Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File:                     YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier:          6Ri2E3ta0PRfUz75MGYm46H4ePy4AoGDhNUngmNP1I0=
Subject key identifier:   8D:91:7D:7B:AD:07:7A:ED:1B:A6:15:1F:2F:7D:ED:34:0E:AE:46:B6
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer:       /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial:       0197722D441707FDE38D202A9B0E6A12FDCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number:          04F3
Signing time:             Sun 15 Jun 2025 06:00:58 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:58 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:58 +0000
Files and hashes:         1: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: NG27sQ2d9nkv66zPBHqQWsQmcyfvhh8hdEE4EilRC7o=)
                          2: mduHn1Ba-swk6VOib9ml9GoEMsc.roa (hash: 3VvwRqUaU666bsiQcBrlluuEPtapExzv8dYQUHsb8Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:44:17:07:fd:e3:8d:20:2a:9b:0e:6a:12:fd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
        Validity
            Not Before: Jun 15 06:00:58 2025 GMT
            Not After : Jun 16 06:00:58 2025 GMT
        Subject: CN=8d917d7bad077aed1ba6151f2f7ded340eae46b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:25:fb:ad:d1:b0:41:2f:9e:8e:11:49:d6:
                    70:5f:f4:1b:24:18:2c:57:38:89:00:46:8a:35:7f:
                    da:74:ad:fb:51:82:cd:ae:d9:89:b4:bd:10:47:5a:
                    c5:b0:ba:a4:84:8e:6d:2f:07:af:23:62:0c:fc:b9:
                    42:77:59:3f:50:f3:47:c6:29:cb:d0:41:8a:36:e4:
                    15:15:63:c1:73:45:cd:3b:da:55:3b:c3:2e:c6:60:
                    83:4a:cc:2a:24:4b:70:d2:4b:c4:da:ba:eb:b1:37:
                    b5:52:9a:93:02:0b:a1:48:ad:89:6f:16:25:e4:d2:
                    21:53:82:5e:f6:d8:7e:4f:96:3b:7e:79:2a:2f:9b:
                    06:37:16:3d:62:9c:86:5e:30:ed:bb:f6:d1:2b:b9:
                    c9:f3:a8:74:d0:01:5c:08:2f:20:23:6d:90:7b:d8:
                    31:cb:58:78:01:0b:c4:f3:c3:0e:06:3d:03:72:7f:
                    55:b0:be:7e:92:85:a4:ab:76:57:00:d7:f4:2c:e6:
                    23:d7:f3:09:1a:92:9b:a2:b3:19:75:c6:bc:d4:46:
                    bb:08:87:2e:37:6a:8c:07:cb:4e:d2:e6:e5:d6:3f:
                    e3:1c:e2:a9:18:45:1c:c5:dc:1a:9b:0c:8e:11:30:
                    4e:26:db:3c:ce:83:e4:50:08:b0:a0:f0:6c:77:9a:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:7D:7B:AD:07:7A:ED:1B:A6:15:1F:2F:7D:ED:34:0E:AE:46:B6
            X509v3 Authority Key Identifier:
                keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a4:5d:ec:bf:00:a7:42:cc:82:78:57:6d:4a:bf:b4:b2:12:
         5e:f8:23:dd:6c:96:63:76:0f:96:18:73:b1:ec:e6:94:1b:4d:
         d5:11:2a:9f:8a:b6:fe:f7:d5:b6:50:a5:7a:f7:f6:34:9d:b7:
         54:f1:77:2d:8e:48:c2:d9:d3:26:7d:a4:4f:e5:9b:41:a0:fe:
         e9:83:0d:83:06:1e:c0:5f:b2:af:d0:eb:cc:cd:ea:67:82:fa:
         02:25:20:fd:4d:1a:79:dc:ad:e7:d8:40:be:37:b5:47:b9:a1:
         4e:a0:f4:93:e2:e4:1f:1e:58:63:22:9a:dc:74:94:58:bf:0c:
         99:52:7d:45:c7:28:4b:57:1a:28:87:72:6c:63:1a:c7:81:f6:
         8b:ed:2b:7a:c4:29:b4:1c:4a:a0:22:d0:55:c4:e2:af:0a:82:
         31:2f:c8:17:b7:be:ef:6d:be:15:4c:89:95:14:45:2e:48:95:
         01:fe:3d:a9:31:a6:3f:9a:f2:61:ac:a1:7e:7b:cf:16:8e:f8:
         aa:fe:ed:f1:4a:3e:ad:92:bf:36:e6:9c:48:9a:ff:db:cd:f7:
         17:a1:94:8c:19:65:ba:3c:c0:35:4b:25:a3:d9:c8:48:a4:74:
         c9:db:aa:0a:61:68:e9:da:c6:14:76:17:1d:64:9f:2c:38:cd:
         58:54:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:24:21 2025 by rpki-client