Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File:                     RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier:          sqyxbSDgfHe3kUzeBBGNrWpiq5ABabECaY2iKekQBOM=
Subject key identifier:   8B:EB:6B:08:CC:7F:16:ED:C5:3A:C6:E1:F1:CD:BC:45:F0:01:8D:6A
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer:       /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial:       01975C4AA0946A0C1485DFB2A69532E5A1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number:          0CB8
Signing time:             Wed 11 Jun 2025 00:01:23 +0000
Manifest this update:     Wed 11 Jun 2025 00:01:23 +0000
Manifest next update:     Thu 12 Jun 2025 00:01:23 +0000
Files and hashes:         1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: lG2/5IUKHr9x/axRqt8BGYtMYPbRwMRwu0X6FjXCzkM=)
                          2: UQFRRC8sXbk0r4Q6fEr2IYKv7N4.roa (hash: 7PfHdaN/WSlX46HPIjWpG4hQQPCzHjIU2IYqvwhWpeo=)
                          3: mycUbYI1PYCeJUOytd7OByddKj4.roa (hash: PDtk9wU6hfm72jtlMfw1RCeJrC6rGpFRRw/nfzu+rDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:4a:a0:94:6a:0c:14:85:df:b2:a6:95:32:e5:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
        Validity
            Not Before: Jun 11 00:01:23 2025 GMT
            Not After : Jun 12 00:01:23 2025 GMT
        Subject: CN=8beb6b08cc7f16edc53ac6e1f1cdbc45f0018d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:37:d6:0f:06:97:9a:94:62:cb:0d:52:1a:
                    45:9e:b3:7f:08:e2:4d:df:23:22:84:1a:3b:4a:b1:
                    90:6c:8f:78:1e:f1:4e:05:36:45:40:48:19:dd:d7:
                    48:68:b3:6b:66:aa:5c:81:82:71:96:4e:34:7a:e7:
                    21:8c:7d:69:48:19:6b:38:62:69:51:d5:73:e4:86:
                    f1:c5:1b:4a:fa:c2:86:5e:8e:40:bb:bd:aa:a7:e3:
                    79:ab:a3:9c:9c:21:52:73:5f:e3:2f:0f:e3:73:55:
                    81:5a:09:82:68:ec:ad:4c:85:11:4e:ab:ef:1a:29:
                    6f:35:0a:32:f2:90:1e:82:ae:ee:8a:3c:b8:aa:4e:
                    1d:6b:49:ec:fd:36:62:3f:27:f6:f5:de:6c:5b:4b:
                    d0:a8:e0:e5:6e:58:83:67:da:11:ad:3b:ad:22:58:
                    cf:cb:e2:02:c7:1e:3e:4d:42:2a:f4:a5:44:de:44:
                    79:69:8e:f6:2d:62:30:b6:71:8c:b1:d7:27:0e:cd:
                    74:a8:20:63:8f:e0:2e:a0:72:4d:fb:43:bc:82:c5:
                    55:c1:14:32:6c:37:da:d2:a6:02:9f:1f:40:72:9e:
                    df:e0:b4:d7:0c:55:4d:ac:b7:b7:35:15:f9:4c:54:
                    45:09:54:72:ce:e1:1e:23:0b:ab:92:af:5f:24:b8:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:6B:08:CC:7F:16:ED:C5:3A:C6:E1:F1:CD:BC:45:F0:01:8D:6A
            X509v3 Authority Key Identifier:
                keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cf:c6:7f:fd:74:a5:ce:77:cc:9a:24:cf:34:10:bd:ec:65:
         b9:f1:0c:23:81:dc:12:a5:f9:2d:e5:b1:e7:b8:5c:ba:c1:54:
         60:a1:c3:8a:e3:cb:5e:25:a4:39:a9:77:51:78:fb:01:c5:df:
         79:ff:89:ef:ee:d3:97:60:15:6a:45:27:7f:b7:b5:01:74:8e:
         61:f7:24:95:46:b7:2a:6c:2a:b6:8a:1c:30:59:d3:cf:4a:a7:
         7e:36:0a:13:f5:2d:77:91:1c:ce:51:dc:1b:04:ad:9f:7e:50:
         4e:c8:7e:63:8d:ee:da:78:b0:65:de:12:85:a7:9e:5d:3e:98:
         be:57:a7:78:49:88:03:18:2a:33:df:22:95:8a:5b:26:f0:f0:
         3c:7a:a6:62:03:05:68:1f:bc:f3:7d:1a:c4:b7:a9:34:a4:38:
         e3:ae:c1:24:3e:98:3b:f0:2d:00:bc:5a:6e:72:be:fa:f2:76:
         58:84:35:84:49:b0:2e:ba:15:d2:f7:59:b8:03:1d:ac:2c:3f:
         c6:e1:2d:e7:79:91:db:9c:56:d6:8e:05:2d:39:e9:c5:82:c2:
         eb:2c:da:a8:cc:e6:d5:c3:ec:b0:db:1a:3c:90:2c:a6:72:41:
         13:a9:a8:49:d5:36:14:41:8c:e8:4e:7b:03:3b:1c:72:4d:2c:
         74:f7:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:36:43 2025 by rpki-client