Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File:                     Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier:          +sm7cWA4xCvo/CJ5PqnTDtIcaIth85Dlsx4PS2PGCVI=
Subject key identifier:   04:79:86:B9:1D:0F:84:44:78:99:C1:9B:78:B2:70:80:29:86:42:A7
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer:       /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial:       0196DF6767E9C91E8CC095C7C772C98B3846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number:          0B46
Signing time:             Sat 17 May 2025 18:00:17 +0000
Manifest this update:     Sat 17 May 2025 18:00:17 +0000
Manifest next update:     Sun 18 May 2025 18:00:17 +0000
Files and hashes:         1: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: jv9RVATbOZXnuMm0KlhtyrhNPnaSyt6TmLyKYNfJaZo=)
                          2: _B7qhSnCxfn7CerNmWLFyrIUzIo.roa (hash: SylKEkKlUGkISQweMYeNKNB3Kfx1l1zxuoZbI4A8/rE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:df:67:67:e9:c9:1e:8c:c0:95:c7:c7:72:c9:8b:38:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
        Validity
            Not Before: May 17 18:00:17 2025 GMT
            Not After : May 18 18:00:17 2025 GMT
        Subject: CN=047986b91d0f84447899c19b78b27080298642a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:42:e2:c4:38:e5:09:47:a6:23:bc:a4:8e:
                    89:46:50:30:4c:8f:09:77:49:ac:f4:d8:58:25:85:
                    34:f4:4f:b1:f9:e6:da:d9:80:3a:28:dd:5c:f5:e4:
                    78:74:23:a5:38:fe:1a:98:31:09:bb:e5:f8:27:90:
                    c9:51:c5:10:91:16:01:da:b2:26:6f:9e:80:8d:95:
                    7f:fc:a4:50:77:7b:66:c6:0f:15:60:18:ab:0c:18:
                    f4:be:ad:86:60:f4:28:03:61:5f:db:76:cb:68:9e:
                    56:12:e5:bc:d2:ec:1d:60:5d:f1:b5:4c:1e:a0:c7:
                    7a:f0:26:ab:63:93:9f:95:e0:16:c1:61:24:6f:7a:
                    c1:c1:7f:9a:32:c6:4b:06:a3:f2:03:e9:bf:5f:1c:
                    7b:ef:3c:cb:29:db:44:4e:34:2e:e3:e9:5c:cf:09:
                    2f:2b:e3:a8:85:67:33:be:b6:60:eb:6d:86:ef:8a:
                    89:d2:23:d3:99:7a:a5:5e:d8:14:02:c4:67:5f:15:
                    76:4e:70:7c:7a:f8:74:61:6e:81:22:3b:2f:f9:a1:
                    e2:49:77:24:dc:4d:ed:d3:04:0f:96:5e:09:c7:40:
                    23:e9:8a:43:aa:75:9e:e8:7b:b1:b5:5d:af:68:f8:
                    8f:b7:ad:48:2c:33:29:1c:0e:0f:b4:30:42:e3:59:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:86:B9:1D:0F:84:44:78:99:C1:9B:78:B2:70:80:29:86:42:A7
            X509v3 Authority Key Identifier:
                keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:63:a7:a6:90:d3:f6:a7:d8:cf:93:9a:6f:5a:47:0a:07:
         28:9a:9e:4e:5d:3d:5c:a3:08:4d:4a:f2:8a:f1:d3:7f:b3:73:
         5e:05:56:27:b7:55:f1:92:81:09:81:6e:97:ab:9d:11:a7:42:
         3c:45:d2:50:1b:97:66:f7:10:49:3e:4d:1f:55:9d:8b:d9:c5:
         ae:cd:31:64:4c:90:1c:93:83:8f:71:21:3a:49:b9:45:00:61:
         b5:f4:4a:09:5b:f8:3a:b0:53:ef:6a:25:7f:a6:48:57:16:02:
         69:81:0f:e4:2c:41:0d:bc:59:65:14:91:5e:70:0c:33:88:65:
         18:63:82:35:ce:32:c4:e0:80:57:08:97:7e:55:26:8c:f7:e0:
         ae:27:6f:59:61:b9:78:b1:34:0b:d4:64:08:6c:42:1e:fa:93:
         27:a0:18:6e:7f:c2:05:cc:12:6e:54:ec:d2:36:23:0c:d6:af:
         e7:42:9d:92:48:49:57:2a:23:97:52:32:70:30:b7:a4:dd:c9:
         06:f3:52:d3:9e:6c:29:d8:bd:e7:97:98:35:ee:79:d6:19:46:
         5c:d7:a5:3f:06:fd:96:c3:d4:85:1b:12:f8:9e:34:4e:a8:3e:
         14:a2:a6:3a:1f:14:20:21:f0:51:4c:48:ce:e2:5e:85:a9:37:
         0d:7f:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 03:20:01 2025 by rpki-client