Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File:                     YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier:          BSGC+GczqIClgicBWm00C2QHm9nUkoW2BYG0VMwY9x4=
Subject key identifier:   16:D9:ED:BE:8E:1E:10:43:32:55:BC:1D:60:AD:22:68:C7:73:C7:05
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer:       /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial:       0197876B1D1E21FE77F78B636F31AD3A5850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number:          159E
Signing time:             Thu 19 Jun 2025 09:00:33 +0000
Manifest this update:     Thu 19 Jun 2025 09:00:33 +0000
Manifest next update:     Fri 20 Jun 2025 09:00:33 +0000
Files and hashes:         1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
                          2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: n+aVwTWZTfde/RHjIsARZ41tFcbfA+mvmsp6DfgcUo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:6b:1d:1e:21:fe:77:f7:8b:63:6f:31:ad:3a:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
        Validity
            Not Before: Jun 19 09:00:33 2025 GMT
            Not After : Jun 20 09:00:33 2025 GMT
        Subject: CN=16d9edbe8e1e10433255bc1d60ad2268c773c705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:5e:b8:17:4b:5c:ac:d7:5c:dd:2e:c8:31:
                    be:90:9c:23:5b:b5:ea:88:10:f1:71:18:54:f0:9b:
                    19:18:e3:d9:3c:32:31:8a:a2:6b:a8:90:5b:19:d1:
                    fa:b0:60:8c:96:a8:81:3e:33:f5:aa:31:83:9f:af:
                    60:b8:cd:e7:34:8a:70:0e:68:90:03:53:27:07:58:
                    a7:d5:37:f3:aa:0a:00:d1:16:9b:b9:cc:5e:98:00:
                    21:87:ab:17:ac:cf:47:51:19:b1:e5:b1:c3:c8:7b:
                    bc:82:ad:de:98:4e:63:28:f3:64:01:3e:38:d4:29:
                    4e:5a:d1:2c:67:df:b7:a1:a1:c4:a4:e9:d5:3f:5b:
                    e9:33:e0:c8:e2:79:40:13:12:67:f8:11:a1:40:b4:
                    97:97:58:00:a7:da:28:ff:cd:c9:18:a9:39:3f:64:
                    aa:62:cd:cd:96:a1:3d:3c:ab:00:66:01:da:10:09:
                    be:c4:24:ef:32:ee:c8:c5:7d:95:f8:a8:d2:9b:92:
                    82:de:6f:32:f0:44:71:30:9a:3a:42:46:48:16:7b:
                    b3:66:36:4c:c2:86:ed:e7:1d:a4:79:dd:a9:a4:b0:
                    78:46:3b:12:20:f7:6f:92:4c:31:26:a0:e5:39:80:
                    f4:b8:bb:3e:8e:74:65:74:c5:22:c3:ae:c9:79:2d:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:ED:BE:8E:1E:10:43:32:55:BC:1D:60:AD:22:68:C7:73:C7:05
            X509v3 Authority Key Identifier:
                keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:0d:c8:d0:81:48:d5:19:48:fd:13:61:6c:29:1f:40:e6:
         6a:d3:41:8a:52:84:82:af:33:b3:99:60:9d:82:59:1b:75:fe:
         65:fa:db:77:ff:35:26:98:c3:a7:1b:81:a8:a8:2f:cf:a0:98:
         1b:be:d0:a9:3a:7c:d5:9b:be:0a:0e:ee:be:98:98:b8:6e:6b:
         4c:18:5f:4b:38:e2:82:a5:3a:0d:0a:b4:dd:d3:15:a3:7d:39:
         f2:8b:2a:8f:57:5b:00:2d:eb:88:06:b1:e0:81:a4:2a:a5:ae:
         9e:99:a7:2e:32:db:f2:76:ef:53:fb:da:6f:30:2a:32:31:f5:
         36:a6:50:72:0e:82:1b:85:e2:69:4f:b8:01:3c:b3:2e:81:bc:
         a1:af:12:49:79:2f:0b:54:ab:a3:35:9d:50:3b:95:d6:ed:fa:
         d3:99:57:bc:9a:7a:f2:66:83:e2:30:1f:6e:7f:71:bd:22:c9:
         e9:ba:90:67:59:f0:9c:09:f9:7f:6e:49:bc:87:7c:0e:a9:79:
         f8:6e:f6:e5:e0:b2:92:e1:2a:46:c7:89:cc:0d:71:08:6a:77:
         e5:85:5f:f1:81:97:fb:36:d7:96:35:73:dc:7c:05:dd:79:34:
         59:dd:a1:b8:f5:5f:9f:a7:e5:ae:36:08:32:4a:e1:9e:13:94:
         ff:e9:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:33:19 2025 by rpki-client