Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File:                     YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier:          8215KMb1b5jCCuA9R+Y/YqVzXUoSFh9W06s/KotRYno=
Subject key identifier:   94:D5:EB:0B:AF:D2:EA:24:7C:C5:6D:9D:C8:65:A0:F3:B3:55:14:2E
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       0197458B0CE26F312FFA62D8A069180B3346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 14:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:30 +0000
Files and hashes:         1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
                          2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: q4pCvTht9RnZ6rjfnn6hc4j/XbPF238XF/RbP6dhPEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:0c:e2:6f:31:2f:fa:62:d8:a0:69:18:0b:33:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Jun  6 14:00:30 2025 GMT
            Not After : Jun  7 14:00:30 2025 GMT
        Subject: CN=94d5eb0bafd2ea247cc56d9dc865a0f3b355142e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:d1:b0:bb:b3:bd:34:96:37:01:39:ad:08:
                    b1:03:71:67:8c:9e:ae:b7:1c:74:01:2e:67:29:a0:
                    e8:5e:c7:e6:4c:ab:75:6d:8e:bb:21:d9:8c:64:ec:
                    5b:4d:45:fd:98:61:98:56:c8:71:14:5e:ad:06:d9:
                    c7:aa:0c:2e:c9:5f:95:b9:55:86:71:ec:4f:06:5a:
                    20:71:26:c8:bd:2f:53:ef:39:a8:64:d0:66:fe:0a:
                    81:7f:c1:bb:6f:a9:62:69:19:b3:e0:a7:49:cb:f6:
                    56:68:60:65:e2:5f:41:56:6c:a3:87:55:12:88:70:
                    ce:d5:51:32:58:58:f1:9d:b9:ad:0b:77:1b:43:55:
                    da:0a:5f:e3:f5:33:3f:ba:cd:a8:8b:40:a9:8f:b1:
                    31:a4:55:e7:a4:bf:d4:29:66:54:aa:c3:fe:19:7b:
                    df:9a:3a:ec:64:21:5d:5e:0a:d3:66:7c:bd:c0:c3:
                    27:b7:01:a9:61:b5:47:73:7f:46:e4:4a:d9:69:5a:
                    6f:41:da:e0:59:6f:5c:89:ef:d9:cd:cd:d7:27:69:
                    b6:1c:01:9f:57:5d:e8:b1:e5:90:ac:c4:20:d7:18:
                    87:b6:2f:8c:d3:52:15:46:66:a5:fb:c3:78:28:db:
                    26:1a:86:ee:28:30:37:af:0e:46:47:91:06:f4:60:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:EB:0B:AF:D2:EA:24:7C:C5:6D:9D:C8:65:A0:F3:B3:55:14:2E
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:74:63:62:1d:32:5c:20:61:c8:ee:bb:c0:71:15:16:3d:
         1a:41:33:34:af:83:29:60:af:2d:ef:6d:26:38:6b:90:fb:4f:
         8a:75:ba:28:dc:df:48:57:1d:09:ec:2f:ab:a7:64:d9:34:aa:
         a7:de:89:26:f7:3a:5d:37:14:07:a3:ee:c4:65:d5:3f:6b:13:
         18:b9:97:b8:64:4e:76:2c:ac:51:fc:66:18:95:6c:78:8f:d6:
         8a:ed:b5:79:96:10:58:05:23:4e:36:01:ac:7c:0f:d2:a2:8f:
         76:54:1c:d4:73:39:72:c4:ca:57:bb:9d:a4:b8:6c:cd:8b:4a:
         48:13:c4:54:50:0c:4b:ef:73:54:d4:26:c8:4d:48:d5:84:14:
         07:3c:4c:3c:7d:31:be:c4:c4:18:dd:7b:bb:eb:2c:05:1a:db:
         68:1a:e5:24:b9:45:ce:28:6a:84:39:26:11:10:42:91:24:62:
         4f:a3:8e:e5:d2:8e:71:7d:50:6f:50:71:38:20:b1:75:b7:22:
         73:91:5c:68:b7:f0:7c:fe:62:b0:08:5d:79:dd:3c:32:d5:99:
         c3:0b:90:3e:d6:91:90:a7:c8:27:11:6c:60:74:20:c9:0f:38:
         2b:21:86:7a:18:14:c3:25:45:be:83:7d:a9:51:3a:ae:a1:7c:
         2d:02:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:43 2025 by rpki-client