Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File:                     yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier:          3XygbHwANDKwLnhID0rxzh1YxOwP8ymrTTdlksZqBf8=
Subject key identifier:   A3:7A:89:8D:90:97:48:60:6B:E8:DE:FD:A2:CC:2F:39:4C:46:AF:E6
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer:       /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial:       0196A50A1311C1E32FE5F755A37E01921E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number:          04D0
Signing time:             Tue 06 May 2025 10:00:22 +0000
Manifest this update:     Tue 06 May 2025 10:00:22 +0000
Manifest next update:     Wed 07 May 2025 10:00:22 +0000
Files and hashes:         1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
                          2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: NRbLtjsLG7INuVbIvRyGiLxfL9mkC26WjcUSKLwdQ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 10:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:0a:13:11:c1:e3:2f:e5:f7:55:a3:7e:01:92:1e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
        Validity
            Not Before: May  6 10:00:22 2025 GMT
            Not After : May  7 10:00:22 2025 GMT
        Subject: CN=a37a898d909748606be8defda2cc2f394c46afe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2f:b6:37:e3:0d:c7:8e:79:59:0d:f2:43:ef:
                    57:ac:73:93:63:58:a0:25:ef:1f:72:ad:75:b5:47:
                    9c:e7:90:eb:8e:1d:f7:bd:d9:d5:33:8f:36:78:5a:
                    b8:5a:eb:02:49:9a:10:2e:90:06:00:7e:d6:8e:4d:
                    81:ac:7a:b6:56:81:20:11:5e:c1:e7:23:69:83:45:
                    fc:44:05:88:99:17:72:23:24:0f:15:ba:08:3d:45:
                    32:b4:42:b9:55:07:0c:81:a6:a7:8a:b8:96:8f:23:
                    16:18:35:99:6e:9f:6a:e3:62:c9:1f:bf:82:e8:f7:
                    ca:03:58:66:45:02:d7:f4:df:fc:ca:cb:48:d0:c8:
                    50:9a:0c:21:b5:d7:99:a9:74:46:40:d5:04:9f:5a:
                    1b:98:5e:3b:9c:3b:95:0a:e9:c2:59:ac:37:e8:9f:
                    4e:a4:b2:1c:19:92:e4:6b:f3:70:29:8b:79:50:d7:
                    4c:e2:5f:85:ec:73:50:a4:f3:63:cd:b5:57:9f:4d:
                    76:5e:cf:38:f9:a2:51:8f:a1:16:2a:c0:ba:f1:d7:
                    0f:98:dd:c0:f3:58:ee:27:f4:83:ba:5a:d3:12:57:
                    d1:cf:9d:b0:65:83:6a:e1:51:59:cc:f5:e6:5f:38:
                    ee:4f:ba:22:35:1b:dc:e7:ae:40:c3:f9:3e:da:50:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7A:89:8D:90:97:48:60:6B:E8:DE:FD:A2:CC:2F:39:4C:46:AF:E6
            X509v3 Authority Key Identifier:
                keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:01:47:49:91:05:b7:5b:70:84:68:57:fa:ce:e8:68:dd:
         8f:cf:c9:2d:c8:76:3d:97:9b:78:94:44:7f:26:72:bc:53:aa:
         50:af:94:b6:62:95:f7:4a:52:ff:3a:2b:e4:66:88:76:3b:5b:
         fe:c5:e9:5f:3c:4a:ba:de:5c:ac:d2:10:de:c1:00:06:a8:bc:
         a0:ea:5c:f1:04:13:89:cf:9e:10:f3:ed:be:93:26:0d:df:5b:
         a7:99:0b:82:4d:70:f5:d0:65:55:da:d3:53:04:d2:f5:d8:6e:
         41:f5:8a:fb:7e:aa:2f:18:a9:fd:76:f8:35:b1:40:a6:6a:4c:
         4b:3e:19:01:c4:b1:c3:3f:dc:91:bc:26:a2:aa:d1:90:89:9a:
         6c:28:ba:a5:6b:34:c9:ee:a9:d8:ad:6f:51:19:f3:6e:3f:ab:
         89:35:50:25:26:4e:09:57:0e:71:dc:73:3c:b0:48:69:b9:35:
         4d:bd:31:80:56:af:0f:d3:11:cb:a6:bb:17:8e:d7:90:5d:64:
         d2:97:14:db:0d:37:25:56:84:71:d3:44:20:0f:88:1d:e0:05:
         bf:d1:3b:06:4d:de:f6:15:bc:3c:28:b4:52:07:68:eb:69:18:
         48:f2:46:98:e4:71:bc:18:66:81:70:d5:a9:55:dd:5d:46:d2:
         62:79:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:54:55 2025 by rpki-client