Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File:                     y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier:          bi1jAlknojpLoM40J6nTyM0WdikQ3bsmWqyCOB1tR5M=
Subject key identifier:   06:D2:34:3E:4D:EF:40:19:B3:E5:52:96:6A:89:DA:DD:04:BE:AC:EA
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer:       /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial:       0197477A05FB047F34DB630C694F97201628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number:          03A3
Signing time:             Fri 06 Jun 2025 23:01:08 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:08 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:08 +0000
Files and hashes:         1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
                          2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: 0pdPi2QurLZVXYxgrGEvdDuIk/3e+YdzAXv0iEjlnz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:7a:05:fb:04:7f:34:db:63:0c:69:4f:97:20:16:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
        Validity
            Not Before: Jun  6 23:01:08 2025 GMT
            Not After : Jun  7 23:01:08 2025 GMT
        Subject: CN=06d2343e4def4019b3e552966a89dadd04beacea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:f6:77:65:c2:76:b2:5f:8b:97:c4:38:db:
                    ad:ea:39:26:da:e8:e8:32:ea:c2:30:59:ee:b8:dc:
                    9e:be:bf:96:72:d8:64:52:80:01:fc:2f:b3:f5:82:
                    70:7b:fd:61:98:87:cd:61:66:fb:52:3a:37:5b:39:
                    cf:26:05:f9:6f:22:b4:b6:81:40:23:58:6b:d6:78:
                    81:ed:19:5a:08:ce:e9:4a:fa:ed:85:bd:23:f1:58:
                    ed:70:bb:78:91:7a:f0:68:39:99:43:96:7f:72:91:
                    37:e0:7e:82:a2:81:e3:4f:b0:46:ac:d1:1a:b6:d9:
                    a9:8a:95:b3:61:02:b0:9b:82:cb:29:38:78:14:55:
                    14:47:7e:f1:fd:33:9b:68:f5:c5:a5:b8:52:dd:8c:
                    58:fc:c9:9a:ed:e8:a1:77:5c:3c:b6:35:a8:73:d2:
                    7e:e8:80:42:ec:c6:26:68:fa:63:75:95:9e:7f:f2:
                    f2:f3:fb:51:2d:6f:c5:8b:d9:f0:4c:8a:76:f7:86:
                    05:32:ed:1b:ea:7f:ea:90:05:3b:08:38:08:94:39:
                    a0:d8:fa:cc:11:f7:1d:8e:9c:29:0b:74:32:a9:df:
                    53:67:83:c8:a2:04:32:0f:53:4e:6c:ca:d2:2c:4d:
                    c5:e5:1c:e3:ab:48:a3:e2:e5:02:fa:d7:81:9b:03:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D2:34:3E:4D:EF:40:19:B3:E5:52:96:6A:89:DA:DD:04:BE:AC:EA
            X509v3 Authority Key Identifier:
                keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9b:91:58:02:44:86:71:b4:37:11:a3:16:c8:a9:cb:1a:51:
         67:3d:d4:70:a8:4b:18:e8:36:16:bb:c4:31:4a:99:21:08:16:
         d6:46:e9:ce:64:9a:1c:db:b7:a0:bf:3c:af:d5:9c:6a:92:2a:
         ce:21:ae:d3:7a:3e:80:52:5c:e2:4f:56:2f:82:4b:94:83:0e:
         a9:9c:73:e1:12:6b:0e:7f:5c:99:58:19:42:69:13:12:72:e0:
         4c:cf:a0:06:ae:3e:f8:78:41:61:78:48:e0:aa:ec:c0:d4:f2:
         1e:46:22:5b:d7:0b:9b:d2:e0:08:4e:33:5f:0f:d9:67:29:31:
         d8:db:89:f0:a6:7a:11:70:cb:2c:ca:f7:0b:e2:2a:4b:89:cc:
         5a:0c:3f:ad:eb:de:54:b8:c9:12:6b:87:c1:b5:aa:ed:63:0d:
         6c:57:05:b3:e0:ca:cc:86:43:7e:9e:73:c7:7c:d7:ea:ee:4f:
         d1:8d:c8:bb:42:20:f0:43:88:c4:3d:ea:14:5d:e2:23:8a:9a:
         56:09:df:89:de:ce:03:6c:1a:dd:f7:a8:e4:f5:a9:ca:ae:e2:
         53:86:6d:47:90:b6:f1:31:91:e8:5c:92:db:10:1c:1f:ab:a1:
         b3:81:44:4f:64:28:ad:f6:ef:b8:04:5e:83:b1:98:f9:63:0c:
         4b:3c:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:13:50 2025 by rpki-client