Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
File:                     JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft (raw, json)
Hash identifier:          mVhYVmlJ3w5VJ8u2OepVFW23UsxOK2cEu+duFTIdiUY=
Subject key identifier:   46:2C:22:8D:F8:51:05:EC:61:60:CD:B3:2C:EC:06:C2:EF:00:56:6A
Authority key identifier: 27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A
Certificate issuer:       /CN=271b98a60a926820a48cb43a4af308c88ff2721a
Certificate serial:       0197B7EA348B730E679F938DF03C79A78834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
Manifest number:          0E7A
Signing time:             Sat 28 Jun 2025 19:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:08 +0000
Files and hashes:         1: JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl (hash: kFVFN+n4JB/ok5yYSIwGWYAICROSU4Aji6GOARsMUOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:34:8b:73:0e:67:9f:93:8d:f0:3c:79:a7:88:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271b98a60a926820a48cb43a4af308c88ff2721a
        Validity
            Not Before: Jun 28 19:01:08 2025 GMT
            Not After : Jun 29 19:01:08 2025 GMT
        Subject: CN=462c228df85105ec6160cdb32cec06c2ef00566a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:ca:37:58:4a:c8:de:a1:14:79:d8:75:47:
                    f5:d2:48:89:dd:3c:08:01:49:52:a8:02:6c:fa:19:
                    60:ee:b6:41:94:87:2b:88:9a:02:fe:18:43:b6:cd:
                    9c:9d:11:0b:bf:2d:79:c9:7a:f3:ad:df:59:96:3f:
                    92:a4:7d:a9:fa:bb:1f:35:94:0c:0c:b1:a2:a1:b0:
                    b5:4e:74:63:6a:46:ac:46:cd:8b:7c:83:63:24:8b:
                    15:bb:6a:87:57:b4:43:21:b4:48:c4:c4:99:02:a9:
                    00:4a:59:1e:fa:4f:ce:f8:eb:c9:82:6d:c8:60:b8:
                    13:91:3c:e4:52:16:4e:a9:eb:94:c6:c4:20:6a:98:
                    5c:da:84:58:cc:97:44:80:dd:ca:c3:42:f8:16:57:
                    a0:ea:78:98:10:b4:96:3e:55:c1:88:30:b8:44:53:
                    b3:0b:dd:39:58:98:54:11:fa:5d:f2:98:df:c6:39:
                    74:f5:8d:48:ba:60:bb:77:b9:99:37:ce:42:cd:81:
                    71:ed:7d:6f:72:97:4a:c6:be:2e:ef:de:11:8d:3a:
                    4b:1f:d0:e4:a3:90:a2:22:52:86:46:d8:89:82:24:
                    d8:29:20:29:47:90:a6:f6:44:2c:e0:49:60:3e:0d:
                    24:81:d8:cb:e5:59:4b:ec:05:78:d7:66:f1:9e:93:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:22:8D:F8:51:05:EC:61:60:CD:B3:2C:EC:06:C2:EF:00:56:6A
            X509v3 Authority Key Identifier:
                keyid:27:1B:98:A6:0A:92:68:20:A4:8C:B4:3A:4A:F3:08:C8:8F:F2:72:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxuYpgqSaCCkjLQ6SvMIyI_ycho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/974d80-d394-4962-a6a3-ce4d845554fd/1/JxuYpgqSaCCkjLQ6SvMIyI_ycho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:8e:85:2b:80:0b:68:2e:ea:ec:ae:58:ce:9f:f9:00:b6:
         19:95:dc:41:45:ed:f3:77:35:a7:0c:87:26:84:9b:c0:ec:3d:
         51:b6:5c:ae:5e:3a:a2:17:2d:31:c2:69:a7:a7:bf:5e:00:d1:
         77:bc:ce:f8:5e:96:01:b2:a1:fc:d6:c9:c0:63:1a:2e:2c:3c:
         a4:36:47:41:72:bc:db:ff:55:13:a9:dd:f1:e5:71:cc:ce:95:
         8f:ff:1c:60:13:df:fb:68:e7:3a:a0:92:b8:94:a6:39:9a:e8:
         b1:7e:6c:81:94:76:28:b2:a5:b7:21:b9:da:23:f0:6a:71:70:
         2c:5a:51:25:ee:95:f9:72:87:24:ef:d5:e3:80:0d:5e:50:f7:
         b8:9f:66:bf:87:cd:10:76:e7:c9:fb:f8:16:dc:0f:15:2d:cd:
         51:cf:27:6b:d4:96:d7:fa:25:99:51:01:0d:60:ab:81:f4:99:
         a6:b8:96:bf:aa:32:76:ea:a1:0d:82:6f:a3:0f:74:51:e9:dd:
         29:bf:7c:f4:32:31:02:69:48:7a:ba:4f:58:9a:b2:fd:c3:a8:
         db:f5:f2:79:ab:39:8a:f7:52:27:92:59:9a:bc:20:a9:5a:75:
         3d:e9:19:49:e9:8a:ee:4f:8e:6d:ea:54:3c:96:79:cf:45:81:
         cc:16:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:20 2025 by rpki-client