Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
File:                     YPa89uKxCboqFKc7l1rZVEhLS6U.mft (raw, json)
Hash identifier:          CjVaH+Ybl/7tCS6+kBO9lI2D5DLC+R6HmdaW8aEumzo=
Subject key identifier:   CE:2C:A0:5D:34:D1:38:C3:48:62:86:41:7F:5E:F8:20:2C:B0:96:D3
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Certificate issuer:       /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial:       0196C7CD51EE290F62ADBEE53A40CC9F56C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
Manifest number:          09BB
Signing time:             Tue 13 May 2025 04:00:43 +0000
Manifest this update:     Tue 13 May 2025 04:00:43 +0000
Manifest next update:     Wed 14 May 2025 04:00:43 +0000
Files and hashes:         1: YPa89uKxCboqFKc7l1rZVEhLS6U.crl (hash: Dz5LNxKDdt/jOOrZmaDkwl+6pm6zmdthGGeaww+DTOI=)
                          2: oNp64lcp-PwrYsQaBw1j30tzyNw.roa (hash: FzeHCqPb/tC2Vmdnn3r7gfGFiDclam5dSTVPZrLAWO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:51:ee:29:0f:62:ad:be:e5:3a:40:cc:9f:56:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
        Validity
            Not Before: May 13 04:00:43 2025 GMT
            Not After : May 14 04:00:43 2025 GMT
        Subject: CN=ce2ca05d34d138c3486286417f5ef8202cb096d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:fa:c7:a2:40:ba:4f:60:dd:09:10:e6:a3:
                    9c:eb:b9:db:fa:f9:98:97:a6:a6:06:e1:0f:93:cb:
                    55:00:fe:95:85:14:18:69:a8:7b:8b:3a:fb:31:42:
                    f3:83:25:6a:ab:1c:d5:3a:76:9a:f5:64:14:2d:84:
                    7c:ee:bb:0f:bb:be:98:0d:50:ad:29:74:dc:64:c5:
                    9f:01:ae:38:4f:a6:b4:1c:8d:26:3a:11:a3:ae:3b:
                    29:f2:94:69:48:8c:82:a1:85:80:11:f2:28:e0:5c:
                    2f:43:e6:aa:91:64:36:eb:be:e4:a1:1d:cf:15:8c:
                    af:0b:91:13:28:7d:ea:03:f2:21:9b:7a:e1:27:6e:
                    02:91:b7:4f:21:4e:d4:39:b3:71:63:7c:e4:06:28:
                    f4:65:8b:67:f8:dd:11:d3:ad:92:98:b6:c4:d4:af:
                    67:f4:27:03:62:8d:0f:2a:fb:90:3b:9f:21:a1:28:
                    c1:ff:ca:1f:31:2d:db:a1:25:1a:8c:74:b9:fb:e9:
                    da:2b:87:2f:e7:28:99:7c:b0:70:7a:51:96:54:a8:
                    e6:4c:b1:98:7d:43:89:0c:c5:2d:c5:d2:3a:bb:9f:
                    5b:ba:6c:60:86:bc:da:7c:62:e5:0f:bb:d0:9c:c9:
                    c8:d3:6c:21:52:34:73:c2:8f:14:3e:e7:96:dc:69:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:A0:5D:34:D1:38:C3:48:62:86:41:7F:5E:F8:20:2C:B0:96:D3
            X509v3 Authority Key Identifier:
                keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:26:fc:64:06:b4:a5:21:de:46:4b:aa:b6:93:2f:0e:d9:
         a3:1e:3d:73:47:1d:9e:fd:58:86:a6:b4:4a:4e:d6:c3:50:7b:
         92:63:df:82:8a:3f:fd:de:09:1a:fa:07:da:f6:cf:26:3c:3a:
         5f:df:a6:8b:37:50:af:3f:b4:04:da:a9:ec:70:61:3a:63:a8:
         1c:e7:a8:88:6b:ca:65:79:07:e5:aa:25:cb:3f:04:b2:eb:61:
         d8:38:8c:03:b0:48:30:6d:b2:62:95:98:af:24:83:f5:7a:1b:
         eb:6d:51:08:d1:fa:38:68:25:7b:bd:3c:73:02:a7:d1:df:2f:
         76:cd:57:98:17:4e:ba:4d:8d:de:44:51:b9:6c:3c:19:eb:5a:
         9a:fe:d8:7a:a9:60:8e:11:f2:ad:60:30:ce:ec:04:5b:36:cc:
         16:d4:ba:95:b9:e1:e1:8d:d2:f2:aa:7d:07:61:69:da:fb:68:
         8d:b4:cb:19:71:b3:f5:44:6a:a9:b7:94:4a:80:d3:9b:67:97:
         be:7b:7c:9d:c7:d0:7e:5c:ca:70:d2:51:68:3d:9a:f2:39:d1:
         1e:bd:cd:3a:b6:89:4a:e4:3b:a4:fe:d2:2b:14:af:2d:dd:bd:
         38:20:57:b3:94:bc:25:22:18:26:7e:dc:99:80:2a:0c:d2:a8:
         ae:d5:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:48:59 2025 by rpki-client