Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          keAPRKvqsPDbnvrMjgf8xET8a2jjmCdrCCiWrKlrt0E=
Subject key identifier:   DE:5C:DD:BC:2C:60:73:5C:F2:3F:A0:44:A4:DE:8B:19:BC:13:79:98
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       0196B4EB68778FCDAC1D1BEF67C6FEF6AFEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          08F9
Signing time:             Fri 09 May 2025 12:00:48 +0000
Manifest this update:     Fri 09 May 2025 12:00:48 +0000
Manifest next update:     Sat 10 May 2025 12:00:48 +0000
Files and hashes:         1: L7vo6n9BgY3fZANo6epe7vbZHts.roa (hash: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=)
                          2: Yb9tsCfpQgyQVhV8fqh-Sp_yitA.roa (hash: 2hs56XjZJhM4FFxn6rpMfJzmdBVo5/6HusR5cW2LXtA=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: BLSSxoGwyrQ5+gle/I1N81awYX+T/tczSU6uQ3DdM5Y=)
                          4: fVp3g-s19I4wph98MiqmHy9dJ8Q.roa (hash: 1ttOZ6t4S7bYciANzsJmcpLu3G2yq0AKNa7bw1gtrgY=)
                          5: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (hash: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:eb:68:77:8f:cd:ac:1d:1b:ef:67:c6:fe:f6:af:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: May  9 12:00:48 2025 GMT
            Not After : May 10 12:00:48 2025 GMT
        Subject: CN=de5cddbc2c60735cf23fa044a4de8b19bc137998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:94:fd:ae:c1:bd:06:1f:dc:43:e3:1e:6e:43:
                    37:f8:28:04:7a:b8:15:6c:6f:46:3c:33:87:fb:07:
                    65:c7:7f:7a:c0:c4:6d:1d:c9:ba:31:cf:b1:09:20:
                    3b:3c:91:66:61:0e:07:3c:d4:ff:4a:ce:26:4c:ad:
                    f1:be:d4:8b:c1:81:b7:f9:e3:5f:e4:e3:46:90:ca:
                    7d:69:07:98:4e:38:29:52:dc:fe:d3:3a:a3:37:e4:
                    22:96:aa:f7:e2:84:cb:a4:de:ef:aa:2f:c8:d4:36:
                    82:d2:93:6a:44:40:a9:23:49:99:81:78:a1:d6:25:
                    db:77:98:d6:fe:76:61:f4:14:2a:89:ae:cd:ba:07:
                    20:1b:01:c2:6b:f4:a6:66:a2:c3:75:b2:c6:06:3b:
                    25:04:95:ba:d2:1e:b7:1c:ac:a7:9f:5b:34:3b:16:
                    4b:af:47:7c:72:92:4e:ae:ef:e9:e9:54:95:14:3b:
                    27:91:73:12:c0:70:1d:5b:ef:89:86:14:8b:b4:cd:
                    71:fc:66:34:9d:c0:e7:05:98:b0:30:97:3c:93:fa:
                    da:af:3a:e0:44:fd:ce:4e:37:20:40:e0:65:de:a5:
                    c1:57:d7:39:ab:ac:1f:cc:d1:da:12:c2:31:36:3b:
                    36:a5:9f:20:0c:f8:99:f3:05:ce:6f:e4:27:db:cc:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5C:DD:BC:2C:60:73:5C:F2:3F:A0:44:A4:DE:8B:19:BC:13:79:98
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:c5:ff:54:68:6b:f1:d7:3c:3f:c8:f9:5b:93:42:83:f1:
         81:be:dd:40:4e:50:e8:f2:b6:9c:6f:c0:33:5f:74:b3:89:0c:
         f6:c2:cb:fc:06:25:d5:f6:1e:0a:e0:b9:5e:09:fe:b0:86:81:
         b8:91:e7:62:cd:0c:c0:dd:90:19:ee:2e:79:04:9e:90:c1:5a:
         f6:c8:96:39:61:30:f3:c9:18:93:7a:fb:48:65:82:ba:12:f6:
         bf:d6:3b:d7:8f:5f:78:18:79:3d:55:2b:9d:27:26:be:5e:fd:
         b4:e8:fa:b7:74:92:f1:64:63:8f:b2:b2:e7:a7:78:85:f9:c6:
         aa:c1:16:0a:dd:86:1e:58:d1:c9:d8:c0:39:1a:63:70:e0:cb:
         e1:c7:b5:28:8a:f7:b5:7a:61:62:af:f4:e7:2a:0a:8c:be:67:
         a3:9d:e8:35:c4:9b:d5:96:20:e1:b5:10:ff:ed:b8:e5:be:f1:
         50:99:b9:f4:a6:d7:6f:ec:c4:f5:70:97:48:d7:b7:0d:f5:0c:
         01:d1:81:0e:34:c0:3f:2d:ec:03:e6:f6:f5:40:09:fe:f6:d1:
         5e:6c:88:9a:db:4b:51:fc:bb:5c:81:60:6b:bb:ef:89:02:3a:
         ae:96:f1:e2:8e:6d:c4:18:f7:25:ea:7a:1e:b1:f1:6b:9b:b3:
         1a:0b:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:47:33 2025 by rpki-client