Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
File:                     yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft (raw, json)
Hash identifier:          33vC7QgsNbhP3susAM46EFeUre8CVIaHAqR0JaS6NiM=
Subject key identifier:   37:10:84:66:53:88:C4:2A:43:B2:29:BA:6C:97:3E:72:99:45:95:BB
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       019749683BFB037EDB70DEBFE551B28CC12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
Manifest number:          050F
Signing time:             Sat 07 Jun 2025 08:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:57 +0000
Files and hashes:         1: jJN5SmOYRCh5g1P7LMTmmGEDihE.roa (hash: zVXVRIlXsH01/EvIe9iIxpAfO1eaFz3FhIYvYUirwQk=)
                          2: yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl (hash: mqOWF9WGH6PsW7VNFcjr0eI8eyHC0+coWPC4rYrL558=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:3b:fb:03:7e:db:70:de:bf:e5:51:b2:8c:c1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Jun  7 08:00:57 2025 GMT
            Not After : Jun  8 08:00:57 2025 GMT
        Subject: CN=371084665388c42a43b229ba6c973e72994595bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:9d:75:5c:f1:4a:ae:4f:b4:b3:65:7e:3e:
                    9e:01:88:e5:dd:67:89:bc:ae:fe:bd:40:56:4a:a7:
                    84:70:58:79:24:d2:96:18:a2:b2:92:19:41:4e:e7:
                    a1:24:72:94:93:4f:a0:54:40:d6:de:97:24:0e:b4:
                    af:71:24:30:73:3e:06:73:76:61:f7:1b:81:37:08:
                    1f:bc:5b:5e:f6:24:b1:f5:b7:1b:94:f6:1a:22:5d:
                    1b:4b:72:00:75:49:5d:07:a8:dd:fa:48:6e:64:77:
                    a3:af:b2:ff:c6:32:da:a0:21:d2:77:06:26:aa:cb:
                    e0:fc:17:ff:8f:f3:8a:32:29:1c:c7:4f:72:43:91:
                    f7:2b:84:87:16:24:7d:80:43:6c:4b:1a:a5:c4:63:
                    91:5e:ca:5f:24:97:67:07:4e:21:22:12:21:d1:cc:
                    82:85:8a:a9:b4:99:21:ff:c3:12:6e:14:81:13:f3:
                    5d:b3:d9:bf:50:d7:cc:69:37:12:a8:d1:c8:e1:ab:
                    32:e3:b7:58:b4:ef:81:97:38:b2:96:73:b8:8b:86:
                    4b:79:02:66:77:fe:cc:71:1a:3c:60:19:d4:a3:6f:
                    2e:f7:ea:9c:d1:b0:bd:3a:d8:c2:03:fa:18:92:28:
                    03:aa:26:fe:ea:8f:41:7f:39:8b:c2:35:e2:81:e8:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:84:66:53:88:C4:2A:43:B2:29:BA:6C:97:3E:72:99:45:95:BB
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:19:50:69:6f:dd:af:6c:4a:ed:61:5a:42:98:22:39:b0:d1:
         5c:c9:43:57:78:6d:79:7b:36:39:98:7e:62:df:a3:a6:ff:f8:
         92:6b:84:54:9a:16:ab:13:ef:d6:43:14:36:25:dd:6e:c3:4a:
         ff:9d:0e:4e:24:81:9c:b0:bd:37:93:e3:14:e1:76:9a:9d:2e:
         5f:c1:cf:85:2e:b9:17:27:f9:a0:6e:0c:87:04:1d:f2:13:1c:
         e2:1c:7d:b3:87:c0:6f:06:ed:eb:a1:12:eb:9c:3f:d7:09:56:
         4d:ea:b1:20:a0:30:b8:c3:72:18:43:9a:06:5b:25:ba:a3:3d:
         65:f9:32:01:fc:67:e1:e2:a0:60:3b:77:e1:27:4f:af:52:4a:
         db:42:eb:a5:b7:58:1c:bf:7e:af:0a:6c:80:54:0a:7b:31:05:
         f9:de:60:e8:47:c8:69:30:22:03:43:b3:55:8d:00:79:51:d6:
         c3:5c:58:d5:1e:1b:5b:6a:9e:70:c4:39:64:0f:34:a2:da:2c:
         d3:ea:08:e0:c6:91:db:8a:fe:c2:69:8e:c4:4b:ff:09:96:7e:
         1e:dc:6d:3b:e5:77:2d:14:0b:6d:bd:34:05:58:83:4d:2f:36:
         a3:36:b6:03:6a:8f:6c:1f:74:47:3d:ba:1a:92:f0:4a:f6:0a:
         d5:e3:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:13 2025 by rpki-client