Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          undE7JlbT8gHk7FVKPBveNUaEiwlC7Uy+PtzSrUohck=
Subject key identifier:   E8:64:A3:E8:38:76:4B:BB:25:16:73:7B:44:25:FF:64:3B:AD:CF:63
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       01976885306DB9758277C917BBE24F807ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          1274
Signing time:             Fri 13 Jun 2025 09:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:48 +0000
Files and hashes:         1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 4wxmwRN8dQpZj6Aa/Ah3r0q7DnzP1NGqslMXxLMaD9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:30:6d:b9:75:82:77:c9:17:bb:e2:4f:80:7a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Jun 13 09:00:48 2025 GMT
            Not After : Jun 14 09:00:48 2025 GMT
        Subject: CN=e864a3e838764bbb2516737b4425ff643badcf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:27:5e:e6:c6:b7:19:af:91:0b:9c:f0:aa:
                    f5:8f:c9:40:fb:7a:5e:03:c6:57:27:56:37:94:32:
                    e9:58:f2:17:e5:49:9a:75:dc:c1:66:4e:65:5d:99:
                    ca:61:a9:a5:b2:b7:f3:db:ca:f4:07:4f:46:0c:73:
                    92:38:4f:97:1d:09:1a:18:a1:39:a5:c3:56:6e:3b:
                    f6:46:f8:62:db:53:d9:c3:65:62:72:62:0c:63:74:
                    aa:ea:b1:73:56:e9:be:9d:7e:70:1a:24:52:e4:e2:
                    28:4c:eb:5f:ce:04:19:73:44:07:94:a2:b5:a9:ff:
                    5f:e0:6c:60:97:08:be:90:a2:4e:35:ff:bc:72:eb:
                    c3:7c:0d:16:3d:82:e3:09:90:ff:b1:57:4c:c1:10:
                    f3:97:3a:30:c0:1d:1d:13:ae:57:12:55:b0:c5:99:
                    95:30:40:67:19:92:f4:3a:ed:52:ee:af:f1:a9:29:
                    5c:ca:4c:83:7a:6c:2e:e0:a2:f1:d6:41:e9:36:b2:
                    4d:5c:ad:88:ac:ee:8a:74:f1:3d:92:a3:39:a3:b0:
                    75:f4:29:0a:c7:e8:f9:80:06:fb:05:85:56:31:7b:
                    55:3e:b6:68:cb:31:32:15:78:18:8c:cb:84:f2:0d:
                    ac:e2:43:75:29:02:86:1e:4f:5b:01:32:0b:4a:55:
                    2d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:A3:E8:38:76:4B:BB:25:16:73:7B:44:25:FF:64:3B:AD:CF:63
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:67:a9:d5:b4:89:f4:66:06:38:c1:be:7a:88:7c:25:74:5a:
         f5:6d:f7:0f:c5:df:20:49:18:9c:3f:9b:70:64:09:03:96:77:
         cb:3c:b0:c2:0b:fc:d1:9f:86:55:1e:31:77:18:bc:8c:67:67:
         9c:3d:5c:f2:16:f2:31:49:5c:95:d2:5b:b2:40:37:0a:b5:07:
         3a:1a:88:69:7c:ba:40:fc:4e:a8:a8:34:e9:18:e6:78:62:18:
         cb:09:7b:93:e0:a1:f3:43:85:dd:bc:c0:70:63:8b:f5:ec:f3:
         b2:d0:76:84:5f:27:9d:b9:02:4c:44:f3:d7:8f:99:1e:3e:87:
         6a:f9:3e:ba:39:b0:2b:87:87:85:ba:78:3e:b7:4e:6e:be:55:
         06:0b:89:b5:ab:9a:c0:fd:8f:dc:fd:e0:08:21:c6:00:99:f8:
         c5:10:21:f2:f0:3b:5d:dc:90:29:09:0d:03:2d:88:e2:a3:ce:
         77:ef:bd:a4:4b:4e:0a:46:1f:61:47:ad:35:ff:79:c3:62:00:
         0b:4a:da:0e:6b:41:14:fd:a8:d2:9c:b9:b7:f5:dc:97:cc:00:
         6b:b9:30:13:01:3c:97:95:dd:97:57:ce:99:03:a5:0e:fa:5e:
         05:6d:0b:0f:80:64:0b:4f:fa:79:7c:31:fd:71:03:e5:30:f6:
         de:32:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:57 2025 by rpki-client