Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File:                     ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier:          PXQrtTDiFjAH5Del6KE782lo9ty7edHWKMfV0n1X9Uk=
Subject key identifier:   86:83:B5:8A:47:43:E3:D3:6B:5C:A9:E3:5F:69:72:B9:8F:97:55:45
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019683FEF93BC6E165DD410B948F95069034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number:          04FF
Signing time:             Wed 30 Apr 2025 00:00:47 +0000
Manifest this update:     Wed 30 Apr 2025 00:00:47 +0000
Manifest next update:     Thu 01 May 2025 00:00:47 +0000
Files and hashes:         1: ArFunhGUh4z5gE5BaMxIilumjuo.roa (hash: +Y+pIXJkKqGVxuRKoBP5VqtBPTsF8z5U0O22HLQqFaA=)
                          2: byUVA5qV1IbcwSPIkfdvjR5Q_jI.roa (hash: dK4W//mWQId08viaOEDpjWgfsu+tE5gfBKP2LChtCus=)
                          3: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (hash: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=)
                          4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: hkI4CR8emXDuKggSzC9ndab2I5OOOBfTuTEudGf4uqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:fe:f9:3b:c6:e1:65:dd:41:0b:94:8f:95:06:90:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Apr 30 00:00:47 2025 GMT
            Not After : May  1 00:00:47 2025 GMT
        Subject: CN=8683b58a4743e3d36b5ca9e35f6972b98f975545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:4d:42:7d:1d:8e:7d:f2:80:52:39:99:b2:
                    27:b0:ae:55:22:8c:d6:03:24:84:63:a1:7c:4d:3a:
                    ec:20:80:b2:aa:24:32:0c:69:8f:59:af:cb:90:46:
                    50:e8:5d:cb:cc:04:4d:dd:ca:23:4d:6a:06:81:9c:
                    25:7d:5a:90:af:11:1d:6b:0a:b3:85:e7:24:85:65:
                    f7:93:62:2d:a4:b0:fd:bd:54:6f:ab:44:ec:ee:25:
                    b9:78:bb:07:dc:23:58:fd:51:98:bd:42:28:15:3d:
                    42:b5:be:47:92:69:a7:8a:5a:7a:fa:f9:ab:a2:17:
                    c2:8a:1c:1a:4c:2f:9b:75:2e:52:98:f2:df:64:86:
                    bf:08:0c:53:0e:6c:d9:5c:b0:5e:30:f9:80:46:51:
                    6b:a0:d7:d0:a9:e5:61:1d:98:ce:e3:8a:1a:44:1f:
                    10:92:eb:9a:d0:ee:6e:b5:e2:2b:06:07:61:8f:6d:
                    64:1c:ba:3d:bd:e2:02:d8:8f:44:7b:77:77:5f:9d:
                    43:29:3f:22:55:60:40:27:98:bd:ff:5b:82:80:3c:
                    ba:64:34:6a:d5:3a:da:be:7f:4d:80:38:e3:28:c0:
                    f0:a2:e4:33:b5:f2:95:12:7f:7d:b0:80:c0:92:ba:
                    ce:50:b6:b2:ea:0b:51:b5:ac:a2:bf:9d:e3:4d:2c:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:83:B5:8A:47:43:E3:D3:6B:5C:A9:E3:5F:69:72:B9:8F:97:55:45
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:fd:30:8c:24:e7:bc:37:e7:35:92:3b:18:3c:87:c5:b6:
         c4:72:87:75:99:57:cf:b7:fe:5d:1a:4c:8f:2d:d7:d2:35:ea:
         e0:6e:75:c4:cc:c9:11:67:05:f2:14:44:70:f5:7c:7c:25:c8:
         07:b1:dc:8a:e6:ac:4d:db:9d:d2:d5:3e:ed:ac:bf:6e:a7:63:
         2d:84:ca:46:5f:ec:91:d4:03:9d:69:27:75:eb:f0:97:65:d6:
         19:71:e0:cd:96:22:2c:53:47:3a:89:27:1a:79:2e:96:ac:96:
         dc:5f:44:87:51:4f:df:1b:3d:2a:15:fa:4c:da:bc:d5:96:6a:
         83:6a:ae:e0:e7:e5:6c:95:71:cf:3c:98:d3:56:6d:7c:0b:01:
         43:c7:28:27:18:07:ab:b2:06:f3:1f:d1:3c:49:63:8a:75:f6:
         a7:0e:aa:c2:2e:a5:c0:1e:05:6c:ae:1d:21:79:46:ad:a5:1c:
         41:d1:2b:05:8b:9d:a7:3d:94:e1:4b:8d:25:55:3e:58:5c:45:
         02:25:9a:d8:17:e2:99:95:c9:76:fe:3b:30:e5:f7:fa:2f:23:
         09:86:b3:90:de:c6:50:17:03:a1:1e:26:7a:2d:02:bc:85:d9:
         a1:c6:a9:8d:16:d1:77:e3:2f:8c:52:9e:e1:f4:e9:dc:ed:97:
         bd:30:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:16:36 2025 by rpki-client