Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File:                     Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier:          QaG+nIWGZ4Z9rUVn9uCH/rg1IyAILOS0RBs3f/DmTK8=
Subject key identifier:   CB:04:10:FF:60:88:CF:BE:27:94:B4:7C:F6:52:0F:57:96:F0:F1:80
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer:       /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial:       01976F2CD5BCBE19C49B54373CCAC9691E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number:          2D
Signing time:             Sat 14 Jun 2025 16:01:38 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:38 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:38 +0000
Files and hashes:         1: 3OrX-Bx_5Y7rOdWC35EMVBiLsiM.roa (hash: Hcg3Yc6y08nDt8RGm5cjhZE+4ENH1m8OZY89OLwGe7s=)
                          2: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: BqF3S6gBP9vn8QyEg3RkIDAGLlzWISEEecmeUKS2rHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:d5:bc:be:19:c4:9b:54:37:3c:ca:c9:69:1e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
        Validity
            Not Before: Jun 14 16:01:38 2025 GMT
            Not After : Jun 15 16:01:38 2025 GMT
        Subject: CN=cb0410ff6088cfbe2794b47cf6520f5796f0f180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:8c:e1:88:88:4d:b9:68:b4:91:96:91:5f:
                    64:de:1c:a4:a3:74:fb:59:07:4d:c7:4b:f7:06:3a:
                    36:68:f2:7d:6f:ad:a0:bd:72:65:6c:88:00:20:2e:
                    3d:a3:6c:84:90:27:c1:83:79:dc:81:93:7c:b0:13:
                    b9:4b:91:3b:4e:67:03:d8:22:f9:77:cb:36:ff:e8:
                    7e:c1:f1:ee:a8:f0:dd:e7:46:2d:f6:22:61:ca:79:
                    00:48:30:09:90:b1:b5:41:a7:65:0a:a7:3d:04:7c:
                    57:64:8d:75:d5:2e:1e:4a:a4:5f:29:4f:b8:f6:ce:
                    6d:eb:5c:b4:d4:cf:37:87:a6:09:1c:e4:59:50:50:
                    0d:35:e0:72:10:0f:26:8a:1e:16:99:47:e0:98:b8:
                    3e:9e:13:38:51:c3:76:d9:29:2c:1f:2d:fd:59:2e:
                    7e:c6:1f:94:e2:34:f4:69:2e:5b:35:15:61:16:4e:
                    d4:17:05:8d:f1:94:1c:c4:0f:12:60:00:50:47:1e:
                    f3:70:d8:f0:89:c8:6c:34:3b:48:74:57:5a:ab:ad:
                    aa:25:4b:f0:c5:73:ba:a3:2b:4f:a1:63:fd:2d:8d:
                    a0:24:73:e1:04:fc:ac:01:48:29:36:37:e0:49:be:
                    bd:46:ef:e3:19:77:f3:08:7c:33:b2:c7:69:12:d6:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:04:10:FF:60:88:CF:BE:27:94:B4:7C:F6:52:0F:57:96:F0:F1:80
            X509v3 Authority Key Identifier:
                keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:b0:df:8a:26:70:af:0e:20:c4:af:69:b0:2a:8f:19:ac:
         c2:99:a3:d8:33:09:0b:1f:f1:41:98:c2:99:7f:cf:b6:6c:a4:
         30:56:05:84:70:6e:a4:43:14:cb:f6:d8:d0:6b:8d:ae:9c:77:
         0c:e0:45:c9:9d:b0:09:03:6d:98:5e:24:f5:2b:48:b2:77:ee:
         d4:b7:5c:80:ae:b7:9a:59:3e:fd:6f:2d:49:0c:b3:ef:a1:d4:
         44:dc:57:b2:3a:23:47:63:4c:d5:ba:9a:6e:12:f8:7e:04:e1:
         7b:48:16:5f:f3:4e:b4:69:d3:9f:a6:ed:4c:4a:75:3f:f0:60:
         ba:e1:cd:4c:bf:15:29:0a:70:c0:fd:6a:10:40:80:4d:6a:ea:
         99:a4:c7:8b:86:75:cb:bb:3a:70:56:35:72:5c:ae:92:fb:dc:
         00:be:0e:b0:e3:01:2c:3f:da:6d:c0:f9:e3:3a:7e:11:6e:20:
         5d:24:0a:8a:5c:35:ce:82:e1:2e:3c:62:8e:f0:96:88:02:a7:
         f8:b9:7e:2e:dc:f4:0c:40:89:84:07:2e:cd:8a:13:b1:d6:cf:
         b2:d5:f2:5e:39:f5:bc:52:4b:d8:5c:9a:21:0c:33:0f:ac:be:
         a1:6d:f0:24:d7:96:39:ca:3c:4b:5a:4b:d9:26:9d:4b:88:23:
         02:e6:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:51:06 2025 by rpki-client