Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
File:                     YninaMkQutzVxK73wXKp8GFUfow.mft (raw, json)
Hash identifier:          zXI/Lvfl4MuXo0gzTeKamQpINMWysUx90BjXB8Okhyc=
Subject key identifier:   D8:7D:95:13:1F:37:1B:4A:D4:D0:9B:FD:C2:EF:9C:A8:B9:4A:DF:01
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Certificate issuer:       /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial:       0197B8903869A694AB70223B398FCD5090AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
Manifest number:          15DB
Signing time:             Sat 28 Jun 2025 22:02:28 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:28 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:28 +0000
Files and hashes:         1: EADtwJ5y-VjWcy83_mVH2SKUAPo.roa (hash: R8INT7bheSvFgtGeR+Ql091pm76iqBbhKkxxFZZqBPc=)
                          2: HH8Kcpq8smSBgspza5cFmPN-h3c.roa (hash: b5fuu0JV/7NW/Qsb9kNDCFAwqgLsip8TnrJAwmOdepo=)
                          3: KBd5kN60RABk_aPy5jhjXA2d4rM.roa (hash: F9wyU/gh7GBbrKA9V2nWxFNNYZNmutVEH+bSjiNICq0=)
                          4: Xu-pgqhOX0b1I_9AutHwqHHQH6s.roa (hash: Sqvmgn86ZbXy8M1JF+5dXsFEi7o7b9VXmnZYW5oa6sg=)
                          5: YninaMkQutzVxK73wXKp8GFUfow.crl (hash: FVYEuw6+U2RdyvjlQ+LOTK5LI6gQ3NNc+YjvEFKR0Ts=)
                          6: _0avkX9R80849niuPtRFEJjbyDI.roa (hash: Wlo0KTcdwxIVfrtxvPDP/C02KQyQtuDyar4UgepvhIg=)
                          7: iUmlhe7GBpSAFSopQzbl9BrMrY8.roa (hash: 1kM9Q1lsdCfCBHNzqJzQksIZSOAccEnrgDWq7f/U9H8=)
                          8: qGhr6imBDGgujLXBWS0DEYFPzJc.roa (hash: 5YtHZEQ4HdQrSJb2I3o65jo+fHhfbV2A2EukdInfLlo=)
                          9: xbAnBjLqGjs9MoebU27xTpAXF-E.roa (hash: Q80N11JbIqnaJwMmz573rLhvL647301AWxsGwoimeQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:38:69:a6:94:ab:70:22:3b:39:8f:cd:50:90:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
        Validity
            Not Before: Jun 28 22:02:28 2025 GMT
            Not After : Jun 29 22:02:28 2025 GMT
        Subject: CN=d87d95131f371b4ad4d09bfdc2ef9ca8b94adf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:e2:7a:43:6a:b2:12:ec:7e:06:77:08:70:
                    bc:54:c2:87:99:31:53:c1:1d:6e:76:9e:a8:55:81:
                    88:b5:5d:82:99:9e:ca:54:a0:19:af:e9:62:5d:0a:
                    bc:9d:60:ea:0a:4a:66:4c:ba:58:2d:88:e5:e7:87:
                    1f:56:f6:75:75:36:13:cf:c5:a0:57:ab:99:93:b5:
                    eb:31:91:0c:64:1f:5b:e2:6b:aa:db:09:2c:7b:d1:
                    7f:16:0a:a6:40:93:90:5c:bf:9d:08:60:50:ff:54:
                    c1:b4:25:09:35:0b:8f:7a:c3:b6:f7:e7:27:18:7e:
                    ea:5a:9d:b2:15:cf:57:c5:5e:1d:ca:f1:ae:70:b3:
                    5b:8f:08:ab:e0:af:2b:62:31:e1:f3:88:b8:57:5f:
                    8a:04:70:e7:67:90:ea:aa:bf:e5:a2:ad:39:f1:34:
                    b0:6c:e3:f1:aa:d4:b6:12:58:3a:7c:68:50:79:b6:
                    1a:c3:6e:4d:c6:04:a0:28:3b:c4:9c:e8:ca:ed:14:
                    37:05:7c:c5:91:6d:6e:68:b7:20:b6:14:12:8e:86:
                    8b:f2:a3:a8:ea:6d:e6:6f:29:14:25:da:74:ae:81:
                    46:eb:a4:5b:20:5a:36:fd:aa:5f:82:b3:3d:5d:b2:
                    dd:de:33:9f:f8:db:1c:91:71:ff:fe:81:88:7a:8e:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:95:13:1F:37:1B:4A:D4:D0:9B:FD:C2:EF:9C:A8:B9:4A:DF:01
            X509v3 Authority Key Identifier:
                keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:a3:32:8a:44:d0:7d:3d:0c:d2:9b:cc:48:33:3a:a5:c4:
         af:1d:d2:1c:60:5d:97:c2:e2:34:c4:11:95:2a:5d:da:02:8d:
         19:fc:b6:89:c1:54:94:ba:0c:88:8d:41:0f:85:a1:87:53:52:
         06:38:90:da:9f:74:46:ad:4a:ea:8e:e3:54:5b:49:c6:8f:27:
         3b:6a:c5:fa:1a:71:9c:86:d0:5d:d7:3d:1c:3b:4e:9a:10:4f:
         a7:7a:42:0a:f2:15:42:d3:e8:b2:2c:b7:43:00:77:80:ab:ad:
         ca:f4:db:dc:4b:5f:b6:38:0a:17:49:d7:85:b8:1b:8a:63:68:
         4e:93:bf:d6:aa:45:a9:d4:90:ea:03:32:30:b1:54:0f:f9:31:
         64:48:f9:a1:7a:5a:d1:e4:71:80:f1:05:de:9d:47:27:22:3c:
         0d:87:a1:f5:e2:39:39:7e:5f:16:1e:79:e1:2c:31:62:33:e4:
         da:02:62:42:94:4e:72:7f:31:3b:2c:c2:da:6c:eb:90:b0:fa:
         dd:62:cb:6f:e7:02:b4:f8:90:8a:20:8d:f5:df:4f:67:7f:d4:
         14:88:77:a5:a9:03:8c:24:b5:b2:99:61:26:b7:81:36:d1:f9:
         84:0c:65:1b:05:b4:01:56:bf:16:e8:13:37:bc:30:8c:29:78:
         f4:6d:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:39 2025 by rpki-client