Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File:                     YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier:          /u/H2T16v4sat4ExJOb75l19B/6I3MPiPlcOCUlidlk=
Subject key identifier:   E7:C8:9F:39:47:78:8B:B9:CA:B8:02:14:B6:89:5E:87:AB:6A:4F:3B
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer:       /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial:       0196BF0108984E6C9977EA7E87B2D07E1BF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number:          111F
Signing time:             Sun 11 May 2025 11:00:38 +0000
Manifest this update:     Sun 11 May 2025 11:00:38 +0000
Manifest next update:     Mon 12 May 2025 11:00:38 +0000
Files and hashes:         1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
                          2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: FJYNKEhaAlLBezrvFPES8RRy0JurFOhWb6kUPbqIe/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:01:08:98:4e:6c:99:77:ea:7e:87:b2:d0:7e:1b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
        Validity
            Not Before: May 11 11:00:38 2025 GMT
            Not After : May 12 11:00:38 2025 GMT
        Subject: CN=e7c89f3947788bb9cab80214b6895e87ab6a4f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b9:6f:62:cb:bc:3e:ed:00:28:76:18:70:ff:
                    0b:c7:80:82:bc:0c:a4:d1:70:a4:60:ca:86:26:12:
                    38:0c:dc:84:c5:21:de:ef:d0:3e:8f:48:5e:a4:ac:
                    52:86:dc:db:0c:b9:a2:7f:ed:01:da:2a:13:74:14:
                    9b:bd:ea:1c:eb:b6:e1:7f:fb:47:39:71:ef:73:a7:
                    36:e5:18:1b:fe:f1:8d:3a:c0:65:bb:0c:88:02:8c:
                    58:eb:63:d7:d4:34:0f:1d:a1:f8:40:f5:a3:80:65:
                    44:39:30:0e:f1:d2:0f:20:5a:cf:46:06:a2:66:50:
                    50:5b:7c:17:a6:a7:b6:ce:58:ac:cf:ba:7f:4d:fe:
                    da:ef:61:45:8a:48:38:c6:ba:ba:92:03:7e:d6:b9:
                    c5:bb:76:f6:70:88:86:a2:bb:7d:04:af:10:e6:54:
                    a8:ae:3d:7f:14:f9:f2:ce:ba:c6:8a:79:36:2c:d2:
                    3c:77:31:ae:e1:43:29:9b:8f:ef:3e:eb:d0:86:78:
                    7c:b3:a7:97:2e:30:af:a8:9d:ea:35:03:70:67:8d:
                    99:6e:dd:de:cf:2d:c9:0a:9e:c1:e4:7a:fb:7c:db:
                    39:ce:7a:ac:eb:4a:2f:fe:b4:bb:6d:ab:f1:58:35:
                    84:86:48:6a:23:6f:04:78:91:c0:bc:8d:62:3b:38:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C8:9F:39:47:78:8B:B9:CA:B8:02:14:B6:89:5E:87:AB:6A:4F:3B
            X509v3 Authority Key Identifier:
                keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:72:7a:ce:98:97:0a:c1:35:cc:dd:68:12:9f:83:28:03:
         b3:a4:65:0e:c8:05:13:94:18:b0:98:eb:2b:cc:c4:fb:c7:1f:
         98:17:e9:5b:18:72:bc:69:2a:4b:10:58:47:ce:a4:9c:39:a4:
         ce:f1:93:17:53:64:99:e5:cd:c6:0d:2d:0e:b6:6c:ac:61:ec:
         92:50:7d:14:39:22:29:46:3a:58:67:45:2f:b1:f9:4e:5f:a2:
         36:8b:0b:33:4d:aa:49:28:52:e9:df:ed:c7:4a:b7:26:c9:81:
         f1:15:bc:01:12:5a:de:30:95:8f:87:61:b5:1b:36:69:42:04:
         ac:48:2e:10:91:19:4f:29:9d:4a:d3:92:41:d2:7f:54:04:6b:
         1e:35:a9:8c:bf:02:c1:58:76:4b:48:07:e6:4e:d3:df:ec:a9:
         77:20:83:e5:c0:87:27:8f:f4:98:d0:92:08:3d:d7:5c:93:bf:
         00:04:1b:c1:94:45:3b:26:54:88:f7:94:5b:48:3b:aa:b5:5d:
         7a:f7:a7:1b:75:45:93:a9:4f:fb:61:8a:d2:11:91:85:2a:f4:
         3a:7d:be:d4:aa:eb:7a:f0:08:f7:26:ff:cf:d6:f1:48:23:c4:
         b5:dd:e4:10:c2:cb:03:61:01:03:35:f2:cc:6a:c3:3b:a9:79:
         ff:fa:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:08:43 2025 by rpki-client