Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
File:                     yOkLFy-IviG7mdVz_XWyf1v3RcI.mft (raw, json)
Hash identifier:          WOO+ytOZd8lnJF303acR8YrmLTGBoH8Msv5KqThzTzg=
Subject key identifier:   93:FE:0E:7A:C9:AE:BE:72:FB:51:96:CF:14:06:C4:5C:A6:1D:71:44
Authority key identifier: C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2
Certificate issuer:       /CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
Certificate serial:       01967A8D76C706D3447BC6AD32F9E790CA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
Manifest number:          1146
Signing time:             Mon 28 Apr 2025 04:00:13 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:13 +0000
Manifest next update:     Tue 29 Apr 2025 04:00:13 +0000
Files and hashes:         1: DruMjLoGzTbfpdC-U-WNttTm1_E.roa (hash: SsRWSqMHnifAjAWueilvP4vmdjzH/KuaOCO7NOMeoV8=)
                          2: yOkLFy-IviG7mdVz_XWyf1v3RcI.crl (hash: DRBOcZzZ3C8X4w2CvwVy9qfEhQ0zrMwY5GCN76fTi3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:8d:76:c7:06:d3:44:7b:c6:ad:32:f9:e7:90:ca:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e90b172f88be21bb99d573fd75b27f5bf745c2
        Validity
            Not Before: Apr 28 04:00:13 2025 GMT
            Not After : Apr 29 04:00:13 2025 GMT
        Subject: CN=93fe0e7ac9aebe72fb5196cf1406c45ca61d7144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:90:7b:f1:6e:05:c2:1f:4f:ee:18:53:a8:cf:
                    5c:d2:eb:f5:dc:b9:b9:1c:46:d3:64:27:9d:2a:26:
                    5e:c3:de:8b:d5:4d:fc:6b:39:88:83:98:00:a6:4a:
                    78:37:a4:81:89:4a:25:de:d6:18:de:9f:e5:1f:fd:
                    2b:ef:19:9c:91:4a:1b:c2:ea:81:2e:5a:a5:aa:b7:
                    4a:6e:99:1b:3a:32:44:a7:a8:7e:6c:84:7a:d9:9f:
                    36:cb:14:0c:89:1d:90:47:4a:40:eb:80:24:b2:f2:
                    69:b9:5d:1f:27:c4:e0:d6:67:a7:b4:2e:ae:8b:34:
                    9d:b3:40:b6:a2:3b:67:e8:92:02:b0:b7:c6:9c:6a:
                    a8:32:f9:92:10:cf:a3:e0:87:bc:8a:7c:12:38:26:
                    56:72:e9:53:b9:cb:f5:71:3c:3e:ca:f2:0e:c3:70:
                    47:01:30:eb:6f:fe:23:31:76:8a:0b:73:7e:e3:e5:
                    e2:7f:f0:7a:ab:35:24:8d:c2:16:51:69:b8:58:8a:
                    c3:21:a1:5e:f9:2d:26:54:6c:6e:44:1f:91:73:d5:
                    c6:e3:a2:c0:b4:26:09:81:c9:41:f0:de:01:0a:4f:
                    b6:0c:fa:36:ce:aa:92:d6:d3:fa:3e:5e:3e:12:1b:
                    8b:fe:84:3f:f2:5c:46:61:53:1b:6f:ec:66:36:7d:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FE:0E:7A:C9:AE:BE:72:FB:51:96:CF:14:06:C4:5C:A6:1D:71:44
            X509v3 Authority Key Identifier:
                keyid:C8:E9:0B:17:2F:88:BE:21:BB:99:D5:73:FD:75:B2:7F:5B:F7:45:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOkLFy-IviG7mdVz_XWyf1v3RcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/08c4a7-4d2a-4d1c-8b8e-56c5d76ddcd8/1/yOkLFy-IviG7mdVz_XWyf1v3RcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:22:94:5c:47:7c:6c:ca:72:ce:47:3a:73:b8:76:2c:a8:c4:
         8d:12:27:e8:8a:f9:ac:69:e0:11:bc:9b:9d:76:f9:d7:79:f1:
         86:ff:56:fd:d9:0f:5a:0a:3a:01:71:cf:c4:21:5b:7f:61:80:
         fc:89:58:a9:78:d7:54:3c:a9:9b:a3:f9:67:b6:af:bf:54:aa:
         e8:e7:6f:01:5b:0c:17:e4:ea:5d:5f:d9:35:b9:c9:59:ca:96:
         27:fa:c3:de:08:72:4d:c4:e7:ba:88:c2:2e:df:c8:ac:8b:7e:
         df:46:c8:fa:54:60:e9:31:37:1d:98:1c:11:8e:ab:a8:b7:d4:
         a4:bd:f7:95:20:1b:42:10:07:6b:64:27:5e:c9:bb:97:09:9e:
         d9:13:8b:fb:50:6f:65:6a:fa:32:2c:bd:36:ae:56:ff:0e:fd:
         ba:c8:bc:c3:56:9f:76:65:0e:b8:a2:40:6d:01:1b:9b:8f:11:
         a5:c6:2e:a1:b6:a1:95:94:d7:74:30:a6:28:56:c7:db:f8:f9:
         50:ea:85:78:bf:fa:ea:1d:43:b5:cf:2c:d2:69:66:db:96:72:
         0e:76:c8:e6:f1:b0:ee:ea:a4:dc:82:0e:ca:94:38:a1:13:64:
         77:33:86:54:4f:8e:fc:a4:08:5d:39:72:e2:35:07:f2:2f:c9:
         57:8d:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:02 2025 by rpki-client