5:73:65:26:
         04:f1:1b:b1:20:3c:fe:13:25:86:62:5c:9e:a3:35:2d:88:52:
         91:a7:ba:fe:18:70:61:e3:09:a8:a8:a2:2f:2e:e0:25:59:05:
         7f:c7:47:a9:6a:9d:a4:b2:33:96:79:e3:37:4a:5d:55:37:4e:
         ee:15:96:e8:da:54:f6:07:56:4f:25:ab:ea:9d:e8:b6:dc:b8:
         a9:bb:5f:86:e3:17:0e:83:cf:32:6f:75:bc:d0:e3:49:e7:86:
         08:57:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:39 2025 by rpki-client