Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File:                     YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier:          vpnlW6T9WTD0UHZ6rF7Ujk3B9/vKo6tz+PtngQFClwo=
Subject key identifier:   62:F3:AA:FC:A6:85:3D:98:73:4B:00:05:B1:24:1B:45:63:79:C9:97
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer:       /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial:       01974D7B9D440A297F8E78290C63FF16DED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number:          0B7A
Signing time:             Sun 08 Jun 2025 03:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:36 +0000
Files and hashes:         1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: nJ4jXp4MUfBAdCt8hR68WHfHX45hBMZzBoD2UVfEWMY=)
                          2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:9d:44:0a:29:7f:8e:78:29:0c:63:ff:16:de:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
        Validity
            Not Before: Jun  8 03:00:36 2025 GMT
            Not After : Jun  9 03:00:36 2025 GMT
        Subject: CN=62f3aafca6853d98734b0005b1241b456379c997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:d0:29:cf:83:75:19:64:15:8a:9b:0c:04:
                    30:66:fe:f1:05:d9:73:30:0e:42:91:2c:b5:97:9d:
                    d5:5d:6b:32:9b:8c:34:f0:ea:12:72:9b:8c:c9:5f:
                    0d:73:df:da:61:3f:29:0e:26:47:50:a7:96:0f:07:
                    1f:2a:7e:4b:94:4d:d0:0a:b7:25:c6:48:9b:fb:45:
                    29:04:5f:4f:36:43:dd:3e:94:bd:7c:66:83:28:58:
                    23:be:4a:3f:de:0a:1c:ee:5c:11:39:0d:41:65:84:
                    37:79:97:bf:f0:19:70:19:cc:b1:18:71:62:5e:66:
                    21:4d:f3:7e:93:e6:de:b4:1d:29:c9:4b:87:43:96:
                    96:b7:74:96:fe:38:29:3a:ff:07:a3:49:a8:bf:95:
                    32:37:4d:de:a9:96:16:de:da:8e:06:5b:dd:07:f8:
                    2f:a6:75:1d:17:e8:a6:b5:a2:cb:cd:b5:89:f4:b6:
                    13:6a:74:fc:06:55:04:1e:13:91:fb:3f:45:5f:40:
                    56:73:eb:f4:cd:24:92:08:f4:08:0c:f7:d3:e2:c6:
                    5e:ac:99:89:96:a9:81:93:15:d4:ea:b3:6e:b0:34:
                    a6:23:d5:5c:b4:4f:ae:f4:a1:62:2c:75:0a:7d:cc:
                    87:58:51:de:e2:16:5e:97:c4:6a:55:19:33:25:dd:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F3:AA:FC:A6:85:3D:98:73:4B:00:05:B1:24:1B:45:63:79:C9:97
            X509v3 Authority Key Identifier:
                keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:a8:c3:d8:70:6f:ab:33:39:65:a8:35:40:41:7d:62:30:
         82:a0:43:31:85:76:b7:2b:02:98:cf:39:2e:39:61:be:8e:8a:
         86:cb:d9:76:cc:51:2b:17:1b:a0:c0:a2:a9:c9:ce:10:e1:47:
         89:5a:39:53:ef:a7:d0:90:8e:6b:5c:2d:0a:a4:2b:6a:c6:90:
         d3:c2:a0:ae:84:92:8f:a6:21:0f:b5:87:c6:36:94:7a:a1:f0:
         66:de:2f:32:7c:6d:63:76:72:6c:d8:ce:70:cb:de:a0:46:e0:
         67:35:9f:27:ad:44:4a:28:2a:8b:0e:e1:90:a7:7d:8f:e5:7e:
         a1:b0:8e:8e:86:e6:3a:f9:2a:3f:d8:44:15:78:72:9e:ff:89:
         46:28:6c:62:87:8d:aa:2c:26:b8:d7:20:75:3c:b7:7e:45:da:
         f8:50:dd:f1:dd:dd:f1:99:ba:33:0c:0c:19:b9:1b:15:46:75:
         0a:8f:7b:8a:86:cf:27:72:67:4a:93:6d:22:c9:83:ee:49:74:
         30:8d:4d:5b:e1:c8:a4:cd:31:90:41:12:9a:80:42:1c:d1:cd:
         19:92:fe:14:ff:bc:05:d7:72:13:d9:71:2e:b5:f0:ec:01:a2:
         b7:98:3c:c0:6b:17:59:93:69:27:e0:04:ff:ce:36:34:d8:98:
         95:c6:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:58 2025 by rpki-client