Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          imzzc/5VzuULdHhg4XA1qzygfX9g8n2jayJEUt/EpGs=
Subject key identifier:   CF:4A:42:44:29:4A:68:3D:4F:2D:F8:09:EE:0B:7C:71:5F:1B:40:FD
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       019749D5EC01BA25B5D49DA315554E1C40A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          15A3
Signing time:             Sat 07 Jun 2025 10:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:45 +0000
Files and hashes:         1: N1MG3ptUi6lRkgCQgC4sjQwbS5E.roa (hash: JXk8TsLqv4eNpEsTxzdAoUG6ec7BUvgM4Lyhjc+WI9U=)
                          2: pMIZZEHYcO0IlQ8lJ-JaDY1xnJs.roa (hash: KI7tUZnJYI1JaBjFs0d5L727l5SVVoE+xByQFUZQZZI=)
                          3: uiLIHzK4-mf16_OjnZc2yUpW0us.roa (hash: RlQY7OlYxlif+RwnDDphDKPVhonzC8U4YVG2wYszXJM=)
                          4: wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa (hash: /EPsVJFiMZ3O3IoH+IOAZdQSfyIhjr2V/FlxWvt6e5c=)
                          5: xF5VKoGOYu4SuTkWFtzR0bzZqmI.roa (hash: rdwu1BaRed5RxmIo/GH4jXiyNp3cFaIjeNX4kVrFm70=)
                          6: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: oFWycASDwDwot6iiVHHx+gxE6/uNRkTva33qoD8Cd10=)
                          7: zPFc5xzrxxMWf2K11uBlgIiWqTo.roa (hash: 3x/T35aDdfP5Wrtlu3UJYc2NEgecLDM5KH+dyoNyYx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ec:01:ba:25:b5:d4:9d:a3:15:55:4e:1c:40:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Jun  7 10:00:45 2025 GMT
            Not After : Jun  8 10:00:45 2025 GMT
        Subject: CN=cf4a4244294a683d4f2df809ee0b7c715f1b40fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:84:44:ca:c7:c1:1a:da:14:40:52:60:47:
                    90:e8:81:04:da:17:79:9b:93:3b:e6:c2:56:70:22:
                    b8:8b:2a:97:18:3d:63:ee:d9:20:f9:fa:67:81:91:
                    17:e1:3c:a7:7d:5c:c6:f1:d1:9d:2a:ca:90:2a:c8:
                    85:a1:11:d1:9d:e0:16:f2:56:a0:10:ce:f9:46:f8:
                    39:c7:3d:c1:b0:65:e8:14:88:e9:9e:3a:c9:94:0c:
                    60:72:68:fc:2a:51:17:21:3f:d0:6b:cf:35:19:9d:
                    3b:3f:76:d1:66:73:3b:ca:93:e8:15:6b:fc:77:f4:
                    25:bd:7b:b1:48:b8:5a:20:e3:21:94:c9:5f:ed:4e:
                    88:1b:10:b1:e3:35:89:1b:c6:4d:45:0c:ce:95:a4:
                    e7:42:dc:71:c5:3d:2a:e1:24:5e:ba:37:be:f1:1e:
                    6f:1f:2c:45:34:db:f2:f5:17:a1:e4:1e:de:96:1b:
                    3a:c4:25:e3:74:34:19:b4:16:96:47:5d:fc:ab:78:
                    d3:98:40:5d:68:70:96:5f:82:52:6d:7c:a1:39:b7:
                    8c:1e:cc:8e:a8:44:53:1c:b0:3e:78:dc:f7:3f:1e:
                    79:bd:90:a3:2a:6b:0a:29:1a:ba:2c:57:26:e5:4f:
                    96:dd:bb:a9:33:28:87:66:df:db:c1:42:92:f1:5b:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4A:42:44:29:4A:68:3D:4F:2D:F8:09:EE:0B:7C:71:5F:1B:40:FD
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:4f:c9:94:10:29:ac:5f:82:7c:b2:ee:00:fd:6a:33:7a:
         7f:a6:19:8b:05:4b:03:47:dc:dd:4c:d9:cd:ff:6c:28:89:63:
         93:f4:21:35:a5:8c:bf:fd:60:fe:57:2f:0a:b3:ea:2e:55:a1:
         6f:34:7e:82:57:b4:47:08:7d:a8:ab:8e:d9:6e:d8:a7:25:0c:
         a2:f9:34:82:05:90:38:fb:8d:b1:50:5f:c1:95:7d:92:e8:03:
         a6:64:b8:4b:d3:e0:1b:3a:1f:9e:30:ef:7e:d7:b8:1e:73:bb:
         71:b1:94:59:93:1d:f7:8e:16:39:3c:9a:0d:33:14:9a:80:9b:
         71:a1:b4:5c:8a:fd:72:36:15:27:51:5c:5d:e7:dc:da:15:86:
         18:cc:61:14:db:75:9c:25:43:88:de:32:44:36:38:dd:b8:63:
         11:35:a2:ce:2f:c4:f7:b6:4b:04:35:5a:8a:8c:bc:65:b1:06:
         cd:62:ab:71:73:7f:6b:8c:6a:31:e0:0d:5f:99:3b:ab:46:8e:
         a0:33:43:d0:1a:26:67:05:7d:b6:18:bd:b5:3d:d5:1f:08:64:
         12:0a:63:15:b5:14:b5:e5:d0:94:69:98:bf:68:5f:45:12:ed:
         8f:e0:5b:79:86:98:20:00:6a:44:c6:0d:4f:3e:dd:40:4d:15:
         23:b9:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:33 2025 by rpki-client