Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          GVC97rGGqMhNozHNP3jI4CFDqw4JgLhEisq1V0w+KnA=
Subject key identifier:   85:D8:8C:6B:3F:41:F7:7C:3A:B7:A9:79:11:39:CB:36:CF:3F:93:6B
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       0197B6A1CF2CFD1638C23A8FB974F8951B34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          0E63
Signing time:             Sat 28 Jun 2025 13:02:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:26 +0000
Files and hashes:         1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: tHPaMpWbpuVgQEYb+KYLcq6FYk0AGNc/nUktOo+h0qA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:cf:2c:fd:16:38:c2:3a:8f:b9:74:f8:95:1b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Jun 28 13:02:26 2025 GMT
            Not After : Jun 29 13:02:26 2025 GMT
        Subject: CN=85d88c6b3f41f77c3ab7a9791139cb36cf3f936b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:85:e2:fc:44:db:77:da:cb:99:b3:ff:db:
                    c6:a4:90:0d:fc:1f:e9:b2:a7:c5:32:05:6d:fa:72:
                    0e:7c:2f:96:25:4b:64:cd:60:61:e7:a2:f5:c8:21:
                    1d:b8:ab:31:b1:14:4f:34:f2:a3:a9:bb:85:4f:d2:
                    ea:b3:13:20:f5:11:e6:7d:35:cb:fd:b7:cc:a0:3c:
                    ed:06:b1:d6:01:22:51:4a:a9:33:ff:92:e9:e4:52:
                    ff:49:66:11:dc:2d:c4:c7:c8:72:3e:6b:0e:f9:38:
                    4d:cd:1d:9c:bb:7f:5d:b9:9e:33:10:da:cb:2c:02:
                    a2:ff:29:2e:d4:f8:c2:96:fc:b4:9d:ab:cf:e0:7a:
                    54:ae:39:d1:ca:0b:ee:bb:d1:be:ec:ab:17:f9:5e:
                    1a:04:25:a3:ad:77:e8:ac:d1:9d:17:2c:7d:46:05:
                    5b:bb:0f:96:b6:11:5e:a7:4c:42:e8:ad:01:17:ec:
                    66:54:07:b4:c9:1d:aa:2c:7d:bc:b2:82:47:b6:5b:
                    2e:ad:a9:3b:43:4a:aa:97:0a:01:9a:20:4f:5a:0e:
                    6a:78:af:1b:1b:3f:51:2e:19:45:a7:9f:ad:3b:8d:
                    9f:00:9a:d8:11:43:83:dc:42:cb:51:c0:09:d6:a5:
                    44:c4:2f:bd:6d:93:2d:18:01:36:11:64:89:04:d0:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D8:8C:6B:3F:41:F7:7C:3A:B7:A9:79:11:39:CB:36:CF:3F:93:6B
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:33:61:3b:17:dc:63:af:93:65:2e:97:4e:0b:88:1c:85:60:
         0e:9c:ac:8c:33:2d:19:29:f7:01:ae:bc:da:30:ec:20:4e:df:
         ed:fa:8c:ca:e9:5e:22:a4:ec:3f:34:d9:22:7e:9c:27:5e:d1:
         b5:da:76:0a:73:51:0c:11:36:9f:04:cd:2a:18:64:39:ab:05:
         8f:d1:6c:e3:4b:42:aa:00:65:b2:e0:84:18:5e:db:e6:cf:cd:
         a2:b7:48:be:78:5a:2f:8d:8a:6b:87:07:6d:48:00:58:06:de:
         bd:3d:31:33:55:a4:2a:13:a4:a5:d0:88:cb:7e:76:e9:17:3e:
         c9:9d:7c:80:79:f2:ce:49:c2:ab:a8:cc:a3:18:3b:f5:1d:f6:
         4d:3d:0b:67:c5:b9:b0:90:fb:29:b7:e7:4d:f1:04:0c:78:b6:
         d0:89:bf:89:74:f1:ac:a0:a6:3b:61:a6:da:01:b9:09:e0:63:
         b1:54:1a:67:ba:11:7d:2d:f7:fe:ad:b7:8b:91:34:9e:54:da:
         90:d1:a5:2a:ab:4b:89:bc:a9:1e:b7:21:5e:75:e4:0c:03:3f:
         72:7d:2e:2e:a7:f4:f0:c5:77:7f:dd:09:3c:1a:49:b9:56:cc:
         cb:ae:ac:3a:23:58:6b:f4:0e:48:f4:63:60:82:e2:48:81:bd:
         cf:e5:64:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:18 2025 by rpki-client