Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
File:                     ybTWgj7LKLSjXkDcEe8inLI3XN8.mft (raw, json)
Hash identifier:          dSXxtjWFTin0mcG9PhPo9z8jVFbceMZdljPo3K4Yz54=
Subject key identifier:   CC:EB:E6:6C:69:43:0D:7B:06:C3:74:AC:0E:AD:2B:B2:0E:6F:22:2E
Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF
Certificate issuer:       /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
Certificate serial:       01974E5767C6717C959CFF77E38B3F1744CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 07:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:40 +0000
Files and hashes:         1: u2ztrN64ny4t-5qedlgZVwCCd-I.roa (hash: L/fv9+pcl735U5hA8Uy57NEou3lVd9gt0o2oOToLmgY=)
                          2: ybTWgj7LKLSjXkDcEe8inLI3XN8.crl (hash: QKjNg05CvxXg0Y5qH4VK485bb07EVw9oO2VQy+3IWkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:67:c6:71:7c:95:9c:ff:77:e3:8b:3f:17:44:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf
        Validity
            Not Before: Jun  8 07:00:40 2025 GMT
            Not After : Jun  9 07:00:40 2025 GMT
        Subject: CN=ccebe66c69430d7b06c374ac0ead2bb20e6f222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:be:be:de:2c:28:6c:95:25:39:95:de:17:
                    fa:5f:20:ac:25:ed:ce:75:3c:c9:62:b3:b6:46:cc:
                    f3:f1:76:71:59:6e:82:95:fd:64:87:b2:01:63:b1:
                    53:e7:69:f6:b2:eb:1e:df:ac:d7:59:6a:6b:0b:e2:
                    e3:26:f7:99:2d:e4:7d:b0:38:3b:da:29:3a:91:80:
                    72:e5:c2:66:b4:97:8d:fa:3f:7b:83:0d:56:8b:e7:
                    07:4d:51:bc:42:e2:4c:04:55:d4:4f:1c:84:cf:5f:
                    11:9d:fd:a3:f3:5f:d1:01:67:54:93:60:dd:43:3b:
                    2f:1e:7a:24:c0:aa:0b:05:ca:46:1f:e3:49:77:9e:
                    69:f3:99:04:68:f8:3e:81:a8:f1:cd:5e:03:f6:32:
                    fe:b7:0c:31:1e:83:5b:13:5a:43:f3:ba:c1:28:37:
                    03:f7:8b:43:7f:ce:d3:40:c5:3f:60:61:28:97:18:
                    cd:8e:9a:c0:00:31:61:7f:01:e6:7d:3c:6c:d2:65:
                    ed:30:39:7d:cf:30:df:63:d4:6b:61:82:10:1a:e2:
                    1b:e6:13:f9:96:b1:08:89:15:12:f8:1c:12:c2:c0:
                    8a:72:75:02:29:77:7c:38:7b:4a:91:95:2a:78:18:
                    a4:6d:0b:bb:7e:c5:ee:8f:ed:f9:06:17:2b:91:46:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EB:E6:6C:69:43:0D:7B:06:C3:74:AC:0E:AD:2B:B2:0E:6F:22:2E
            X509v3 Authority Key Identifier:
                keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:89:3a:cb:a6:d2:92:49:04:3a:3c:de:e0:13:70:10:d9:
         3f:f2:85:40:74:93:ed:02:6f:34:16:7f:05:5b:da:83:a3:2d:
         02:11:e7:81:64:04:ca:12:9d:ed:6e:90:10:95:8f:42:68:ef:
         17:37:71:57:d4:af:5b:a7:9e:c8:ad:16:e0:89:4c:83:f3:8d:
         f8:13:2b:d3:13:b8:82:6f:d8:76:01:19:f0:95:4b:f1:75:99:
         4d:64:af:43:64:e3:60:1e:ca:42:b7:ab:b2:3c:27:51:95:5d:
         75:3b:b1:a1:34:d8:0f:82:30:a9:2a:ab:30:db:d0:a2:77:b3:
         3b:87:d5:c2:a2:25:3f:d0:98:71:67:d4:b0:c7:1a:f0:fe:ca:
         16:cb:3b:66:eb:4d:ef:d7:bf:4d:92:3a:2e:a3:ea:8d:ca:c6:
         12:ee:0b:71:24:66:dc:4d:a6:d8:40:24:7a:7e:e4:d1:16:50:
         c7:86:95:10:dc:04:8d:4a:8f:a3:e4:5a:84:91:10:11:ff:b7:
         92:31:38:1e:a9:f1:7b:75:5b:cf:49:b3:2d:92:aa:76:ec:60:
         16:f6:f6:49:fb:05:44:5d:d1:04:b9:69:82:8e:32:34:b6:d7:
         f7:6f:7a:d6:05:6e:eb:ec:15:f4:36:9b:ed:b4:66:d8:c5:b7:
         26:ff:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:51 2025 by rpki-client