Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
File:                     yF0BtEKUbhkkMT1WTzG35C4kVec.mft (raw, json)
Hash identifier:          LhP83BNw/M0fsINoy8LO81QadwEnoryGf8JoaczopQk=
Subject key identifier:   88:FF:B0:21:D0:71:61:6E:12:30:07:FC:F4:7A:F3:EA:7E:C1:A3:32
Authority key identifier: C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7
Certificate issuer:       /CN=c85d01b442946e1924313d564f31b7e42e2455e7
Certificate serial:       019761392142C72AFC5C53A5168EF57F3C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
Manifest number:          0A0A
Signing time:             Wed 11 Jun 2025 23:00:23 +0000
Manifest this update:     Wed 11 Jun 2025 23:00:23 +0000
Manifest next update:     Thu 12 Jun 2025 23:00:23 +0000
Files and hashes:         1: DpCybAm9bBRoUpHGAuIQ86Lq5pw.roa (hash: 2p6cZB/6xzzCJ7jeUbBrD5Bf0hcHEh4tn/vPl+35cnU=)
                          2: yF0BtEKUbhkkMT1WTzG35C4kVec.crl (hash: wxbXoWURU2jWAEJqY6arIRoC3KebKve6Q/KHcsaASV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:39:21:42:c7:2a:fc:5c:53:a5:16:8e:f5:7f:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85d01b442946e1924313d564f31b7e42e2455e7
        Validity
            Not Before: Jun 11 23:00:23 2025 GMT
            Not After : Jun 12 23:00:23 2025 GMT
        Subject: CN=88ffb021d071616e123007fcf47af3ea7ec1a332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:0c:55:24:66:cf:79:a2:1c:5d:05:e7:0e:
                    ca:11:f3:b4:09:70:be:c2:cb:9a:48:ac:cf:8e:20:
                    2a:38:38:ea:83:20:bb:8e:ea:22:c0:62:ca:6a:54:
                    f0:61:e0:93:31:11:03:51:a3:72:df:38:97:47:4c:
                    74:eb:a8:98:b5:7f:0d:5c:9a:4d:d4:38:73:7b:de:
                    f9:c8:e2:2a:e5:a3:68:7e:a0:b1:8e:57:48:cf:96:
                    3d:d8:4a:b7:a0:25:e0:64:9d:a6:b4:56:59:e4:c6:
                    71:1a:fd:2d:e9:9c:b2:63:a8:4d:c6:10:43:cf:10:
                    e4:e9:88:58:80:ff:9f:1c:32:63:41:a0:03:97:84:
                    f7:ed:62:a9:99:cc:d3:ee:63:82:43:80:c7:f9:59:
                    db:6e:56:93:57:4d:b8:90:5c:96:ac:42:1b:34:68:
                    96:64:71:04:bb:1e:54:5e:65:06:d5:00:1d:13:70:
                    0b:0d:77:37:c7:28:fb:03:91:24:3b:0f:cd:c5:42:
                    65:52:76:72:88:e8:d2:8d:21:68:38:1e:cf:26:2a:
                    55:23:78:08:bc:ec:6a:61:dd:de:64:b8:31:5e:5a:
                    f6:cb:6a:04:4a:cd:1d:8f:7a:0a:74:67:82:c5:25:
                    04:7f:eb:20:ff:42:2e:08:81:8d:c8:5c:53:63:16:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:B0:21:D0:71:61:6E:12:30:07:FC:F4:7A:F3:EA:7E:C1:A3:32
            X509v3 Authority Key Identifier:
                keyid:C8:5D:01:B4:42:94:6E:19:24:31:3D:56:4F:31:B7:E4:2E:24:55:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF0BtEKUbhkkMT1WTzG35C4kVec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/550873-d063-420d-a051-16b97b9a885e/1/yF0BtEKUbhkkMT1WTzG35C4kVec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:88:96:ee:6b:f8:dc:ac:c2:14:f0:db:a7:d0:e4:50:c1:
         9f:2e:15:e9:a4:fa:7d:42:2b:f2:9b:03:af:10:df:3d:5b:a8:
         01:ce:2b:e2:46:d6:e8:35:62:46:62:db:bf:61:e6:cf:7f:bb:
         74:f9:4a:b9:4b:3f:5a:48:a6:ab:6a:73:0c:bf:79:d7:81:84:
         af:a1:f0:8d:b3:c6:3b:51:b8:50:03:0b:12:90:b7:0f:53:04:
         f5:9e:e2:5c:f5:0e:db:aa:cc:04:2e:c9:4a:a0:d8:3b:94:d0:
         6b:c4:94:d5:08:37:8b:e5:68:c9:b7:a8:77:12:6a:52:8d:d5:
         61:3e:48:5e:dc:59:ff:00:44:f3:83:ce:33:71:62:18:cb:65:
         f2:8e:e3:d4:01:b6:77:ab:b5:83:44:35:5a:a5:d9:be:b0:ec:
         6c:96:08:d4:1f:d0:09:36:92:5f:df:ce:9a:e1:93:ba:6c:a5:
         da:3c:8e:62:c3:98:cd:5b:7b:72:23:e8:9a:1a:68:84:ff:f9:
         4c:28:35:35:4b:3c:71:e8:d7:d7:9f:19:6a:b5:a7:f0:72:f1:
         d4:ce:6a:49:39:b1:85:b6:4a:68:0c:53:e5:3f:ff:c1:20:e0:
         e1:ce:78:a5:9e:74:c9:d6:f6:46:6c:a9:86:da:81:0d:38:5e:
         b7:03:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:28:55 2025 by rpki-client