Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File:                     y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier:          pYdvXRG62VdkvHz/ivdNGh23vUzv/UCWVKLC3vKKjb0=
Subject key identifier:   47:B6:60:3A:1D:98:47:7E:91:47:A5:D5:28:24:DF:B3:AD:63:EB:FF
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer:       /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial:       0196DBF8AF1B3B225A3E773883F137446694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number:          0608
Signing time:             Sat 17 May 2025 02:00:29 +0000
Manifest this update:     Sat 17 May 2025 02:00:29 +0000
Manifest next update:     Sun 18 May 2025 02:00:29 +0000
Files and hashes:         1: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (hash: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=)
                          2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: m1F81Xz9jJm2p/Bo4+USKiqFAgjzz2EEmlSh7Kmf4Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:db:f8:af:1b:3b:22:5a:3e:77:38:83:f1:37:44:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
        Validity
            Not Before: May 17 02:00:29 2025 GMT
            Not After : May 18 02:00:29 2025 GMT
        Subject: CN=47b6603a1d98477e9147a5d52824dfb3ad63ebff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:04:33:68:8c:a6:de:8a:af:c3:4b:44:08:
                    c5:2c:12:1c:6c:0b:90:bd:27:00:7b:84:eb:e8:a8:
                    2c:31:b7:13:60:23:0e:f9:f6:42:2a:61:c3:52:3c:
                    c5:47:04:e9:56:ab:e1:91:d0:f7:d0:34:12:2e:61:
                    29:33:56:dc:d1:b2:9c:62:37:a8:88:f8:1d:82:f2:
                    0b:52:e8:12:90:45:86:16:5a:e8:5c:58:f2:54:dd:
                    cc:3a:eb:b4:02:71:d3:f7:ab:47:69:18:91:6a:6c:
                    63:57:77:0d:76:19:01:fe:f0:be:d0:ee:ff:31:49:
                    7d:af:39:17:2b:0b:54:3c:11:18:ee:70:c2:99:dc:
                    7c:da:5b:d0:e9:d5:bf:d0:6b:21:f8:6d:f5:3b:a2:
                    8a:96:74:4b:ef:59:56:80:03:38:93:67:99:db:c5:
                    43:d7:a0:6a:c9:2b:ac:94:82:b7:95:79:58:7f:3a:
                    8b:cf:6e:c2:84:bd:da:a7:8f:eb:91:c9:09:4a:fd:
                    56:c8:88:b1:77:1d:cb:ca:12:67:44:ec:9c:b3:bb:
                    1c:27:76:d3:f1:83:73:44:eb:c6:4f:9e:9e:5a:93:
                    55:93:29:1d:04:48:e5:d6:bc:15:a4:22:1e:b5:d2:
                    68:41:85:6c:a9:98:bf:e3:aa:7a:b6:96:37:a6:de:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B6:60:3A:1D:98:47:7E:91:47:A5:D5:28:24:DF:B3:AD:63:EB:FF
            X509v3 Authority Key Identifier:
                keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:6a:75:6b:54:da:a4:c0:02:83:a6:9a:7e:39:67:f2:a4:
         32:b6:bc:c1:2b:ed:3c:e5:1c:25:36:1b:47:49:5d:24:c7:f0:
         1d:69:19:e4:5f:58:e9:37:c8:e7:af:ed:6e:79:86:6f:d6:be:
         07:12:4f:5e:87:13:47:f5:dc:02:15:9c:b1:3e:24:f9:a8:fa:
         4f:3f:d2:15:ac:cf:32:61:1c:3d:b1:59:0a:c6:cf:94:62:ad:
         3b:81:91:be:d3:c1:db:8c:64:67:1b:e3:e6:56:32:5e:c1:5e:
         c2:39:d7:b2:3e:5b:6d:97:f7:b5:85:1c:a0:76:c7:67:48:92:
         71:3e:74:2d:ac:59:8a:49:92:fb:ba:ac:87:b3:ba:02:87:7e:
         63:fd:2b:ef:bf:b6:6a:3d:cc:1a:99:94:e4:65:33:1b:02:5a:
         8a:62:3f:79:0c:bc:aa:c7:3d:47:7c:c6:31:8d:de:3b:8d:6c:
         09:b3:14:a4:20:01:9e:80:83:d9:eb:a1:2b:ec:88:7c:37:98:
         3d:74:cf:db:06:dd:64:cc:2c:27:7f:5e:7e:ef:49:42:19:9c:
         cf:27:20:af:39:b2:9c:d1:84:6d:9a:eb:53:28:4a:48:3b:0d:
         20:ff:ac:f5:cc:c3:0d:f3:84:e1:4b:37:2a:35:24:d0:88:35:
         0e:b0:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:23:43 2025 by rpki-client