Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          UBcUTTnrlZw8oQu/MhgziYKfo89OBPGM2YSScSEPV9s=
Subject key identifier:   59:1B:AE:FD:64:F3:B4:97:31:62:2C:E9:DA:73:FE:9C:2B:8B:FC:01
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       01975E01A543B1475CEBEB579CE6827E65F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          12A1
Signing time:             Wed 11 Jun 2025 08:00:55 +0000
Manifest this update:     Wed 11 Jun 2025 08:00:55 +0000
Manifest next update:     Thu 12 Jun 2025 08:00:55 +0000
Files and hashes:         1: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: 3b/vSZ5efrSZe6ZQNSLyvz0VJr7fCqPZ9LYkbI1KfYs=)
                          2: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
                          3: vbdcw7rpmrydbe9PtiZ8KiYrMI4.roa (hash: 1hwqdUZaDaq1TdQxzfadCtp2CrZa+i6RSIuk/ctbIuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:01:a5:43:b1:47:5c:eb:eb:57:9c:e6:82:7e:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Jun 11 08:00:55 2025 GMT
            Not After : Jun 12 08:00:55 2025 GMT
        Subject: CN=591baefd64f3b49731622ce9da73fe9c2b8bfc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:d3:83:59:2e:9c:62:bc:b7:41:3b:c9:7c:
                    77:eb:5f:a8:78:0b:70:38:5c:96:8c:b0:46:fc:e1:
                    c3:31:38:9b:b0:01:77:bb:1c:b6:41:e4:bb:3b:77:
                    d2:8d:79:ab:19:ad:95:66:91:d0:27:6b:4c:89:c4:
                    d8:fd:06:ac:57:23:28:81:72:49:8a:6c:3a:4c:76:
                    00:7a:83:ab:a8:e4:86:67:c6:75:2c:8a:8e:b9:df:
                    96:c8:32:95:3c:aa:d9:90:8d:f8:c2:83:0e:79:74:
                    3f:a2:07:1c:f0:f3:96:81:23:54:6e:1d:5c:b0:7c:
                    69:4e:58:90:04:ca:cd:f5:cb:e6:0d:77:df:76:38:
                    08:5d:7a:6f:57:ce:94:45:4c:8d:ad:a9:26:3c:fe:
                    ec:70:e7:8d:de:38:99:1b:9d:18:66:e1:68:32:dd:
                    ec:cf:af:d8:34:9b:08:7b:2c:23:98:f9:9f:25:6c:
                    d8:53:46:3e:76:de:b1:30:aa:cb:6e:e2:1c:46:4d:
                    08:28:d9:94:a9:fe:bc:fb:d4:50:d9:c3:b1:f9:be:
                    bc:0b:dc:88:d5:6e:8b:2c:76:53:0e:52:71:f3:89:
                    b5:40:98:15:5b:98:92:c5:e2:c6:58:ef:38:6c:5e:
                    e8:54:26:53:74:21:77:72:8a:da:d8:3b:dc:6a:72:
                    fc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1B:AE:FD:64:F3:B4:97:31:62:2C:E9:DA:73:FE:9C:2B:8B:FC:01
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:eb:93:4d:05:78:c0:f1:cb:79:15:ea:41:c6:23:77:0a:4e:
         d3:a7:21:a0:0a:ff:b5:8d:6f:5d:03:f9:0e:1a:0d:3a:34:7a:
         7a:d4:d5:57:27:da:73:59:ba:80:4a:ab:45:72:83:ef:19:8b:
         77:ad:47:5b:48:78:10:75:b1:a9:71:91:ed:33:77:13:aa:63:
         5e:34:b3:75:75:22:37:6a:00:b6:99:1a:40:27:16:48:23:88:
         4d:69:8e:79:33:b6:50:f8:6a:bd:28:28:43:51:de:95:6d:2b:
         1e:1d:3a:58:01:44:3f:9d:1b:31:27:36:1b:7f:b8:9a:85:e2:
         e6:26:6d:34:8d:a4:52:e1:54:1b:0c:e3:7e:a4:8c:f4:29:90:
         b8:c0:ae:82:dc:04:e7:22:6a:14:2f:21:fc:e9:69:05:df:8e:
         b1:0f:8c:cd:dc:8b:89:8f:31:4c:18:aa:1a:37:c4:e2:b3:8d:
         28:7f:01:4e:47:bf:75:c5:0c:19:50:cf:bd:e1:45:69:c0:61:
         b0:b1:7a:4a:86:f3:e9:e3:7c:31:9d:f5:f0:a0:bc:fe:41:88:
         2f:ec:44:cd:ab:13:5e:66:a8:63:dd:4d:61:95:29:4e:ab:7b:
         77:93:29:51:41:22:35:09:6c:69:93:85:d0:b9:4f:05:7f:06:
         f1:8b:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:32:49 2025 by rpki-client