Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          NBBEozTUbpaqnQZM+whgPnQ194npyoPId8COe9aVtXg=
Subject key identifier:   DE:C2:6D:04:A6:3E:96:8D:A5:F7:05:17:83:28:A8:F0:B4:73:71:12
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       0196B17C3047962D11A128BCF57A8097C779
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          10DF
Signing time:             Thu 08 May 2025 20:00:28 +0000
Manifest this update:     Thu 08 May 2025 20:00:28 +0000
Manifest next update:     Fri 09 May 2025 20:00:28 +0000
Files and hashes:         1: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (hash: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=)
                          2: FGboOzE5w8Avx6zvXiGJurlcXzU.roa (hash: ME54k9XxSNDAp5P0H67LsrOuZ6Ebe7/DSYtgtZypMoY=)
                          3: W1GVGEMQmJZkj465u10DUFmM0KI.roa (hash: SvcIJss6manfJOWH/uw6Tbf8OZqbPtgZ1EqIPOzfeqk=)
                          4: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (hash: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=)
                          5: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: 7IZiCIy+6z95F3sjQEAXJyFOlHdR1IvlManYrkew1/M=)
                          6: hqDxB-Ir5z3Y_G6a9rOSto5ZH88.roa (hash: 2802mZRHrPPS6iUejTLOubgUc+cQnwe3PYotooKVAJk=)
                          7: ssFKfAim1kdcPbEWdvF2-soya7g.roa (hash: 2H6ZUU9VEnTNJPV3f0t76BoLVUBlAtHtLT8Ceczu/6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:7c:30:47:96:2d:11:a1:28:bc:f5:7a:80:97:c7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: May  8 20:00:28 2025 GMT
            Not After : May  9 20:00:28 2025 GMT
        Subject: CN=dec26d04a63e968da5f705178328a8f0b4737112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:d8:15:31:fd:82:ef:a3:e9:f3:a5:f4:4e:
                    51:fb:80:10:43:d6:a7:f9:95:c7:11:0e:87:19:f7:
                    b0:1d:22:3e:64:ce:47:81:bb:db:d5:a7:f9:df:86:
                    6a:96:30:25:71:44:b5:37:26:c4:ed:39:3d:9d:21:
                    fa:de:fc:90:a5:ee:b6:cc:7f:ef:50:ed:79:94:3c:
                    ee:07:24:b0:5a:10:06:90:00:7f:61:f6:cc:4f:e3:
                    99:22:59:40:a3:39:14:e4:c9:5e:81:d5:0d:23:3f:
                    09:96:6f:0b:3c:05:e5:89:01:75:08:a2:3b:e3:86:
                    53:73:6c:84:d4:06:3f:24:80:4c:24:a9:b7:9e:c2:
                    f4:c6:38:0f:05:58:1d:6a:7b:2b:1a:eb:31:dd:f3:
                    df:e5:d6:b3:fe:f2:76:d3:77:c1:b6:9f:e7:16:d9:
                    6e:4b:c8:6d:7a:ef:52:b9:42:4a:dc:f8:37:be:a0:
                    42:df:cc:0f:62:b2:93:e1:ba:5a:da:b7:73:99:5e:
                    17:df:aa:e4:21:c8:99:3b:43:d5:8d:0c:fb:ff:37:
                    92:ca:0a:51:0b:58:01:6f:fb:f0:70:39:f9:0d:92:
                    35:cd:e6:f2:ac:b2:24:69:cf:e4:c4:be:5a:9e:1e:
                    50:05:9f:8a:d8:01:e8:b2:d4:90:37:80:39:b1:ed:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:6D:04:A6:3E:96:8D:A5:F7:05:17:83:28:A8:F0:B4:73:71:12
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:39:03:dc:96:f1:ab:28:0f:7b:30:8a:c3:36:9d:6c:5c:
         f8:d7:0c:c0:68:40:76:50:0d:d6:eb:66:97:ca:d1:72:3d:fd:
         30:7f:7e:32:4f:c3:0c:df:56:65:e2:b5:34:2c:49:f9:4d:4c:
         40:11:76:79:20:e6:f6:ce:49:e5:8a:8b:f5:ca:d1:e5:ff:74:
         65:4a:3a:15:1a:50:1d:eb:62:88:6f:51:2d:9e:f6:b3:62:f4:
         aa:c0:30:d6:2d:d0:44:35:34:f7:51:a0:79:c0:21:ad:5c:89:
         83:3a:22:60:d6:69:fd:cd:ef:0d:a0:7b:cf:a4:32:8f:7a:7e:
         c6:92:d5:7b:7c:24:89:61:07:5d:60:e1:b2:28:7d:b9:ba:6f:
         06:23:d5:5e:71:ec:db:94:5c:15:18:72:0a:86:23:68:46:a8:
         a8:88:29:56:a3:2f:13:52:a4:b2:14:b9:89:a0:5e:0e:66:62:
         97:e5:5f:36:89:80:85:0b:26:dc:85:a6:71:35:20:0c:07:19:
         ca:cf:88:93:a8:47:38:6e:d0:b4:1e:1b:29:3e:5b:8d:25:66:
         7d:1c:16:cb:db:6a:05:71:9b:87:6f:59:48:33:61:75:08:b1:
         38:2b:48:3a:d5:ec:d9:a1:ba:54:2b:a4:4a:42:d5:54:91:5e:
         5a:3f:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:12:58 2025 by rpki-client