Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          7n32V58iV0K17UvIMFs+jFPLuZSkojFJ4w2I1hBeiHs=
Subject key identifier:   2F:20:C1:6D:41:20:97:E8:A8:F0:1C:7C:7B:55:F7:68:B3:7F:BB:A9
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       0196A98B8B14415661CECD11A00CE16FF3A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0B59
Signing time:             Wed 07 May 2025 07:00:16 +0000
Manifest this update:     Wed 07 May 2025 07:00:16 +0000
Manifest next update:     Thu 08 May 2025 07:00:16 +0000
Files and hashes:         1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
                          2: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: 2KxNkaw70JfKhSIaQ0vUrZATGClFGmIKKjAGdcHyjHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:8b:8b:14:41:56:61:ce:cd:11:a0:0c:e1:6f:f3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: May  7 07:00:16 2025 GMT
            Not After : May  8 07:00:16 2025 GMT
        Subject: CN=2f20c16d412097e8a8f01c7c7b55f768b37fbba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:7c:ca:f7:25:63:7b:68:58:12:03:33:10:
                    9f:1b:15:99:ce:7e:cf:91:a2:d4:11:e7:f0:1b:dd:
                    cb:d1:4b:9f:ef:9d:dc:f5:ee:c8:03:af:1a:62:12:
                    a0:aa:c9:75:c8:55:c5:67:87:b7:c6:5c:84:af:e8:
                    fc:20:14:82:3c:92:bb:1a:01:52:a7:61:8c:c4:e7:
                    77:9b:63:6b:8c:3a:dc:0d:5f:52:49:03:3e:4e:99:
                    a7:cb:19:2d:b0:63:74:76:4e:07:77:41:55:d7:52:
                    97:34:37:e4:6e:52:4b:42:9c:8d:62:9e:54:04:a9:
                    fd:39:a1:34:c5:30:62:d6:58:b6:4d:a9:c5:4e:7a:
                    8e:2c:7e:06:52:35:f6:97:84:94:52:aa:c2:11:54:
                    83:f4:4b:11:24:84:bd:5a:05:6d:c9:dc:d4:80:1b:
                    bd:32:87:7d:56:22:86:31:e2:32:a4:33:98:6e:e9:
                    a0:60:de:f6:66:a1:6a:b2:70:17:90:8c:90:9a:0d:
                    61:d8:b1:79:60:a9:a6:3e:1b:7c:02:fb:18:5c:d7:
                    ca:77:74:33:34:76:fd:23:2c:11:ba:06:2f:f5:12:
                    7f:86:ff:bc:e1:50:65:79:8d:a8:47:c8:b0:fc:a2:
                    d9:33:31:97:16:58:12:17:ad:98:9c:a5:e5:5d:03:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:C1:6D:41:20:97:E8:A8:F0:1C:7C:7B:55:F7:68:B3:7F:BB:A9
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:76:39:6e:de:5f:47:5b:e2:09:3d:4f:85:15:45:b5:8a:b5:
         2e:1d:9e:ff:54:fd:2e:87:9a:87:1f:1e:1a:89:ea:0c:00:df:
         47:20:6e:16:18:b3:38:8c:bd:a8:33:b4:5b:07:db:60:a5:e9:
         69:ed:5c:18:11:9a:ac:86:f0:5d:fd:7a:c5:5e:3e:90:33:9f:
         29:5f:e1:7e:a5:a0:97:49:48:19:8d:7a:f5:70:9b:13:10:bd:
         a6:09:6b:b5:cc:e8:2a:27:ac:9a:93:66:c0:71:48:ba:e0:e8:
         1d:b6:c1:5d:b1:d5:93:34:8e:47:27:b4:f0:42:fa:33:a9:ad:
         2a:00:45:82:6c:74:90:cc:1b:ac:4d:07:f8:d0:e3:41:e5:bc:
         bb:d1:0e:d4:84:0a:3b:fa:96:22:c5:2b:45:9e:05:04:bb:f3:
         c8:38:81:79:45:26:2e:7c:73:c6:c9:ec:fe:c6:9a:67:54:83:
         21:24:ac:fa:f7:73:41:ea:7e:e7:6f:d8:ea:26:8e:88:7a:39:
         21:98:f5:ed:c8:98:35:d8:b0:c3:cc:2d:cb:f7:a8:b5:9a:5f:
         10:11:ec:ec:85:9b:93:06:4d:ed:56:fa:2c:d9:6d:00:8c:c1:
         e8:90:1f:7c:38:1c:33:a1:31:8a:87:3a:e3:f6:42:a0:0a:85:
         52:d9:dc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:36:06 2025 by rpki-client