Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
File:                     yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft (raw, json)
Hash identifier:          S72AJ2K4cmmlhkzAFybuPbsWFr5kisepJY89GR+LLvk=
Subject key identifier:   06:8C:6D:65:76:5D:C4:5A:83:EE:0A:5A:F6:04:87:60:4E:4C:3B:34
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Certificate issuer:       /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial:       0196BB23F9709C9E08A645768DE014AC980A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
Manifest number:          11C7
Signing time:             Sat 10 May 2025 17:00:19 +0000
Manifest this update:     Sat 10 May 2025 17:00:19 +0000
Manifest next update:     Sun 11 May 2025 17:00:19 +0000
Files and hashes:         1: SNGV0mPG4-vHp6-PAm-3E8l_tQ4.roa (hash: FllvrAA0IFuRu04U/PVVcunONsM/J0wPDkjc5E97TCo=)
                          2: yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl (hash: 2j5z2SEY7rE7wulqiEV8gpl+73VS7Zc2UAYJAAcx1c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:23:f9:70:9c:9e:08:a6:45:76:8d:e0:14:ac:98:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
        Validity
            Not Before: May 10 17:00:19 2025 GMT
            Not After : May 11 17:00:19 2025 GMT
        Subject: CN=068c6d65765dc45a83ee0a5af60487604e4c3b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:9f:25:19:e4:15:0e:30:3d:5e:bb:b7:de:
                    6e:a1:cd:e7:7f:53:bd:6a:fc:82:45:54:a2:9a:64:
                    e4:60:1c:89:f1:90:de:ad:c8:a9:6f:94:84:b3:af:
                    92:79:9a:c5:0f:57:40:af:d0:6a:b1:92:f9:e7:e2:
                    a3:e1:f6:ba:db:d3:82:dc:e5:e7:80:48:4e:25:bc:
                    26:de:4a:d5:3d:e2:15:9a:61:94:c5:e7:17:5a:f7:
                    e9:e1:b5:ee:06:f4:a6:7e:2b:21:e7:88:78:1d:b1:
                    b4:77:7f:76:ef:70:da:c2:88:e9:61:9f:9c:7e:c6:
                    77:20:96:08:1e:f1:ed:ad:dc:07:11:b7:1e:7f:79:
                    d5:e9:d7:f6:c6:c2:35:94:06:09:b1:0d:64:16:31:
                    02:75:60:26:71:16:66:2f:80:bf:64:69:42:55:d9:
                    c5:e5:07:c3:8a:42:c5:0b:60:85:74:28:2e:92:81:
                    6c:8e:70:9d:c9:79:25:ba:2c:59:7b:b8:3b:ca:1a:
                    04:41:de:3c:11:29:14:7b:31:9e:63:34:90:e2:ab:
                    ea:fb:bf:5c:59:54:1b:1a:3e:55:dd:fd:9a:87:00:
                    2a:9f:4b:15:82:7f:0d:53:3e:ae:7c:36:7d:a9:1e:
                    15:44:fc:08:30:d0:4f:13:2b:99:4c:fd:31:97:e1:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:6D:65:76:5D:C4:5A:83:EE:0A:5A:F6:04:87:60:4E:4C:3B:34
            X509v3 Authority Key Identifier:
                keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:f9:97:3e:ad:fd:3b:f3:54:9d:58:fc:0b:db:52:a5:82:
         0d:07:1e:ea:a7:55:6d:8c:44:ed:12:62:80:85:d4:9a:aa:62:
         b2:bb:2c:6d:c8:87:2e:91:e5:e6:5e:66:94:de:22:de:ab:c5:
         a0:b6:2f:bb:16:62:72:7e:e4:20:a8:07:2c:fa:1a:6d:b9:62:
         d6:f8:a0:e1:91:f9:00:d2:39:69:8a:10:19:e4:d4:07:ab:49:
         51:51:93:41:b6:0e:17:c1:ec:d8:c9:10:b2:00:c5:33:bf:2c:
         02:4c:5e:75:3b:8d:bb:74:06:93:53:82:fb:b9:b6:fd:14:32:
         c4:86:37:86:bf:36:db:06:db:28:a8:7e:84:bf:17:60:36:ca:
         11:60:4a:ec:ea:9b:55:f2:0c:e1:7f:f6:0b:a6:6b:6b:3b:9b:
         92:84:2b:67:eb:22:04:9e:89:a0:bf:1f:8c:10:37:a4:82:5a:
         2e:51:6f:d4:15:f5:49:ef:15:58:cf:bb:d4:10:25:4e:5f:42:
         0c:d9:fa:8c:ff:e4:6d:99:90:dc:49:e4:c3:e7:07:dc:1f:d8:
         b6:5d:d9:0e:cf:c8:e0:86:2f:4d:38:ba:4f:28:d7:9d:30:fa:
         22:ac:80:9c:e9:34:ea:b3:0b:08:d1:5a:aa:c8:86:7e:a6:ea:
         98:52:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:20:59 2025 by rpki-client