Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File:                     Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier:          8bFNrmUP+UhzXXNa54nU5LVhxbst3oT1kXfRCO8UVjA=
Subject key identifier:   2E:D7:0A:BE:67:DC:80:0A:03:DC:1B:EC:C9:1E:2A:79:12:6F:A9:78
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer:       /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial:       0196D1AC38B363E8FBE5AE3709A17640A2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number:          0E02
Signing time:             Thu 15 May 2025 02:00:46 +0000
Manifest this update:     Thu 15 May 2025 02:00:46 +0000
Manifest next update:     Fri 16 May 2025 02:00:46 +0000
Files and hashes:         1: LjdJyg2i9vGZpm7VXPwBOMCSEiw.roa (hash: MZ/fbmAB50oT4J+U1xzh08P+Raln/5z9YHMJGvIm1Zg=)
                          2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: FmpEV+TH6NAQ2+66RF5N+hKrQRdwVCo4hyveGhfGasc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d1:ac:38:b3:63:e8:fb:e5:ae:37:09:a1:76:40:a2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
        Validity
            Not Before: May 15 02:00:46 2025 GMT
            Not After : May 16 02:00:46 2025 GMT
        Subject: CN=2ed70abe67dc800a03dc1becc91e2a79126fa978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:f2:5a:e3:e4:af:8a:86:f6:c4:99:4f:72:
                    dd:eb:ea:da:6e:1a:82:12:e7:86:ac:1c:52:38:3f:
                    0b:8f:d1:7b:07:cd:10:15:b1:65:d7:20:29:78:ec:
                    72:27:ab:31:85:f3:77:c2:6f:60:39:c9:85:5d:bb:
                    39:6c:0f:d4:a3:61:b1:85:08:c3:07:fb:06:d9:c3:
                    35:72:83:8d:25:5d:b4:55:be:2a:98:65:66:f1:ba:
                    2b:51:fd:4d:90:a6:d2:19:14:f5:65:cd:40:cd:d6:
                    b5:a7:69:0d:fe:fa:ba:2f:f2:74:a0:77:87:da:e9:
                    6d:f7:85:49:0a:45:bb:51:78:f0:28:fc:ec:21:ac:
                    ce:69:a8:6b:22:ee:e1:63:7f:fc:17:c5:f1:a2:9b:
                    57:c2:d0:69:b4:f8:78:bb:9e:13:61:ec:66:bc:18:
                    d1:78:b7:03:9f:3a:8e:a0:6e:81:d7:f0:dd:b5:9d:
                    93:bf:9f:40:84:1d:d5:cd:17:2d:d7:f3:6a:f8:6d:
                    a8:d5:0e:07:5b:65:64:cc:4d:a5:c4:a6:e8:77:f2:
                    43:46:bf:74:7e:b9:49:ad:a1:ca:cf:64:76:6b:85:
                    dd:d2:f9:fe:0e:33:54:68:59:1b:51:fd:29:43:85:
                    f7:8f:b0:25:25:33:d8:b0:4d:93:a6:83:af:9d:8b:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:0A:BE:67:DC:80:0A:03:DC:1B:EC:C9:1E:2A:79:12:6F:A9:78
            X509v3 Authority Key Identifier:
                keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:21:58:11:b3:40:26:c4:1e:c6:67:c4:a9:1b:50:ec:ae:10:
         2e:79:71:52:76:ef:45:9d:fe:27:2f:4c:0c:cf:7c:79:a1:a3:
         d4:fd:11:d5:40:79:a6:48:93:cb:e3:47:e4:b6:41:dc:48:fe:
         dd:db:35:87:1a:0f:90:6e:2b:85:34:8f:ca:31:ef:dd:fc:03:
         33:a6:1d:a6:da:d1:9e:b8:85:13:6c:de:78:bb:ec:00:19:e8:
         21:1a:ab:5c:a2:85:75:5f:4c:a1:27:f4:51:2b:c8:ff:e4:51:
         bd:f5:c0:33:36:ce:74:a8:b6:ff:76:61:c0:a2:72:80:10:53:
         59:2e:e1:16:44:7f:e1:ae:e0:c3:47:6c:c1:78:2f:1a:27:b9:
         d4:2b:be:22:a8:f2:d1:82:86:01:43:b5:e2:86:fb:2c:54:f9:
         44:90:de:10:9b:b1:17:37:56:5f:5f:95:7f:56:d6:33:76:d9:
         aa:00:0e:e4:4d:ac:2c:e8:3f:90:8b:6b:37:ed:b1:23:59:99:
         85:43:6e:44:ac:b1:e5:6d:10:58:1d:33:c3:c0:3a:e8:9b:cf:
         e7:3b:9f:e5:d9:7d:b1:48:6d:7b:e3:5d:e7:3a:17:7e:0a:0e:
         bb:02:64:cd:bc:11:0d:80:19:dc:de:4e:31:20:c0:33:93:b0:
         14:9a:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:05:02 2025 by rpki-client