Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          dOdokFUkgNRRxAtSnAPVW3s59qHhF3u4m0VFnuxtACA=
Subject key identifier:   88:F6:85:12:48:D9:95:EA:34:35:18:21:0D:43:3B:39:1E:02:B8:E0
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       0196C50348648E00D7120596E2A199F4A15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          04BF
Signing time:             Mon 12 May 2025 15:00:48 +0000
Manifest this update:     Mon 12 May 2025 15:00:48 +0000
Manifest next update:     Tue 13 May 2025 15:00:48 +0000
Files and hashes:         1: TrtZuni9BXkr6xZOXYLQCg04wuw.roa (hash: SIw1RJxvKD/HG9TI34PNPQ5r5zhuKGFFi0wwoRLgCSI=)
                          2: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: 7i9FqBVam9ICtQRc/gsC6PaFL6DnxjmjcvZcUmXckn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:03:48:64:8e:00:d7:12:05:96:e2:a1:99:f4:a1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: May 12 15:00:48 2025 GMT
            Not After : May 13 15:00:48 2025 GMT
        Subject: CN=88f6851248d995ea343518210d433b391e02b8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:ea:b0:ea:15:b2:27:3c:18:e2:70:a8:48:
                    60:04:dc:9b:1f:5e:b6:30:4c:db:17:23:51:4d:69:
                    f5:73:ee:fe:70:45:8c:e6:98:db:0e:0c:29:f7:ae:
                    3b:3f:d6:c2:62:63:16:b1:8e:4a:56:ca:dd:3b:06:
                    25:e1:62:90:3a:a3:51:f9:a6:1d:0c:d8:39:05:b1:
                    ec:d3:3c:ff:88:dc:bb:27:90:fa:b2:ff:18:7b:d7:
                    82:79:f8:2a:c8:8a:81:c7:cb:e8:81:57:8c:30:4a:
                    c5:88:03:95:54:75:60:9c:ad:08:f1:71:4e:a5:24:
                    d0:38:79:c7:1d:ba:42:be:f4:b7:c8:7c:5f:9c:bb:
                    95:9b:ce:09:c7:e0:9b:f4:fe:b6:cd:7c:93:06:6d:
                    7a:3d:d9:8e:e7:16:37:61:13:47:88:33:f5:48:ed:
                    df:54:c4:c0:e2:01:0e:42:33:b4:29:80:90:3e:04:
                    f0:9f:fc:af:4b:e6:a9:51:ea:a5:e3:e8:d3:aa:ab:
                    28:cd:50:95:27:af:3f:63:df:25:29:ca:39:07:26:
                    b3:dd:01:e2:56:70:24:a7:0c:d6:f6:45:68:ff:3e:
                    43:89:5e:7f:83:cc:a9:31:ec:68:8c:18:3b:ee:9a:
                    67:11:b6:50:7d:78:d5:da:e2:4e:21:a5:7d:20:20:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F6:85:12:48:D9:95:EA:34:35:18:21:0D:43:3B:39:1E:02:B8:E0
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:f0:b2:1f:ff:01:0f:24:fe:36:95:01:6c:f5:9a:5f:b0:
         c3:bd:07:a7:a7:f1:17:a6:4f:1c:f3:3c:d5:dc:c2:8e:05:3d:
         e6:79:59:25:0f:82:44:39:d2:48:2f:43:31:c0:f8:30:f4:7d:
         d1:db:30:ec:29:0e:94:1e:23:32:cd:b2:b8:f4:ab:82:a1:ec:
         f3:67:50:a4:a3:13:d4:f9:3c:2d:f1:e2:e3:de:11:f0:85:ea:
         c4:7a:1f:a8:c5:29:1f:7a:37:0d:1a:54:4c:22:9d:b2:62:23:
         0b:2c:6d:6b:20:b6:d0:39:5e:d7:fc:b3:47:e4:61:85:25:32:
         d3:11:fd:30:23:55:b9:a9:82:c8:d7:c2:b8:62:2a:82:8f:1b:
         84:70:91:0e:ae:19:39:b5:ab:4a:a4:35:d2:20:8d:36:93:43:
         73:ba:83:de:db:7f:ad:7e:9c:9f:17:ee:34:b0:fd:19:e9:2f:
         de:6d:cb:db:a8:19:1c:e6:d8:00:9a:7f:1d:be:be:1a:e7:cb:
         bd:ed:10:ef:15:3a:01:58:93:e5:09:e9:1f:06:fc:33:70:11:
         89:53:86:98:29:33:d3:67:20:c8:f5:39:4c:23:eb:bf:2c:94:
         c4:68:05:44:7b:2e:d1:46:c7:cd:03:b9:0b:ff:51:1e:c9:28:
         f1:8f:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:23:13 2025 by rpki-client