Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          Tij+pRjb3gDSvt4WTl9Zj/D+Wg5eY0jceBeVuVENI0c=
Subject key identifier:   27:F5:15:65:B6:C4:4C:33:B9:7D:B3:11:C8:64:00:70:3E:D4:69:1D
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       0197B7B367FCE02A61645AC05D93B33934BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0A46
Signing time:             Sat 28 Jun 2025 18:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:17 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: tCyKCmqktGMrWXM0mHurcqB/DcZg3wEM4EOBDxa6llo=)
                          2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:67:fc:e0:2a:61:64:5a:c0:5d:93:b3:39:34:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Jun 28 18:01:17 2025 GMT
            Not After : Jun 29 18:01:17 2025 GMT
        Subject: CN=27f51565b6c44c33b97db311c86400703ed4691d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:5e:25:09:ae:e1:16:6e:41:0f:d7:58:98:
                    1d:ae:91:ab:b7:92:62:4d:a0:a9:c4:b8:55:0a:07:
                    e0:98:b9:cf:ab:b6:b6:66:40:4c:5f:0c:63:14:90:
                    d2:75:cb:85:d0:8d:04:38:35:6f:9c:01:90:f0:1e:
                    45:a0:43:bd:d8:db:59:89:f9:ff:f1:f9:02:3d:ae:
                    0d:28:2f:e6:bf:05:cc:41:00:6d:dd:9c:87:09:01:
                    94:a6:c6:79:6b:51:47:bd:04:d2:69:98:c2:9c:ce:
                    cd:c7:42:90:15:ae:44:66:5f:1a:8f:1a:2a:50:1b:
                    36:ac:44:d9:ca:7c:59:cf:0d:b2:a4:da:03:57:44:
                    23:ad:9d:2a:a5:b7:21:fc:9b:45:4b:01:ab:d8:c3:
                    2e:f8:ff:17:f1:3d:fa:3b:ea:2c:ee:04:9c:51:ba:
                    8e:e2:e5:d1:da:47:de:8f:07:a1:54:56:c0:22:ee:
                    44:bf:0b:b4:cc:ed:d4:58:1a:24:b6:f6:49:60:d7:
                    da:9f:82:48:e8:a6:b4:b5:b5:52:f6:0c:3d:fe:4e:
                    f4:45:af:ae:ef:11:19:1a:9a:0c:58:5d:34:c5:77:
                    de:ac:1b:09:0b:50:4c:63:de:b9:71:23:f7:af:57:
                    2c:39:ff:c5:15:50:41:9c:ee:4a:b8:90:3b:84:49:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F5:15:65:B6:C4:4C:33:B9:7D:B3:11:C8:64:00:70:3E:D4:69:1D
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:cc:22:4b:db:47:2f:fe:00:dd:8b:8c:e5:9e:3c:14:6a:33:
         bf:9e:73:48:54:08:13:f0:04:4d:e3:38:b5:27:c8:c7:bb:1d:
         5a:aa:5c:fa:4e:23:8b:df:71:20:bc:cc:ac:bd:f6:6b:f3:81:
         73:38:22:25:67:de:09:7f:4b:1f:ac:d0:1c:d6:44:5d:6a:31:
         ea:af:c8:f7:1a:40:25:08:12:56:61:03:8e:e5:51:bd:44:ba:
         64:cd:c5:8d:d7:17:b9:54:b8:3e:05:35:25:bc:28:cb:cb:b8:
         97:e7:8d:22:03:dd:da:06:bb:af:b7:31:24:95:16:16:3c:01:
         32:6e:d1:be:9d:cd:e0:a6:fe:3d:71:db:8c:83:a5:04:f8:00:
         6f:cf:d5:68:b1:50:8e:d0:cd:56:0f:e8:4d:b3:e6:16:b4:e0:
         dd:1b:46:6e:db:f5:a2:eb:df:7a:ae:ea:53:ed:29:ed:d1:6d:
         01:8b:f7:1d:67:4e:a8:da:63:1c:a0:eb:d9:39:3a:c0:f3:96:
         38:ba:4d:64:9e:57:58:3d:76:bd:6b:8e:58:62:07:d7:ac:49:
         35:ea:56:2a:d3:f2:fe:8f:e3:62:94:73:87:b2:71:17:f9:b4:
         15:6b:50:65:b7:cd:c4:60:86:cd:d2:25:9c:a4:a8:f7:2c:0e:
         3e:84:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:12 2025 by rpki-client