Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
File:                     YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft (raw, json)
Hash identifier:          A0+ocbtJnAVblsnG2sWvpU7TLgkJPm9LYDQblJsF0hM=
Subject key identifier:   D9:B3:81:FA:9A:E4:F7:E8:FC:C4:C9:CB:50:5A:8E:8A:DA:AC:86:6B
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Certificate issuer:       /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial:       0196BAB697219B81F7F4FC5689C7CAAE9ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
Manifest number:          0596
Signing time:             Sat 10 May 2025 15:00:50 +0000
Manifest this update:     Sat 10 May 2025 15:00:50 +0000
Manifest next update:     Sun 11 May 2025 15:00:50 +0000
Files and hashes:         1: 1DSZn5ns00u_zh3eaHcMM8S9LJ8.roa (hash: f2k2Rp4Tvmjd6WBxwwnYblRCaq4QO4K1UztQrgvzq4k=)
                          2: MNaMRPeSME_XYwjj2iW6Vinmifg.roa (hash: /1QrovjxUCyErSvoCQnPnqMxU5YJcSU6R6BPRoCuQcg=)
                          3: YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl (hash: xOALeeic6JS2r8s4zKzjEgdh3DMA5bBV6GRmh+DRM40=)
                          4: yIFDC3DQyKnYJrOVoxpI_9NxtQ4.roa (hash: cgrK+K+/SobWe5sM1Xw8KgFBTC6aou6l85u0UGfO0is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:97:21:9b:81:f7:f4:fc:56:89:c7:ca:ae:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
        Validity
            Not Before: May 10 15:00:50 2025 GMT
            Not After : May 11 15:00:50 2025 GMT
        Subject: CN=d9b381fa9ae4f7e8fcc4c9cb505a8e8adaac866b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:3d:ea:94:5c:e6:92:9f:95:1a:a1:dc:6b:
                    11:09:89:d6:59:73:84:31:a7:94:12:62:83:33:05:
                    2d:7c:8a:cd:31:26:7b:34:65:ba:35:1f:84:e2:77:
                    a8:81:4a:a3:e0:db:d4:55:b0:d3:49:8a:7a:95:97:
                    f1:91:24:f5:8a:66:bd:01:23:25:a4:69:d9:60:06:
                    c5:09:cb:1a:27:90:ca:b5:31:3c:95:90:75:d4:49:
                    63:ef:af:05:38:09:5a:7a:3e:0b:b4:b6:bf:bf:95:
                    5e:91:02:0b:cf:39:41:d2:fa:3d:de:00:6a:ee:7d:
                    7a:76:6b:27:e5:68:df:1d:54:87:01:8a:26:94:48:
                    10:8e:df:72:c0:f3:cc:0d:69:53:0d:9b:1e:42:b3:
                    26:40:ff:5c:cd:f3:10:0e:c4:1f:0c:0f:ed:96:ce:
                    85:9e:2d:24:c2:87:37:eb:53:01:c8:ff:2d:32:77:
                    31:62:c5:04:03:e3:10:a4:a6:78:b0:44:30:75:d7:
                    9b:14:46:f5:dc:3a:aa:d9:9b:33:a3:06:34:a3:27:
                    0a:44:0f:87:ab:a7:28:84:4d:42:67:81:25:36:53:
                    36:f3:bf:d1:27:bd:49:f5:8c:0c:7a:72:6a:c8:1a:
                    aa:12:08:1f:fd:f8:75:73:39:9c:a3:f1:1c:51:87:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B3:81:FA:9A:E4:F7:E8:FC:C4:C9:CB:50:5A:8E:8A:DA:AC:86:6B
            X509v3 Authority Key Identifier:
                keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:51:c5:e2:1e:f3:fb:92:b5:10:ab:20:33:ea:c1:18:dd:1c:
         67:98:6a:a3:73:e5:d5:db:ae:f4:20:43:df:ff:61:17:83:aa:
         af:c1:cd:4d:e1:cf:51:01:96:24:58:08:3d:05:7a:b2:67:32:
         1b:0b:43:66:51:ca:ec:0d:54:df:c0:c7:68:a8:03:18:15:8b:
         fc:ae:f6:43:9d:60:95:d7:f1:b9:bf:2b:21:21:51:eb:01:88:
         68:84:be:a0:56:7e:44:c8:1d:25:f6:25:d9:2b:c7:3d:0e:f2:
         3c:44:48:74:1d:45:2d:1b:6a:f9:d7:1f:0c:7e:45:fc:c2:e5:
         7b:b6:c7:42:61:38:6a:78:2c:b8:fd:60:61:74:18:0d:f8:0c:
         c0:6c:9e:3b:4d:86:18:32:7b:9f:36:22:11:13:b0:93:64:6c:
         0e:78:38:2f:54:6a:62:ce:7b:c9:06:2a:77:f1:17:12:93:4d:
         1b:eb:74:af:fc:d0:ea:dc:60:1e:31:b0:c1:2f:2f:e9:42:40:
         11:65:ca:d1:1f:dd:63:c7:61:f2:49:c9:94:53:80:a2:ba:25:
         75:56:69:08:90:0e:60:24:00:94:fe:f3:95:15:72:5c:f4:98:
         9f:e0:d9:9f:5a:af:04:17:39:24:5e:19:94:a4:b5:b5:33:2d:
         de:57:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:57:49 2025 by rpki-client