Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
File:                     yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft (raw, json)
Hash identifier:          //rJnfdiIloRgjSp5CqtUU0FmLhYDDCEMBamaPgLReY=
Subject key identifier:   A4:72:53:A1:B9:13:5F:D1:5D:67:27:6F:F6:57:35:5A:8B:62:9E:0F
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Certificate issuer:       /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial:       0197C04A3334F5CED7C67D26CC0D5B0167DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
Manifest number:          15BA
Signing time:             Mon 30 Jun 2025 10:02:57 +0000
Manifest this update:     Mon 30 Jun 2025 10:02:57 +0000
Manifest next update:     Tue 01 Jul 2025 10:02:57 +0000
Files and hashes:         1: GsgBqUerkRLRUcbs_Ls-LQF-79g.roa (hash: o+byKU/lMI3gKI/hl2xDgwzjDY3NcVCYFP3p/RabszM=)
                          2: K6zGiisfyNDOI3oc313yAhjD4A0.roa (hash: 6AQQYPpSiTsTvRjFcFVlDWIfwUUDTzHtOyOPf+oYlEE=)
                          3: h9M-qa9tzN77x6y4M9oRvv0zAZo.roa (hash: Wom6OpKhUIS6gHUXQCwVqaaK67yLypV+CPblB+/oGcM=)
                          4: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (hash: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=)
                          5: yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl (hash: iFEXVgQo51buwj08QKFarDesNIhNga6wZk9ES/WYVPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 10:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:4a:33:34:f5:ce:d7:c6:7d:26:cc:0d:5b:01:67:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
        Validity
            Not Before: Jun 30 10:02:57 2025 GMT
            Not After : Jul  1 10:02:57 2025 GMT
        Subject: CN=a47253a1b9135fd15d67276ff657355a8b629e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:86:d7:a5:d9:02:4b:b8:fc:7b:5b:49:fb:
                    4a:9b:ab:33:64:67:4b:d7:ad:b1:7f:e7:c2:27:2c:
                    29:f1:7b:01:3e:c4:06:19:ff:f7:f7:9a:55:e9:28:
                    bb:8a:a4:86:7d:0c:60:8c:55:b2:22:6e:5e:58:dd:
                    9f:1b:06:ce:99:df:8a:47:e2:a3:53:37:38:73:0f:
                    8f:ef:75:a0:a0:99:73:3d:be:aa:87:d1:d8:c4:17:
                    ed:4a:aa:2e:89:8f:df:28:c8:cb:e9:36:c6:19:f9:
                    8b:3d:7a:ac:77:87:8c:78:7a:94:17:65:3e:ca:bd:
                    8d:3e:b3:6c:ca:74:fc:85:2f:0f:bf:56:db:a6:e4:
                    a9:f3:2e:df:94:db:46:e6:c4:d5:01:e1:39:74:4d:
                    5a:e6:d2:ad:a9:f8:f8:76:0e:87:06:a9:27:95:bd:
                    e4:32:90:d5:4a:b7:d1:90:6b:38:72:90:71:3a:df:
                    29:89:48:fa:fc:66:a4:a3:98:81:80:f7:43:9f:1f:
                    04:af:60:aa:91:aa:e4:14:e2:e6:d7:b7:bb:79:ad:
                    bc:17:48:b8:9b:0e:b7:62:1c:bd:3c:8c:11:03:d4:
                    0f:21:c9:ac:2c:83:ff:c1:2a:13:34:56:dd:12:d2:
                    f4:44:c6:d3:27:a6:5d:e8:4e:cb:8a:9b:f0:7a:4e:
                    b0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:53:A1:B9:13:5F:D1:5D:67:27:6F:F6:57:35:5A:8B:62:9E:0F
            X509v3 Authority Key Identifier:
                keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:56:17:c4:61:2f:98:74:0a:c4:22:1f:e1:c1:d1:10:08:
         e8:61:c5:a9:ac:22:8d:ae:ca:d2:84:c0:17:5f:1f:ca:11:70:
         bd:50:4b:03:72:8b:a3:dd:ed:2a:17:dc:1e:ee:96:be:f6:d0:
         88:92:d3:2e:98:98:51:15:59:ca:28:64:c2:9c:a4:1b:a4:07:
         b0:8c:56:14:77:c0:e5:40:00:9f:72:0b:7d:27:e3:d6:7e:77:
         4d:24:32:b6:c8:e8:eb:e4:58:20:03:e4:ad:de:06:f7:cc:bd:
         f2:7d:3c:37:a3:0f:f8:e9:af:fe:eb:11:d5:a4:b4:2c:c9:a7:
         28:cf:cd:58:c3:d1:63:84:32:0b:af:1f:37:a5:6b:e8:aa:9a:
         33:52:2c:2f:3f:8a:96:ec:52:f8:9b:de:15:08:a7:2c:e8:c1:
         72:47:2b:bc:44:65:71:c0:6b:79:7c:44:37:f5:34:98:d0:17:
         c6:a7:2b:55:10:c4:ca:9c:8c:e8:68:f5:bf:16:d9:4b:48:ba:
         33:e8:fb:1b:2c:6d:5d:14:ec:2d:a8:72:6c:a3:38:f2:a4:e8:
         8b:db:76:6b:12:8d:3e:fc:c4:a3:e5:c3:58:64:3d:8d:86:eb:
         e8:55:8c:d2:ad:6a:b6:6f:c6:c9:25:ca:20:ce:c7:f3:a5:0f:
         07:4c:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:23:20 2025 by rpki-client