Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File:                     YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier:          JxAny8QP5dRIA91bwmEjFTWmCqPfuQsapIzdMd8QSnE=
Subject key identifier:   91:82:23:18:75:72:6E:DB:9B:B8:9D:93:48:A6:88:B1:38:C8:4F:B5
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer:       /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial:       0197B74539616C5A463D994DFBA0178D6C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number:          1560
Signing time:             Sat 28 Jun 2025 16:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:56 +0000
Files and hashes:         1: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: PiJfROR+u6Eo6N3uLm68GMSo6yPBKL787wgKXrfHs4I=)
                          2: bx2zbgFzR2bVaPl_B5ZfOBHYjjw.roa (hash: ud4OsdTxDDqxynACtaERs5qzUlmK1nyDHD7M5p1jW+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:39:61:6c:5a:46:3d:99:4d:fb:a0:17:8d:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
        Validity
            Not Before: Jun 28 16:00:56 2025 GMT
            Not After : Jun 29 16:00:56 2025 GMT
        Subject: CN=9182231875726edb9bb89d9348a688b138c84fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:2f:61:b4:68:2e:aa:bd:39:62:4f:bc:95:
                    30:6b:08:c1:e6:aa:7e:6e:dc:cf:cd:26:66:f9:fc:
                    d4:49:8c:51:33:9c:ff:87:40:f2:02:4c:3f:f6:aa:
                    a2:64:6e:9c:5b:25:a7:d2:67:9c:93:0f:b5:6a:8e:
                    8c:76:91:52:00:1b:76:4d:91:13:16:9f:45:43:3e:
                    51:eb:f4:73:12:27:67:cb:16:03:3e:99:b0:cb:16:
                    85:af:98:25:bf:ca:89:2b:9d:ba:1c:39:08:c0:7c:
                    c1:41:fc:74:c3:f5:28:20:9a:18:86:43:3d:ac:35:
                    00:5a:54:29:ec:f1:d7:01:ac:f9:c7:9d:04:b8:03:
                    92:f8:78:7e:c0:2e:ee:1a:9a:f8:b8:53:6e:f3:15:
                    c0:bb:b0:8b:87:17:d0:97:92:8d:0c:f6:c8:f1:28:
                    8c:df:a6:29:a9:45:1f:74:8f:58:a0:68:0a:9a:3a:
                    e0:2d:6c:91:b5:a2:d7:e3:79:fa:4a:59:60:44:d7:
                    0b:d6:4f:49:fa:7d:a1:b5:14:97:5e:e2:33:29:4d:
                    d1:83:b8:32:04:df:4a:84:62:cf:a6:89:46:74:44:
                    28:e8:98:3f:c0:79:4d:8b:01:ea:58:0a:c6:37:d0:
                    eb:be:c2:90:b7:ac:a3:54:e1:50:19:ff:97:2b:68:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:82:23:18:75:72:6E:DB:9B:B8:9D:93:48:A6:88:B1:38:C8:4F:B5
            X509v3 Authority Key Identifier:
                keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:d9:41:6a:a5:e0:60:66:34:9c:81:3e:a9:07:88:35:ad:
         96:ae:48:28:ab:87:1f:df:7d:21:b9:20:51:06:03:44:b6:76:
         ab:f7:42:41:41:86:7a:65:4d:85:24:61:3d:f6:39:72:d5:0c:
         0b:b5:03:2f:e8:70:1e:ec:9c:cf:e1:0c:2d:d4:5e:2a:a0:a0:
         45:4b:6b:eb:a6:6c:1e:80:20:dd:f8:f5:6a:a6:73:f9:3e:52:
         58:47:e6:1e:fa:51:2f:a8:d3:74:0f:55:45:35:17:8c:02:33:
         20:49:81:9c:4b:db:43:55:a1:7e:d6:d9:94:2a:0b:c3:ed:3e:
         9a:c6:f2:ea:e5:23:70:db:ac:84:77:1e:43:13:44:c5:02:de:
         41:ef:6d:ad:2b:f5:b6:72:2a:c0:a5:4d:0f:cb:c0:a8:7a:81:
         82:fe:e4:42:74:f1:01:be:ca:4b:56:be:d7:d7:7c:c2:e6:74:
         0d:bb:77:9d:6c:25:3b:bf:18:8a:4b:2b:70:05:62:fe:3c:86:
         ec:83:a7:83:dd:c1:7e:48:cc:46:d9:2d:82:33:30:21:77:3b:
         a9:e1:ac:84:87:91:01:ab:f4:80:a1:72:62:de:44:23:cb:45:
         b0:2e:59:ac:9d:90:bf:c6:77:77:bb:ff:08:a7:f5:48:7d:45:
         5d:70:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:54 2025 by rpki-client