Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
File:                     YninaMkQutzVxK73wXKp8GFUfow.mft (raw, json)
Hash identifier:          +yJEtZT3RA4+VKeosPVkW+tYmlzxC4JiyCyobFDjzgo=
Subject key identifier:   6E:54:50:8B:9B:49:F2:A9:58:B8:D1:33:0B:03:9A:5C:26:81:FE:FB
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Certificate issuer:       /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial:       0197500EB66AF7434D5A8C1D54FD9CC8AD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
Manifest number:          15A5
Signing time:             Sun 08 Jun 2025 15:00:30 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:30 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:30 +0000
Files and hashes:         1: EADtwJ5y-VjWcy83_mVH2SKUAPo.roa (hash: R8INT7bheSvFgtGeR+Ql091pm76iqBbhKkxxFZZqBPc=)
                          2: HH8Kcpq8smSBgspza5cFmPN-h3c.roa (hash: b5fuu0JV/7NW/Qsb9kNDCFAwqgLsip8TnrJAwmOdepo=)
                          3: KBd5kN60RABk_aPy5jhjXA2d4rM.roa (hash: F9wyU/gh7GBbrKA9V2nWxFNNYZNmutVEH+bSjiNICq0=)
                          4: Xu-pgqhOX0b1I_9AutHwqHHQH6s.roa (hash: Sqvmgn86ZbXy8M1JF+5dXsFEi7o7b9VXmnZYW5oa6sg=)
                          5: YninaMkQutzVxK73wXKp8GFUfow.crl (hash: rYkMNrgmnlqB1ZjeOGdzIplXjhtZHtNB4mPTn6FD2G8=)
                          6: _0avkX9R80849niuPtRFEJjbyDI.roa (hash: Wlo0KTcdwxIVfrtxvPDP/C02KQyQtuDyar4UgepvhIg=)
                          7: iUmlhe7GBpSAFSopQzbl9BrMrY8.roa (hash: 1kM9Q1lsdCfCBHNzqJzQksIZSOAccEnrgDWq7f/U9H8=)
                          8: qGhr6imBDGgujLXBWS0DEYFPzJc.roa (hash: 5YtHZEQ4HdQrSJb2I3o65jo+fHhfbV2A2EukdInfLlo=)
                          9: xbAnBjLqGjs9MoebU27xTpAXF-E.roa (hash: Q80N11JbIqnaJwMmz573rLhvL647301AWxsGwoimeQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:b6:6a:f7:43:4d:5a:8c:1d:54:fd:9c:c8:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
        Validity
            Not Before: Jun  8 15:00:30 2025 GMT
            Not After : Jun  9 15:00:30 2025 GMT
        Subject: CN=6e54508b9b49f2a958b8d1330b039a5c2681fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:4c:1c:60:a9:28:92:52:8d:26:50:fa:d7:
                    6a:9d:d0:93:29:d7:1e:89:32:9e:89:49:73:d2:e1:
                    22:96:a3:07:5f:42:cf:9f:2e:04:64:0c:98:07:17:
                    0e:c0:de:3c:c1:10:6e:88:d8:dd:bc:10:09:7f:61:
                    a9:1e:83:ad:10:74:5f:db:f3:48:86:2d:fc:ef:d4:
                    48:a8:fd:84:ce:65:02:c4:73:52:d9:60:4d:60:62:
                    ca:14:c5:5b:b8:c0:30:83:51:a2:ec:b3:46:99:84:
                    1c:12:2a:b6:0f:12:d8:05:68:9d:bf:87:76:cc:91:
                    f0:81:57:20:46:b1:ac:f0:75:b2:ce:d3:e4:3a:8f:
                    51:af:de:2c:45:ae:d1:19:44:c6:a1:0a:ff:06:36:
                    b5:90:69:c1:92:de:3d:98:09:06:19:74:9a:48:3f:
                    cb:67:e1:82:ac:e1:76:09:4e:f5:24:3d:80:88:e9:
                    b9:e4:7f:8e:b4:da:72:cc:f6:12:02:c4:65:54:ac:
                    b6:80:cd:42:a9:26:09:3f:75:7a:99:51:74:64:8a:
                    74:b9:5f:4e:9e:cd:f1:3a:8b:8b:33:6d:ab:7b:f0:
                    5d:80:7d:78:1d:d7:57:f7:1d:fc:ed:bf:43:00:6f:
                    36:f8:bf:8d:e8:a4:f4:93:2a:9a:f9:66:a8:e2:a6:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:54:50:8B:9B:49:F2:A9:58:B8:D1:33:0B:03:9A:5C:26:81:FE:FB
            X509v3 Authority Key Identifier:
                keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:4a:ed:f6:da:34:fd:0c:0d:26:12:aa:bf:5f:76:6d:fc:12:
         6c:34:f1:51:69:c9:01:fa:c6:ff:9a:81:5a:99:87:b9:04:67:
         9e:ac:d3:15:ad:62:b6:94:37:2d:e8:1a:6d:1b:9d:04:16:25:
         e2:d9:f9:15:b8:58:a5:d7:1b:f9:3b:79:88:2c:a5:58:58:e8:
         c8:bf:8f:73:df:a3:3a:75:b5:19:44:ec:7f:a3:8b:8f:d1:8f:
         a1:39:dc:e7:80:52:51:36:ee:9d:ab:41:b6:8f:7b:75:83:16:
         17:e4:0c:ff:cd:65:9a:d7:c8:1a:b6:2c:26:49:72:2f:9f:df:
         fa:e0:cd:f5:4b:f3:96:4a:cc:ec:cb:e8:60:0c:2d:64:1d:00:
         49:26:13:ea:4e:93:b5:25:45:dd:b0:b4:cf:87:64:dd:e7:df:
         6d:b1:00:99:d1:02:ca:49:b9:59:b4:2d:61:53:35:78:2e:91:
         c2:7a:00:b0:5e:58:53:5b:bd:56:f9:21:bb:bd:0f:b2:14:e6:
         2a:94:f0:a6:4a:7a:91:74:0c:9b:9c:de:06:3d:ec:72:ac:1b:
         17:19:e4:5a:c2:6a:2e:89:05:f4:91:78:4c:7b:e0:ff:2b:fc:
         2e:ed:45:3a:4e:55:12:66:74:19:3c:32:b6:f6:f0:d6:98:e4:
         ac:47:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:00 2025 by rpki-client