Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
File:                     Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft (raw, json)
Hash identifier:          K14kM9DU3tLTHTwoACVic1rtmN5BbFYCyPa1O1Cp8HE=
Subject key identifier:   FA:A8:5A:78:6B:BA:26:4F:C4:74:E6:90:1E:5E:7A:E1:13:37:A4:BC
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Certificate issuer:       /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial:       0196808FF1E87398DD1BEF992D3288645509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
Manifest number:          0BDE
Signing time:             Tue 29 Apr 2025 08:00:39 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:39 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:39 +0000
Files and hashes:         1: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (hash: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=)
                          2: Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl (hash: 8Q6jE3Bn60OAkUsqHBxaKUiT04Ugmi8Dy537EhMZBz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:8f:f1:e8:73:98:dd:1b:ef:99:2d:32:88:64:55:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
        Validity
            Not Before: Apr 29 08:00:39 2025 GMT
            Not After : Apr 30 08:00:39 2025 GMT
        Subject: CN=faa85a786bba264fc474e6901e5e7ae11337a4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:cc:81:69:dc:2a:c0:7b:d4:83:80:59:ad:
                    b1:88:0e:d6:d9:24:28:66:b1:9b:a0:93:19:b5:f3:
                    42:db:b1:6f:dd:ab:d9:eb:ff:b2:ba:19:ab:6a:37:
                    76:61:da:43:08:e3:b3:a3:9f:c7:54:2f:d2:aa:da:
                    bc:3c:43:02:3f:ab:b1:0a:99:75:c3:0f:06:f4:b3:
                    cd:53:d3:ef:79:6c:cf:f5:d1:13:5b:c9:43:8d:d2:
                    32:1f:26:15:19:32:99:3f:23:62:bc:c3:56:fb:70:
                    29:a8:06:f3:cc:d1:6a:31:58:b7:c0:04:0c:4c:a5:
                    8c:e2:f1:c6:e4:b8:30:e5:a8:9c:d1:50:bc:36:6b:
                    f5:80:82:c5:19:d1:a6:44:aa:22:26:a2:1a:b2:dd:
                    1d:eb:d1:a9:55:4a:e6:47:41:a0:1d:93:18:1c:64:
                    a9:88:c5:ab:84:37:2d:8c:df:19:d9:a3:f9:41:68:
                    e9:ff:6e:8e:85:f5:5a:65:ad:ee:14:f3:87:31:76:
                    bf:26:bf:96:57:0e:4c:61:a2:a7:45:88:21:4b:42:
                    04:22:34:bd:3d:f2:3e:37:a1:41:15:e7:73:07:90:
                    49:e1:2b:46:59:e9:7e:64:64:f8:7f:dc:14:e3:a2:
                    f2:ee:54:1d:69:71:b4:58:ca:f7:c6:14:2f:7a:27:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A8:5A:78:6B:BA:26:4F:C4:74:E6:90:1E:5E:7A:E1:13:37:A4:BC
            X509v3 Authority Key Identifier:
                keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:0b:98:31:7e:96:61:72:a7:5c:f5:60:d7:12:06:5d:7c:
         cd:86:e2:23:af:c5:82:7c:e4:72:50:58:ee:5e:28:6b:e8:e7:
         80:eb:c7:cf:72:88:5a:51:21:30:43:08:e8:21:00:87:93:cb:
         87:d5:87:5c:93:39:47:5c:7a:10:98:22:a7:ae:d3:1c:1b:07:
         42:c3:a8:d8:c6:7c:75:99:df:e0:71:9e:c3:ed:34:18:95:df:
         27:48:dc:fd:53:6e:fb:d4:31:3c:57:21:13:78:aa:98:e4:40:
         52:e2:22:b6:02:15:2c:4b:b6:f0:6d:f0:3f:04:71:b7:00:12:
         ad:b3:f3:1b:eb:18:0d:06:ac:09:b6:36:ee:35:d7:37:7d:da:
         a4:47:06:c7:b2:75:12:f2:bd:b3:60:2b:e9:bd:e4:60:24:fb:
         11:c6:06:e7:4d:6e:45:53:be:bb:b2:29:95:66:b6:c6:73:2d:
         68:2e:5f:a5:77:b1:43:3c:64:d6:4f:d2:66:59:aa:94:a6:37:
         5c:80:cc:49:19:66:9e:b1:b8:97:b1:5d:d5:3a:a1:69:fe:2d:
         59:dc:9c:8a:4b:d5:c0:55:92:d8:b6:41:62:0a:d2:ff:47:ea:
         30:b8:7e:f3:88:4f:de:02:48:7d:7a:a3:b6:30:3d:ba:bd:8b:
         7e:6f:4c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:15:35 2025 by rpki-client