Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File:                     L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier:          pP029lhLgIJjhG6Q99uG1X0qETLWMmLgtbAuwI6/Msc=
Subject key identifier:   42:5F:CE:10:AC:8F:0F:1C:CE:C2:DA:70:33:D1:7C:71:B0:12:75:FD
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer:       /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial:       0197711A38BAF6B87A7741363AEEBA45E863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number:          0498
Signing time:             Sun 15 Jun 2025 01:00:33 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:33 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:33 +0000
Files and hashes:         1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: DmcZpSrYMVBhas/gwKPxCsPjDz3sebVHwGh9xquqZn4=)
                          2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
                          3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:38:ba:f6:b8:7a:77:41:36:3a:ee:ba:45:e8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
        Validity
            Not Before: Jun 15 01:00:33 2025 GMT
            Not After : Jun 16 01:00:33 2025 GMT
        Subject: CN=425fce10ac8f0f1ccec2da7033d17c71b01275fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:00:86:cc:ec:e6:46:aa:b3:ea:2e:2f:e1:
                    65:87:90:32:63:9f:9e:f4:82:a1:36:e9:3b:42:08:
                    fe:c5:c8:49:42:46:5f:89:13:7a:ac:d0:ec:e3:79:
                    b0:93:ad:90:11:95:56:02:81:47:a0:e4:d1:a1:56:
                    82:dd:7b:6d:b5:80:05:4e:1f:98:5d:f6:ae:23:21:
                    48:11:01:7a:5d:89:0b:cf:16:4b:29:8c:fd:d2:43:
                    5d:0c:d4:13:9e:dc:5d:0f:82:0c:1a:1b:6f:0b:0c:
                    30:ee:ee:43:66:16:4c:fc:9c:1b:cc:90:70:d7:d3:
                    56:2c:b1:08:fe:1a:1f:ba:46:9a:78:40:fe:15:eb:
                    1d:2e:34:ec:5a:33:fa:93:35:21:e0:cc:de:15:0b:
                    a3:c8:f5:93:85:cb:19:62:f5:d8:f2:b6:6a:12:89:
                    4c:6e:e3:05:db:a8:d5:c7:b5:52:94:ad:7c:98:db:
                    2a:bb:3c:17:bc:fd:9a:a4:d2:3e:3a:95:12:a0:30:
                    d0:21:d2:bf:9e:a2:27:c6:ec:9b:29:0f:13:61:77:
                    da:b1:d4:fb:7e:0f:fc:e4:0f:28:07:92:ac:76:e7:
                    07:ad:83:06:16:1b:b0:dd:1a:a3:24:d8:bd:6d:0f:
                    15:7a:7a:28:43:2e:34:b3:7a:a8:e5:46:87:3a:4e:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5F:CE:10:AC:8F:0F:1C:CE:C2:DA:70:33:D1:7C:71:B0:12:75:FD
            X509v3 Authority Key Identifier:
                keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6b:1c:6a:15:2c:a8:8a:34:1c:b7:12:08:5f:34:0c:aa:14:
         54:f1:09:f8:e1:cc:f1:64:97:06:76:9e:c1:b6:82:f9:05:ef:
         45:e3:68:eb:01:8b:cf:93:b4:a8:ca:54:8f:db:7d:32:6b:ad:
         0e:f2:59:e2:0e:7f:8d:03:9e:9d:77:f1:8f:77:d7:7b:d6:d1:
         3b:14:32:de:36:24:20:02:0d:f8:0d:d6:40:ea:3a:10:02:61:
         bc:8f:e8:6a:1d:c4:e3:bc:47:cd:c5:17:ef:a0:d7:cb:5c:f3:
         61:c3:77:03:d9:ae:5f:db:48:42:93:d6:5c:dc:fc:12:19:e4:
         8d:af:e7:bf:62:08:38:91:9d:f2:d8:4a:c1:24:7b:43:16:25:
         5d:a0:6f:82:71:9d:4c:7f:23:48:54:54:a4:c4:8d:b9:73:3e:
         9d:1d:b0:4d:95:33:d9:25:7c:fa:51:a8:d7:a2:b7:76:c7:8c:
         fa:c6:76:07:6a:80:94:f4:c3:3d:77:e8:48:4c:62:50:ef:28:
         cc:a8:30:f6:72:8f:19:a0:db:b1:4a:0c:1f:c8:16:49:d4:02:
         7f:e1:f2:06:85:c2:90:91:23:10:64:e7:66:b0:aa:02:49:54:
         77:15:08:f8:a8:27:b0:80:2b:1b:b4:b0:33:34:85:50:f8:fa:
         d2:29:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:42:24 2025 by rpki-client