Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File:                     YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier:          GH5MV9euE2GTiRTzYiXTgvOhdoT8W4caqc4aKbpv5Ks=
Subject key identifier:   03:5B:01:30:D7:14:59:C4:CF:A4:15:2F:02:B7:6A:90:0C:2F:23:C7
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer:       /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial:       0196C9F2C87E7408E70EB1DDF1BA210ED0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number:          153C
Signing time:             Tue 13 May 2025 14:00:53 +0000
Manifest this update:     Tue 13 May 2025 14:00:53 +0000
Manifest next update:     Wed 14 May 2025 14:00:53 +0000
Files and hashes:         1: FKwES05QXgv7GDIVYOX1rJUnQN0.roa (hash: q8y+Z4GqNRIr+efHEWQCbzvWoFlZ2bwXtIGJIqiojdY=)
                          2: IqcwUeOGcAnS-tBgjkUM-XNO3is.roa (hash: wn0T7F5N0/+0KEuMUe6YilItigsuYUK7JvlaTh+yZLw=)
                          3: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: laxGxPX+VTVFk0fxKNAjiD5OjcCmT7jjS35B+wp7oqg=)
                          4: h-kICo84mpPHXctcS-vW02QdJxQ.roa (hash: YChUhS+6HZvQd+Isg9GWQNzRMqXToTsR0vsksCA2uaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:c8:7e:74:08:e7:0e:b1:dd:f1:ba:21:0e:d0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
        Validity
            Not Before: May 13 14:00:53 2025 GMT
            Not After : May 14 14:00:53 2025 GMT
        Subject: CN=035b0130d71459c4cfa4152f02b76a900c2f23c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:0e:84:a5:0f:3a:b4:a1:85:9b:52:46:e2:
                    e8:de:b3:09:76:13:0b:bf:ad:85:bf:a6:18:5e:ae:
                    2c:4f:7e:96:5a:7f:67:39:73:75:a6:76:91:a6:dd:
                    c0:58:d3:be:1f:16:52:dd:1c:4b:a4:36:18:a5:71:
                    81:c2:23:de:cf:d4:3b:b4:f7:2b:28:69:2c:98:15:
                    5e:80:7c:2b:b9:ce:0e:56:10:51:00:57:36:56:93:
                    7d:78:e0:25:5e:22:45:d3:e5:05:e5:57:8a:27:80:
                    e9:c9:11:8f:4c:b9:da:5c:bb:05:b3:aa:eb:51:4a:
                    5a:1d:b4:5b:5f:19:01:0e:bf:ca:b0:ed:7e:2f:bb:
                    52:5a:12:52:b5:d2:63:66:e8:bb:eb:fd:ca:88:26:
                    9e:a4:32:c1:8d:03:ef:12:17:f8:44:8c:a1:ad:97:
                    02:9d:e8:5c:fe:3e:50:7c:d0:1e:89:ba:71:fb:35:
                    42:39:f7:48:2d:97:e7:89:a0:e2:c8:c4:fa:4f:dd:
                    8b:2d:48:08:94:0c:9b:eb:4d:e8:1f:5c:dd:1c:af:
                    5c:2a:de:10:b6:ac:1b:d9:dc:55:6e:3d:dd:7b:c7:
                    a7:db:58:e6:e5:48:9e:3d:e4:51:db:b5:8a:63:77:
                    74:50:82:84:09:47:7e:e8:1e:88:e0:59:dd:e4:dc:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5B:01:30:D7:14:59:C4:CF:A4:15:2F:02:B7:6A:90:0C:2F:23:C7
            X509v3 Authority Key Identifier:
                keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:28:4d:41:0e:af:78:27:a4:ef:9b:49:53:d0:a1:ba:56:
         2c:de:e7:f4:2a:23:60:c7:a1:bd:be:86:84:46:a2:08:e9:95:
         1c:47:97:bb:ae:ae:ec:f8:1a:c7:65:a6:d1:ac:58:5d:cb:a7:
         97:b9:74:da:cc:64:1c:22:95:5c:0a:b6:42:04:3e:e7:7b:80:
         c0:e4:fc:de:59:cb:aa:21:84:43:d0:b7:a6:69:c9:bc:f3:76:
         fb:26:15:60:78:dd:f4:4d:0d:58:76:84:f7:3c:30:71:9c:e8:
         9b:21:87:a9:ca:7e:9a:e8:21:af:fe:7d:a3:d5:46:f7:26:90:
         4f:09:30:d4:13:1a:e2:76:51:26:df:20:72:43:35:63:94:fb:
         07:cc:46:3c:25:c1:69:98:36:f9:15:d0:66:10:5d:aa:ef:07:
         ee:ac:bb:61:f7:8c:87:b6:e6:f7:83:6d:89:f9:c8:1b:23:0b:
         ee:8b:52:44:94:8a:f4:db:44:5e:8b:11:75:83:0c:a6:2e:4e:
         ad:36:58:54:55:9e:1a:02:f0:82:7b:5f:6e:4e:51:5d:2b:c9:
         93:5a:57:7e:bc:16:42:e6:4c:0a:ed:bd:b0:b7:fb:f1:2b:5b:
         18:4b:f0:8c:b4:bc:89:12:d0:30:2d:85:ce:88:99:8e:9a:35:
         df:c0:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:16:06 2025 by rpki-client