Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          lZE+VXZXhnEFApQ2GFvZXCWWPHSbUkRkYJdKwAZJfYs=
Subject key identifier:   02:F0:D1:D4:72:EC:39:1A:D6:98:F1:77:F8:37:17:65:61:30:52:D3
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       0197B6A05E78B2F9F128D6712902D775B83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0A0E
Signing time:             Sat 28 Jun 2025 13:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:52 +0000
Files and hashes:         1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
                          2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
                          3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: mjHrrRe5kvgrJQN/+Xlf9r1Ijh+9hscm0rdxwxFJWIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:5e:78:b2:f9:f1:28:d6:71:29:02:d7:75:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jun 28 13:00:52 2025 GMT
            Not After : Jun 29 13:00:52 2025 GMT
        Subject: CN=02f0d1d472ec391ad698f177f8371765613052d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:9b:eb:c5:ce:d6:09:1a:17:ab:96:a1:e3:
                    54:f0:eb:fd:47:f2:26:a9:a6:04:be:4b:92:41:78:
                    21:a3:90:7c:bd:a2:a7:7c:14:b0:85:38:9d:1f:c6:
                    f9:4b:61:85:bc:3d:7a:f5:2b:a4:b7:6b:1a:ec:be:
                    f0:69:14:7d:ad:4b:07:31:33:cc:e0:1d:7d:db:a1:
                    64:48:56:17:54:0c:fe:f7:00:5c:a1:8d:16:ad:70:
                    cb:27:84:a9:5b:98:fb:62:5c:af:ab:cd:4c:bd:1c:
                    52:63:8d:bd:2d:c9:76:8c:99:18:69:c0:b8:75:2a:
                    ef:19:9c:bf:8a:fb:87:82:a9:3b:30:dc:e9:e8:b8:
                    05:cb:34:1f:0b:4c:13:e9:74:14:07:5f:21:58:4f:
                    eb:6e:3c:17:53:17:16:17:94:10:69:86:a3:ca:63:
                    55:c0:02:37:09:22:c3:0d:ec:7b:a4:9f:58:fd:0b:
                    0b:e3:35:dc:75:69:87:fa:05:8b:25:f2:b7:a3:cd:
                    1b:84:41:89:8a:72:f1:93:0a:e6:13:75:0e:57:79:
                    86:f1:f2:85:7f:ba:7d:a9:9a:91:93:29:4d:c6:58:
                    7c:38:b8:73:62:7d:3f:d7:d7:34:3a:3a:40:13:a3:
                    17:13:4b:c9:2f:5a:c6:dc:a7:b6:4c:cf:ce:b1:0b:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F0:D1:D4:72:EC:39:1A:D6:98:F1:77:F8:37:17:65:61:30:52:D3
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:55:2b:0d:56:35:a5:34:bd:73:f2:9e:6c:56:91:3b:0f:26:
         1c:6e:7e:cf:33:35:99:f1:5b:9b:8c:00:5c:b8:5f:99:9e:d3:
         96:79:97:9b:0c:44:f8:34:03:c0:23:9b:f6:0f:17:2e:84:a1:
         2d:51:ff:ca:41:63:d4:e2:09:4d:64:4d:a2:25:b9:f6:13:80:
         22:4f:ec:56:64:be:9c:86:37:02:05:74:d0:ed:7f:16:07:41:
         21:2f:c3:90:cd:4b:fb:92:c0:e7:dd:7c:7c:98:39:97:f8:9c:
         40:98:f3:a2:30:2f:bd:7f:b4:54:a7:cf:3c:04:c6:7b:4e:bf:
         6c:a9:ed:04:b8:f5:ba:64:c7:ce:ff:1a:8c:83:26:19:6f:2d:
         16:41:38:b9:2d:91:82:59:21:6d:d1:41:fc:03:f3:4a:8c:3c:
         5b:dd:7b:88:54:7e:a6:22:75:6f:eb:b6:b4:3a:c2:94:48:fd:
         71:fb:1c:76:e3:77:64:82:4a:ae:20:ea:84:d8:ad:4d:63:e2:
         ad:a7:4f:71:10:aa:2d:85:8b:af:15:a4:42:fc:4f:11:78:89:
         11:b8:fb:db:42:7c:ae:8f:36:fb:15:38:38:17:48:74:78:09:
         75:e8:ab:24:7d:1c:34:a0:a2:8e:b1:6e:f7:78:b3:d6:53:50:
         c9:ea:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:12 2025 by rpki-client