Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
File:                     yjNIq_Fz0ndMiUIAjK321gEqPVI.mft (raw, json)
Hash identifier:          7fAzZhNkEKsWYiQjJ6/8eGj21cy/g8TVM0KT89fgEM0=
Subject key identifier:   B8:54:93:6E:2B:9A:6C:93:68:3B:DB:42:28:67:DC:E5:11:E3:79:90
Authority key identifier: CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52
Certificate issuer:       /CN=ca3348abf173d2774c8942008cadf6d6012a3d52
Certificate serial:       0196C427817331B5EDC8FE20D447D3435119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
Manifest number:          052D
Signing time:             Mon 12 May 2025 11:00:45 +0000
Manifest this update:     Mon 12 May 2025 11:00:45 +0000
Manifest next update:     Tue 13 May 2025 11:00:45 +0000
Files and hashes:         1: xfu021S1jJtouexa28jA9KZojkw.roa (hash: ydYZd2IQ/M2DMWZopd0Btk/t60vr6MsiYiLHbkf4rwI=)
                          2: yjNIq_Fz0ndMiUIAjK321gEqPVI.crl (hash: iKk+6vMIv2mVtWfDpuThxw2SDAyyd2bG48mUbOe0IW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:81:73:31:b5:ed:c8:fe:20:d4:47:d3:43:51:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3348abf173d2774c8942008cadf6d6012a3d52
        Validity
            Not Before: May 12 11:00:45 2025 GMT
            Not After : May 13 11:00:45 2025 GMT
        Subject: CN=b854936e2b9a6c93683bdb422867dce511e37990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:32:86:91:76:29:72:f4:17:67:4a:3b:5c:
                    2d:6e:70:ed:b7:aa:ed:47:78:70:23:06:6b:ff:85:
                    cb:fd:9b:4f:06:6a:3a:79:87:21:d7:2e:3a:eb:de:
                    2b:4a:5f:f6:4e:94:0f:ef:52:c3:34:bf:d0:6d:33:
                    bb:c6:e6:7b:0e:61:fe:9b:71:66:72:dc:4c:51:4f:
                    02:19:0f:06:d5:8e:0b:87:05:2b:45:10:f8:5c:19:
                    62:a6:8b:6b:a1:ef:7a:14:e7:8d:bc:43:36:92:52:
                    68:45:e3:f3:85:f7:5d:91:eb:f6:06:be:c3:b0:cc:
                    79:38:a2:80:a3:c5:c1:97:cb:ab:f1:9e:b7:0d:33:
                    94:23:f5:6a:13:2e:75:54:89:a2:9c:60:d3:d9:a6:
                    26:f6:28:7b:c4:50:ea:0a:5e:26:a1:48:b7:f2:48:
                    b7:71:78:2d:52:fe:a1:f5:47:af:61:14:dd:d0:f7:
                    23:fc:bf:44:d1:56:32:d6:8a:d6:5c:5d:a1:6e:96:
                    12:6e:49:94:d4:84:13:4c:de:51:dd:d0:03:df:f2:
                    96:b7:80:c9:34:ab:ab:35:c2:e0:47:58:a7:06:83:
                    af:79:5d:f0:8f:57:c3:43:49:60:be:ea:95:71:c5:
                    85:0b:bb:77:2b:90:f3:60:1e:2d:15:94:f1:67:ae:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:93:6E:2B:9A:6C:93:68:3B:DB:42:28:67:DC:E5:11:E3:79:90
            X509v3 Authority Key Identifier:
                keyid:CA:33:48:AB:F1:73:D2:77:4C:89:42:00:8C:AD:F6:D6:01:2A:3D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIq_Fz0ndMiUIAjK321gEqPVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/026914-1612-45f4-acdf-2acb9d17c11c/1/yjNIq_Fz0ndMiUIAjK321gEqPVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:78:0b:cf:d4:df:f0:2c:e2:13:f2:39:ff:c9:ec:c6:ef:
         ab:99:4c:7e:14:0e:6a:3f:1d:36:fc:31:71:4a:e0:38:15:9e:
         58:47:67:01:50:7c:7e:71:88:3d:02:3c:6e:6c:3a:b1:e0:2a:
         60:03:79:44:34:8f:04:1a:ef:83:fb:4f:9e:83:ad:bb:33:ad:
         f7:00:ee:80:da:4a:bf:0a:a4:f8:a4:76:f3:e3:90:50:22:a1:
         af:25:7f:32:7c:6e:bb:57:94:bd:51:4e:ca:03:89:c4:3b:23:
         14:19:a1:47:e6:1d:4e:9b:81:0f:ec:2f:f5:04:f2:1e:16:0d:
         f9:b5:91:2d:8b:40:20:9f:b2:55:a7:8e:7d:65:f9:68:a1:ca:
         16:20:2b:6e:e3:a0:7b:74:d3:32:c9:b3:12:f3:65:44:90:ee:
         58:b6:4a:8c:30:ce:bd:53:1b:50:63:12:62:88:f4:1c:30:73:
         b9:eb:31:f4:8b:42:62:05:47:b7:25:b1:11:fc:e7:da:d1:1c:
         db:b6:64:09:6f:eb:d5:9e:64:6f:f5:11:ba:d4:0d:d3:5d:75:
         0d:a9:e2:4f:82:99:26:41:b6:18:da:a9:a6:de:7f:20:bc:5e:
         eb:68:7a:1a:2c:76:f4:f4:0e:bc:c7:d8:4e:5d:ce:85:6c:4c:
         4c:c1:78:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:16:25 2025 by rpki-client