Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
File:                     yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft (raw, json)
Hash identifier:          3O040Hvou3RAtz+wRYrNzyzcJEtasGgPKafnOvOZANI=
Subject key identifier:   0B:2C:A4:DF:CC:6E:4F:15:40:95:76:70:93:D1:E7:C9:AF:F9:98:01
Authority key identifier: C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B
Certificate issuer:       /CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
Certificate serial:       0197B6D78B8097506EBED4B1F90690342164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:08 +0000
Files and hashes:         1: L3Ex1huYGbfFaIkjXL4KGjdWjh0.roa (hash: 8p4bAJw9gJuSHOeFBlOOJiJU9JXB0IkecShkQCCnZXg=)
                          2: yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl (hash: mhNf837b9KrYFk+DETjbqVrtoNCAGiZdMCsMc2uau4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:8b:80:97:50:6e:be:d4:b1:f9:06:90:34:21:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8e2d1f3257cfae0ffe673c1f77534653312f06b
        Validity
            Not Before: Jun 28 14:01:08 2025 GMT
            Not After : Jun 29 14:01:08 2025 GMT
        Subject: CN=0b2ca4dfcc6e4f154095767093d1e7c9aff99801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:f7:de:82:bc:a9:4e:e0:72:e5:48:51:7a:
                    f5:61:bb:05:ad:8a:c6:68:9a:24:2b:49:57:1d:af:
                    50:1c:65:19:54:03:92:ec:46:b6:7c:19:42:8e:5a:
                    b8:09:59:20:89:91:55:40:47:90:31:3c:bc:7c:2a:
                    dc:c5:b1:b7:38:05:f8:0e:f0:bc:a2:6c:33:45:a7:
                    0e:90:f8:78:8d:e2:b9:98:cf:1c:47:6b:a7:81:09:
                    7c:fc:e0:1d:97:fa:94:22:ae:de:39:8d:b2:9d:26:
                    2c:ff:e5:cd:6d:fd:36:6d:38:b4:d8:75:3d:9a:12:
                    1f:5b:0b:e4:1e:51:56:9a:59:80:27:2b:21:a0:dd:
                    8f:b2:ee:e6:fd:ae:f1:2a:17:3a:26:14:6a:f9:8d:
                    e6:d6:a2:2c:3f:ff:41:11:8f:95:24:75:e3:e1:f9:
                    f1:eb:89:46:27:da:ef:94:33:f1:73:b9:99:14:c0:
                    20:84:7c:9b:e0:04:cc:97:9f:d9:04:bb:34:da:2f:
                    03:e9:3d:af:d6:26:8a:49:48:5f:a8:fa:80:e4:40:
                    29:5f:cb:68:f4:01:bb:a3:cc:58:5e:78:e8:d9:e8:
                    2c:3f:8d:68:f0:40:05:b6:48:5b:78:3d:73:f3:7a:
                    22:48:ec:5a:81:e5:23:6a:32:d1:75:ed:5e:ea:ef:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:A4:DF:CC:6E:4F:15:40:95:76:70:93:D1:E7:C9:AF:F9:98:01
            X509v3 Authority Key Identifier:
                keyid:C8:E2:D1:F3:25:7C:FA:E0:FF:E6:73:C1:F7:75:34:65:33:12:F0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/d0e824-f7d3-4f0d-bdd4-b9628a24d9d1/1/yOLR8yV8-uD_5nPB93U0ZTMS8Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:81:28:72:c3:85:3d:0d:0c:91:f8:77:8e:ce:73:1d:a8:35:
         dc:e1:76:4b:fe:f6:ce:26:91:97:23:21:4b:35:a5:ac:2f:a2:
         76:bc:01:dd:4c:30:59:0b:a6:a7:fb:49:d2:56:09:21:2b:55:
         61:ad:af:a8:4f:25:1c:6a:ae:8c:6a:d2:53:d4:a3:68:3d:3a:
         e1:6e:86:29:bd:5c:a4:82:5c:0d:f1:bb:d4:c6:e4:c5:f3:71:
         16:7f:a3:c9:2a:f3:cb:d4:65:c9:31:a6:8f:46:5e:e4:c2:39:
         a5:79:aa:32:0a:62:61:57:80:8d:2d:c1:73:24:32:36:17:a2:
         cf:c0:6e:a8:3b:d5:3c:c1:22:d1:7b:16:60:e0:96:7e:98:ea:
         da:df:8e:29:43:1a:2e:d0:3e:82:f7:4c:35:8b:5c:e8:fa:33:
         5e:fc:f9:f9:fd:4f:39:1a:74:28:2e:a4:cc:d2:2b:31:b1:bb:
         78:02:cf:8f:0e:46:73:dd:28:36:79:0e:c5:7b:5f:4f:bc:f0:
         86:59:fd:ad:dc:bd:66:05:41:96:c8:52:7b:da:9b:23:c8:5a:
         d0:61:10:3e:f6:67:50:56:9a:12:1a:4a:2f:a5:61:9d:1e:32:
         02:46:88:26:8a:0a:62:64:cc:f5:2b:63:e8:f1:8e:93:73:e7:
         8e:56:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:56 2025 by rpki-client