Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
File:                     Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft (raw, json)
Hash identifier:          ZIhOIDVXqfcF8MAqXChSFtAXS5T4f/jT1AebDPO0c3E=
Subject key identifier:   FE:0E:78:C3:FE:71:3F:82:A7:66:7F:5F:7C:E5:4F:3E:12:5A:51:8E
Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76
Certificate issuer:       /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
Certificate serial:       01976EBE3CE330EC6756CFD4B3B61ECECD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
Manifest number:          0D5D
Signing time:             Sat 14 Jun 2025 14:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:50 +0000
Files and hashes:         1: GymugnGNz9hZBNfCgZiljFXWNI4.roa (hash: UzztjdFS5VrTYMjssd7r9V+uU0SvLYHrn/O32cjxd5g=)
                          2: Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl (hash: ZHKeysp56/gKM8IhPkP9ogSIzV1/MMh19T1jdnWHzQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:3c:e3:30:ec:67:56:cf:d4:b3:b6:1e:ce:cd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76
        Validity
            Not Before: Jun 14 14:00:50 2025 GMT
            Not After : Jun 15 14:00:50 2025 GMT
        Subject: CN=fe0e78c3fe713f82a7667f5f7ce54f3e125a518e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:ea:1e:66:6b:f1:80:d9:d1:72:13:f8:95:
                    e4:86:19:c1:26:75:9d:b4:4c:59:3d:b9:ee:6f:56:
                    e3:73:be:83:d1:e9:17:84:9c:22:f4:3c:f3:56:c7:
                    cc:ed:32:98:30:00:38:4b:13:fc:30:e0:04:58:04:
                    d1:89:71:9b:25:f0:08:a1:2d:2f:f2:20:fe:83:21:
                    b8:cf:ce:e4:7d:83:df:29:66:e5:80:22:49:45:b4:
                    70:46:7c:22:f4:48:3d:6e:3f:c2:ad:e6:c5:85:fc:
                    b1:09:02:9b:20:fa:68:c1:85:f7:4b:4f:a3:f0:f4:
                    b8:bf:46:32:f8:71:52:ed:3f:50:76:8a:13:42:58:
                    c2:ba:20:1d:c1:c4:11:f0:d6:b9:bb:09:29:38:ec:
                    b2:61:d0:ee:3b:60:b5:56:0e:d0:0f:23:b3:c4:cd:
                    73:bf:32:fe:27:70:27:9c:2a:c2:6d:49:2f:cd:39:
                    24:db:a6:68:81:2d:41:20:56:8e:ed:5e:62:01:01:
                    39:37:6e:96:98:55:e9:a3:4c:34:6b:58:f6:7d:a0:
                    fb:d9:ea:24:b0:61:91:c2:2a:4e:6a:c7:f2:5f:12:
                    e6:4a:28:6d:9a:5b:d4:01:22:70:62:63:1f:6e:86:
                    cf:5c:d1:da:bb:b6:6d:57:af:01:87:e1:4a:66:7e:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:78:C3:FE:71:3F:82:A7:66:7F:5F:7C:E5:4F:3E:12:5A:51:8E
            X509v3 Authority Key Identifier:
                keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:6c:2b:b0:19:84:64:4e:41:bd:a6:11:b5:10:3f:f6:08:
         c8:d6:97:b4:66:57:67:5d:ad:2c:af:e2:1e:63:6f:69:7d:15:
         c6:bc:9d:1d:21:66:31:50:1d:53:93:ad:33:18:36:94:bd:5a:
         a3:78:99:81:00:21:e4:a3:0f:31:d3:82:7c:11:c3:3f:79:0c:
         21:11:a1:24:84:4d:8e:13:ce:85:7e:10:23:6c:f2:4e:72:97:
         94:e4:03:ea:68:08:be:92:83:4f:8d:3a:82:98:2a:f2:5e:0d:
         22:cf:0c:26:d8:93:2c:c2:87:36:03:f8:a0:1d:8e:33:e3:ab:
         57:ae:b2:37:65:b5:ea:66:7a:61:33:02:b6:a6:2f:76:29:2a:
         f9:a1:0a:21:d9:40:6f:c5:0e:9c:e2:2b:6d:88:a3:38:cc:57:
         f6:a3:d2:6e:17:38:7b:99:b1:5d:f6:d7:b9:11:a0:c5:b3:49:
         81:3f:45:44:38:1a:83:eb:21:d9:97:3a:b1:8b:db:aa:bf:07:
         bd:3b:d6:e0:85:4f:14:a8:b8:32:17:3d:36:d0:7f:55:8e:0d:
         99:10:30:5d:d1:9e:61:4d:d8:a8:29:5d:3f:3d:64:cf:c0:f9:
         9a:90:8c:32:4d:ef:15:69:4e:8f:e7:81:d1:9d:cb:25:e8:58:
         01:e1:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:44 2025 by rpki-client