Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File:                     Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier:          WwsT+4KesWaADUzv7lB/iZZXOUbNyX4z4WNOZ+7uthQ=
Subject key identifier:   E9:50:0E:C3:FC:04:FD:DC:C5:82:88:32:64:28:2E:C0:4C:C6:BF:6A
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer:       /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial:       0197B74533EAE0FB160C09B4CDC8EC09A379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:55 +0000
Files and hashes:         1: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: ODn3+qLckF8QjCEMGRWeXaDWKHkgPY+7jJiAJJrfJkw=)
                          2: d6C8v6GoigEzg6pbLvTWJvddupU.roa (hash: EXaNGOIp/fMA/oSDDsbRGa0FHPZi/hzE5RwEYVseBGk=)
                          3: og-QYcWWG7blmQPnjS8N7Pfy2CI.roa (hash: F2sqc18qvqzf4/nshb6Uc/1k3H2tfbxW4Ckt/4G4dtQ=)
                          4: q8IlRbnDa7-lnFAs-hO2WPcOwLk.roa (hash: hbIKEj6KOMWmptm4f819IMKKqrXG2uGf4j2uozA9qks=)
                          5: zZc3DeDwts9pkaWZgvcKrYsKK6M.roa (hash: oGvkVQFGZUcaVi+hdfOY9pZnUYCxpKrEsPEP9NwnTEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:33:ea:e0:fb:16:0c:09:b4:cd:c8:ec:09:a3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
        Validity
            Not Before: Jun 28 16:00:55 2025 GMT
            Not After : Jun 29 16:00:55 2025 GMT
        Subject: CN=e9500ec3fc04fddcc582883264282ec04cc6bf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:03:6d:3a:32:c3:31:c2:2b:65:92:ee:40:
                    27:7f:d5:3c:90:04:67:b5:11:9e:f3:eb:fc:98:7e:
                    89:68:8f:7c:c7:a1:87:59:72:ee:84:50:b2:2a:ba:
                    5f:60:ec:02:ec:30:4d:24:92:5d:dd:a5:32:24:cd:
                    25:34:8c:5d:8b:ef:3c:1e:06:2c:69:05:83:fd:23:
                    2f:58:a2:c5:6c:c3:83:82:23:0f:7c:f3:5a:35:03:
                    63:59:74:6e:bd:52:d7:06:9f:9a:e7:ec:a9:10:02:
                    5b:ac:bc:61:21:3f:29:b5:c8:38:cc:0d:24:00:2d:
                    4a:1b:a1:b4:57:20:5f:71:d1:b8:3f:e9:85:de:16:
                    df:1d:e1:d4:73:6b:b4:63:79:ca:8b:f5:aa:23:31:
                    12:10:17:da:16:8b:a4:12:8d:00:64:a2:e5:5a:b9:
                    1e:f1:fa:60:4a:8b:21:07:b6:24:24:c0:81:b2:d8:
                    b7:3c:7d:2f:56:7c:a5:af:3a:88:02:23:81:f4:67:
                    d2:b5:6f:18:84:9e:b7:83:db:69:ff:1e:18:af:f7:
                    a6:2f:7b:b5:ac:ce:89:89:d8:c6:0b:42:74:38:b2:
                    e5:50:4f:b7:f1:49:44:8f:29:b9:88:5b:a3:54:25:
                    66:ed:19:68:a2:39:b3:e3:41:d6:63:b2:7c:fc:40:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:0E:C3:FC:04:FD:DC:C5:82:88:32:64:28:2E:C0:4C:C6:BF:6A
            X509v3 Authority Key Identifier:
                keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0e:43:ff:3a:9c:6c:05:df:c9:bd:b0:af:59:50:8f:d5:c4:
         83:a7:08:46:71:85:72:6e:96:95:50:44:2e:7f:4a:a4:ca:ec:
         7e:bd:5a:05:d9:48:40:2c:0f:d6:14:a7:dd:8b:41:05:76:76:
         98:4e:5b:63:e3:4a:e8:3f:46:e6:fb:9f:e5:40:36:7f:59:bf:
         2b:bb:93:46:0d:21:7c:7c:65:2b:05:b4:35:e0:af:dc:7d:29:
         27:92:db:54:98:bd:5b:97:c6:eb:2a:73:34:65:e6:10:37:98:
         ba:32:f7:31:b0:9c:11:f7:9c:ad:a7:3c:c7:35:75:3d:68:a6:
         ba:aa:94:57:ea:4f:0e:45:9c:e9:9e:09:c3:1c:7a:48:e1:c9:
         c9:fd:ab:ec:96:cb:05:08:e7:28:12:5f:90:fb:48:1b:b3:a2:
         c9:95:5e:0b:6a:16:db:52:16:9e:d1:c4:49:7d:73:05:13:8a:
         15:33:5e:b1:47:7a:40:53:9f:20:64:12:4d:1e:ed:36:9e:38:
         86:6e:30:e8:a5:92:33:cc:ce:ba:e2:44:1e:80:08:a1:8f:69:
         e1:87:09:87:88:8a:c3:c4:b8:58:a6:3a:b4:c9:98:66:00:70:
         4e:80:4d:7f:99:b6:44:9d:c5:d2:e4:ba:69:2c:c5:f0:5b:f0:
         1a:f7:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:46 2025 by rpki-client