Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
File:                     YFUi433iaw1WiVrBirB9fHhKuTw.mft (raw, json)
Hash identifier:          sRlzjPqIJNkiKQTCGrPMp5uPFBlvuh5jIJRZqOoaFrM=
Subject key identifier:   E2:82:C7:EB:6A:3E:DC:68:B3:B2:1A:D9:A9:6D:B3:5B:C7:FB:71:B1
Authority key identifier: 60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C
Certificate issuer:       /CN=605522e37de26b0d56895ac18ab07d7c784ab93c
Certificate serial:       0197B5FC45BE56DE91BC0C57D562CB59790C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
Manifest number:          0E65
Signing time:             Sat 28 Jun 2025 10:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:38 +0000
Files and hashes:         1: YFUi433iaw1WiVrBirB9fHhKuTw.crl (hash: q1Mh7yO9RO+F4t+vT3aq9JhI+MZO91SF36eyljdft90=)
                          2: v4bbx4Tyrv4mjtMYql77jSIvfEA.roa (hash: A4gl29evMU8HAtsdqZFfkRY14UgWdfJ98W4DA9n97zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:45:be:56:de:91:bc:0c:57:d5:62:cb:59:79:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605522e37de26b0d56895ac18ab07d7c784ab93c
        Validity
            Not Before: Jun 28 10:01:38 2025 GMT
            Not After : Jun 29 10:01:38 2025 GMT
        Subject: CN=e282c7eb6a3edc68b3b21ad9a96db35bc7fb71b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:31:d4:39:01:06:43:78:94:98:64:9c:d4:
                    49:2c:f2:6b:0a:54:1f:a2:9e:d2:3e:72:4a:c1:30:
                    89:d5:19:b4:ed:c0:ff:a0:04:ef:70:f0:17:d6:90:
                    7c:57:b1:be:a9:e4:b1:ee:78:fb:27:36:85:83:e9:
                    3c:cd:7b:49:ba:24:12:83:f9:13:f7:98:fe:b3:27:
                    95:69:e5:a7:6a:5f:fb:8b:2b:61:ee:ce:9a:fd:77:
                    2a:8a:ae:41:fd:4a:f8:26:2a:2e:74:1d:ef:bf:1a:
                    53:f6:82:5d:14:49:37:37:42:d0:e5:f9:08:7a:9c:
                    64:79:25:90:4e:96:c7:b3:43:ae:c0:f0:b4:a4:b6:
                    b9:2c:26:60:35:11:89:90:83:c5:78:69:dd:ff:88:
                    50:3f:68:e6:24:d0:0a:80:63:f6:46:8f:ec:3d:ed:
                    19:d8:2a:49:0a:fa:07:c6:3d:87:2e:5d:c4:79:80:
                    38:eb:e7:7d:ec:8e:51:1c:f1:fd:f6:d6:ea:f4:b4:
                    64:d1:3e:2e:dd:12:11:3d:77:25:ba:cd:7b:0f:34:
                    61:00:5e:aa:e7:4d:08:c9:b0:62:13:da:36:b5:56:
                    d4:e8:0a:46:5d:ef:8c:46:01:53:98:9f:8c:c7:b2:
                    a3:d6:54:88:16:27:02:55:e7:84:d9:98:70:ee:b2:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:C7:EB:6A:3E:DC:68:B3:B2:1A:D9:A9:6D:B3:5B:C7:FB:71:B1
            X509v3 Authority Key Identifier:
                keyid:60:55:22:E3:7D:E2:6B:0D:56:89:5A:C1:8A:B0:7D:7C:78:4A:B9:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFUi433iaw1WiVrBirB9fHhKuTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/0961f9-d85d-4976-a4cd-a18ed19c49e3/1/YFUi433iaw1WiVrBirB9fHhKuTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:f3:63:d3:7b:31:f4:b0:ce:c9:81:48:56:68:c1:60:f8:
         d6:b9:9a:e7:11:fd:84:d2:c9:34:78:54:68:4f:6d:ed:93:a7:
         b3:19:1e:e2:8b:ee:9b:c7:51:ff:e7:d3:4f:09:51:13:4c:b5:
         7c:1a:ac:25:84:78:25:bf:6f:16:c4:17:cc:04:4b:d7:be:98:
         d5:9d:e1:9a:aa:7b:7d:b7:c5:4f:20:a3:25:43:95:57:a8:3c:
         72:9c:5e:ec:99:c8:9d:9a:22:d3:64:cb:63:5c:56:dc:0f:a9:
         1a:53:3b:1e:ab:e3:7b:08:8d:86:db:b9:37:12:8f:d2:98:2e:
         43:b0:48:55:58:43:c5:63:6a:10:f9:68:dc:69:ea:74:7a:f2:
         74:d0:e5:19:ed:52:a9:73:f7:96:e3:ef:7d:2c:a6:51:b5:bd:
         f0:e4:1e:32:e7:2e:4d:e3:ad:80:6b:66:49:18:d5:09:13:8f:
         8b:cc:db:98:27:45:93:dc:c4:da:3f:93:05:ad:df:0b:a0:f7:
         15:80:fd:52:87:73:9e:21:a8:06:e2:3c:2a:29:b2:6e:d8:b6:
         6c:df:2f:59:07:8c:66:27:0d:39:3c:8a:63:f5:80:86:60:0d:
         6a:fe:79:b4:cd:91:36:c3:e2:cf:0f:1a:fe:cc:6b:8b:c4:49:
         8a:c7:a9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:34 2025 by rpki-client