Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File:                     YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier:          WyTcKLPGxGY9DGwH+In9fytyL6pppk9JriAFrEgOrwU=
Subject key identifier:   F3:7F:2B:9B:39:6D:0D:65:0A:F0:C1:4F:19:7F:61:0C:4F:85:E4:74
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer:       /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial:       0197B6D774FB937CBB8DAFD0FB65B0857791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 14:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:02 +0000
Files and hashes:         1: 1-4YCAM0PPWpbsIo98h9fkDFWnfg.roa (hash: 3vMBuIr7SB4QB0M6+bNSVLgKbzy+afGhB2NFcCi6J/M=)
                          2: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: 3ipOWD8e1CHp2/RXjVc9Ydp/EiSTmZEzco+87T4E0Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:74:fb:93:7c:bb:8d:af:d0:fb:65:b0:85:77:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
        Validity
            Not Before: Jun 28 14:01:02 2025 GMT
            Not After : Jun 29 14:01:02 2025 GMT
        Subject: CN=f37f2b9b396d0d650af0c14f197f610c4f85e474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:0e:39:7d:2b:0b:01:c3:46:2b:73:3e:1e:
                    5a:33:bf:7d:e5:ae:c7:fa:83:71:36:b0:7e:ee:7e:
                    1a:a6:d6:1a:66:93:da:b8:07:ea:b1:cd:2b:55:00:
                    84:53:6e:46:40:cc:e8:56:5c:34:50:7f:e2:bb:2b:
                    59:47:fb:38:5e:11:51:54:1e:6a:85:fc:8a:86:7c:
                    0b:e6:56:3d:72:9a:62:9d:5c:99:3e:44:4e:58:6d:
                    75:0d:78:f6:12:1e:ef:62:33:6f:c3:14:1d:47:da:
                    a8:e6:09:e5:0b:cb:0a:55:cd:c9:20:bc:c5:ca:27:
                    e3:0f:26:3f:13:ad:08:df:c4:e5:2c:7e:8f:56:c1:
                    89:8d:ce:5e:c7:b9:f1:25:74:e4:26:d7:92:7f:e7:
                    d7:2c:c6:48:bf:d8:f9:86:7d:70:03:3e:99:62:40:
                    a7:f0:86:73:f8:78:b4:f8:b0:e9:86:95:44:97:ef:
                    20:48:25:1a:74:87:10:37:7a:9a:76:59:e1:40:2a:
                    41:91:34:d9:34:78:d5:f6:c7:30:81:4a:09:e5:76:
                    d6:0f:81:cb:e1:99:85:62:8b:c4:af:52:ac:9c:5e:
                    d1:2d:73:3b:07:9a:8d:76:03:c5:52:9c:b2:e9:2b:
                    77:43:67:cf:9a:78:a2:ef:ac:e4:cc:d8:d7:4b:d2:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7F:2B:9B:39:6D:0D:65:0A:F0:C1:4F:19:7F:61:0C:4F:85:E4:74
            X509v3 Authority Key Identifier:
                keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:bf:81:ea:bb:80:d7:db:16:12:9b:dd:6e:d1:83:e0:17:
         ef:3b:ee:f0:6e:08:5b:46:27:14:4b:47:8c:d1:32:79:a8:5a:
         a0:68:d4:fd:2e:6f:10:47:28:35:4f:1d:7b:5b:6e:a6:eb:53:
         af:7b:4e:ac:44:57:3c:d4:37:fe:09:b4:db:28:ad:09:cc:fa:
         d9:fe:e1:ba:ea:26:e9:76:81:7c:da:86:6e:8f:ea:2c:f3:97:
         56:86:06:f4:c6:fe:ba:48:af:0f:53:4c:c4:af:8a:a2:16:f4:
         87:9f:6c:b9:fd:2e:1b:63:55:de:ec:8c:97:c4:73:ba:14:b9:
         76:ed:0b:03:d2:89:45:80:21:b1:7a:23:8c:42:38:c5:97:58:
         3f:aa:37:e5:db:16:92:a0:65:f3:f7:4a:ec:bf:68:93:61:32:
         f8:7f:b7:dd:ae:06:4a:e3:dc:e7:13:6f:eb:3a:6b:24:96:e3:
         b7:37:17:2b:8d:5c:81:46:48:5a:fd:86:2e:8d:2a:25:bb:0d:
         95:28:52:25:1c:2c:00:9d:f0:13:00:2c:b5:1e:6c:17:0a:33:
         82:0f:4f:e8:6e:92:fc:6b:f1:8d:b8:94:af:22:a3:95:b6:17:
         8e:a4:60:6b:11:96:26:9a:23:1e:1a:3e:34:48:f5:b9:ae:e2:
         66:4e:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:31 2025 by rpki-client