Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File:                     YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier:          4QV8OcFQOCZ0MtnAUs57DnQbwSqrwr9uulFhqmWnbBA=
Subject key identifier:   0A:6B:03:A5:E2:70:C2:BC:10:81:8F:97:5E:DC:CE:6F:4B:D5:0D:CB
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer:       /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial:       01976929B7A78149C1E5DE2A5A7087741F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number:          146C
Signing time:             Fri 13 Jun 2025 12:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:30 +0000
Files and hashes:         1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: voeIbLRv298r/qz6Yv9BrZqQ1WwSShbNLC5Sb7HU8mQ=)
                          2: aC1zrHe-B2VbFWXSrCj-et8l1wo.roa (hash: dYtxir4EItimXJqX5OgUJO3jRJ2NZN3GpkUGUsB/28Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b7:a7:81:49:c1:e5:de:2a:5a:70:87:74:1f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
        Validity
            Not Before: Jun 13 12:00:30 2025 GMT
            Not After : Jun 14 12:00:30 2025 GMT
        Subject: CN=0a6b03a5e270c2bc10818f975edcce6f4bd50dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:af:29:bf:14:a2:49:ca:ee:f0:35:97:91:8f:
                    e4:b9:21:d1:07:22:6e:ba:7f:46:6d:73:1c:5b:76:
                    e3:db:e7:90:0d:0c:53:92:5d:34:58:62:8c:7d:d4:
                    09:f6:ee:06:03:98:a7:65:53:10:27:b1:40:5d:a8:
                    f9:16:38:86:78:d8:f3:c9:7a:3a:12:b1:a5:85:45:
                    45:b9:c8:99:c0:ac:ad:e9:7d:4c:08:0d:b7:1a:32:
                    a9:2d:fa:f4:0b:76:46:53:cb:f1:0e:00:7a:9b:23:
                    2e:33:b4:00:03:26:fe:3f:10:af:c7:52:07:df:d1:
                    b8:67:ce:c2:57:f5:0c:0a:c9:2a:5f:38:c5:04:25:
                    fb:9e:52:60:50:07:db:bc:de:49:b5:49:67:e6:5b:
                    ec:be:b7:2e:98:34:45:43:e5:67:ae:2e:d4:54:b2:
                    30:b2:b6:05:27:80:81:e2:7b:b9:33:b1:c0:57:34:
                    f8:48:94:a3:fb:fd:bc:8e:4a:1e:db:07:fd:e2:a2:
                    e0:1f:83:ac:5b:38:6e:b8:b1:c0:ff:e5:f4:da:b5:
                    a2:46:81:1d:59:44:d2:79:77:db:ca:c7:0d:94:28:
                    66:0f:e3:3c:41:c1:0d:db:fb:fe:58:65:f7:d4:61:
                    2d:c5:10:d2:7e:bd:f0:c0:70:1d:8d:c7:d0:aa:28:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6B:03:A5:E2:70:C2:BC:10:81:8F:97:5E:DC:CE:6F:4B:D5:0D:CB
            X509v3 Authority Key Identifier:
                keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:14:4c:01:73:2e:2c:3c:4d:62:c7:3f:d1:d6:99:6b:b2:
         aa:69:16:7a:23:a6:1c:e6:c2:1c:b4:55:eb:93:09:10:b8:70:
         e7:b0:11:0f:25:b7:de:8f:43:da:bb:95:2a:5a:4f:b3:17:57:
         3a:ff:ba:1e:7e:e1:7a:30:91:e9:01:22:4e:2d:82:68:7e:15:
         12:8a:34:57:33:4e:75:3e:a4:f4:29:43:68:be:65:3d:ba:ec:
         a1:6b:21:d8:cd:6e:c7:a9:58:e0:f0:f5:c0:93:d1:cb:35:4c:
         60:e7:89:cc:7a:f1:3c:66:18:5d:b2:51:6e:6f:64:a3:c8:49:
         15:94:dd:a0:5a:00:11:21:e9:23:cd:6c:d8:02:e2:41:61:6c:
         7b:d3:66:be:1d:3c:80:5a:74:35:49:29:bc:95:bc:4c:7c:01:
         e7:65:42:19:0a:e1:f4:13:ea:46:1a:52:d1:b5:72:92:c4:e4:
         a5:51:41:6f:e1:bc:c1:f0:6b:0f:9b:6a:cb:17:7c:79:12:0a:
         0b:b0:ef:93:bb:e5:8b:48:d7:3d:55:24:04:ea:30:47:01:3a:
         26:35:72:25:c4:2e:86:48:c9:df:c4:63:bb:04:f2:2a:cc:a3:
         f2:6d:98:97:46:b4:b4:f0:bf:13:94:56:9c:d2:2b:0c:9d:aa:
         8c:92:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:55 2025 by rpki-client