Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
File:                     y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft (raw, json)
Hash identifier:          Rh5DpWEXmCfeRCjehnFyHb2vdEspE9fQygCD1BMTynA=
Subject key identifier:   06:9A:9F:3E:A0:83:53:F7:76:93:88:F1:70:1E:C2:38:26:C4:4B:06
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Certificate issuer:       /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial:       0197B8214477CC879CB5DC4A763A41433677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
Manifest number:          0833
Signing time:             Sat 28 Jun 2025 20:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:17 +0000
Files and hashes:         1: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (hash: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=)
                          2: soLPFB9BaoeGyxe_ows2MqIBmHY.roa (hash: zvz/ucZSe9gs0q+JXgBGOo5yJbgzXAhsnWqzDHocROw=)
                          3: xHaucpgtSJqvYDWEQH_jghu3SHs.roa (hash: 7WTdK2upF+9XygbepRb7SlbpqhR7M3j31Q2B96zjyEA=)
                          4: y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl (hash: 7O/01nQMrsQLYcKtQzF9FuBsUVyPez3zGU/3RrT7lYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:44:77:cc:87:9c:b5:dc:4a:76:3a:41:43:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
        Validity
            Not Before: Jun 28 20:01:17 2025 GMT
            Not After : Jun 29 20:01:17 2025 GMT
        Subject: CN=069a9f3ea08353f7769388f1701ec23826c44b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:af:64:2f:b9:4b:0b:e6:dd:59:cf:d2:27:
                    82:62:5e:a1:6f:02:a8:d3:76:c1:4b:32:96:e6:f6:
                    a3:f9:2f:46:a9:a4:8a:8d:97:f8:d0:ce:10:aa:75:
                    b9:24:29:41:8c:a8:9a:a8:c2:00:c6:a7:dd:02:06:
                    60:00:41:b7:e1:52:c7:b4:4b:5b:be:04:d0:9f:85:
                    80:6d:e2:cb:79:07:6b:37:b4:9d:73:75:db:30:1a:
                    7c:fc:25:2d:53:b7:a9:3f:e0:9c:2c:b6:d4:15:ca:
                    f9:b3:02:2e:80:a0:4d:8a:c9:d2:e0:b7:44:0e:bb:
                    46:33:b8:b9:67:bc:0f:cd:ab:69:0c:03:6b:b2:20:
                    b9:6b:d0:a7:cb:39:f8:46:5d:53:8c:5d:31:db:3a:
                    9d:94:ac:08:29:91:5a:14:69:04:28:cf:43:f2:51:
                    cc:56:61:3b:9f:af:61:24:3d:30:ea:a1:0e:cc:a3:
                    f0:35:6c:cd:23:c0:53:86:ef:af:51:26:9f:dc:00:
                    a6:02:be:29:78:6a:5a:78:3b:62:76:8e:80:51:77:
                    51:72:34:8d:7a:cb:0d:8f:e7:26:f9:ce:4b:05:30:
                    b4:34:77:f9:43:56:94:ab:91:ea:a4:b6:ab:79:ca:
                    d8:a6:09:f9:53:12:e8:c4:37:a0:e1:14:01:b1:c7:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9A:9F:3E:A0:83:53:F7:76:93:88:F1:70:1E:C2:38:26:C4:4B:06
            X509v3 Authority Key Identifier:
                keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:21:29:e0:e8:ba:32:0e:ad:81:b5:a6:96:15:61:16:ad:41:
         7b:d5:6c:65:dc:08:c1:0e:b5:4d:97:ea:2e:70:0f:07:fb:d4:
         22:6b:5b:0d:38:27:63:d7:de:90:0b:12:ef:4a:d2:c4:a5:9b:
         ad:20:da:08:0f:b8:79:5f:ad:b3:bb:05:c4:cf:a8:17:fe:f5:
         7e:18:88:b1:41:23:83:79:6e:76:aa:68:0b:24:a4:7c:c8:af:
         88:05:00:28:8e:2e:4d:b2:22:97:84:6d:49:e9:f3:a3:55:49:
         fe:20:65:2b:af:4e:b5:ea:5b:dc:7c:90:3f:d1:7c:d6:e7:fe:
         df:f4:8a:ca:47:26:51:7f:89:fe:c8:54:1d:5f:ba:dc:52:26:
         02:97:e2:52:ce:8e:62:92:04:82:b5:bf:f8:a9:63:52:63:d3:
         21:f7:4a:5b:55:86:f4:3f:ed:cf:03:30:46:21:55:b7:cd:72:
         ac:17:f4:4b:48:45:bc:9b:9e:c6:b2:7b:2f:8f:e5:bd:27:83:
         8b:86:db:75:87:21:c1:18:fd:ff:75:1e:cb:67:96:a1:54:07:
         55:96:bc:5f:b0:85:ae:79:d5:f2:35:ea:84:9d:82:73:97:20:
         f2:f0:b2:ec:14:d9:fe:e7:e8:b2:aa:80:b9:38:d5:b5:40:27:
         57:9a:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:22 2025 by rpki-client