Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          JuR4IauenJNF7kP8Y2h1jE6N5n+jgG4/x5iuXpGI6D8=
Subject key identifier:   75:47:9E:04:EB:C8:AA:EC:35:2B:47:7A:9F:06:71:48:06:7C:33:C4
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       01974A0CAA4F2DC12F39106381239E9AF694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          112A
Signing time:             Sat 07 Jun 2025 11:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:33 +0000
Files and hashes:         1: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: 4h+3MjURBouREG1lI8puoVxe97cB++5yYcuU4SU7sLo=)
                          2: shQWrGUmL_hnxXrykLqgxjUrJSo.roa (hash: WyhgYBiNi+KPH14FenrkvjOQfAHnL6lB02jl9DUrbbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:aa:4f:2d:c1:2f:39:10:63:81:23:9e:9a:f6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Jun  7 11:00:33 2025 GMT
            Not After : Jun  8 11:00:33 2025 GMT
        Subject: CN=75479e04ebc8aaec352b477a9f067148067c33c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ed:c2:94:c1:4f:0f:f9:0e:0d:61:80:2a:33:
                    08:b3:4c:b9:16:4c:81:20:99:ba:f5:7c:b6:ff:2c:
                    d5:82:a0:0b:b1:01:c9:25:d1:b2:d1:65:72:c3:51:
                    5e:ec:43:5d:c0:ae:5c:a4:f2:66:be:7b:c1:69:a1:
                    6d:e3:e9:ee:79:f3:70:22:d7:2a:f2:1d:ec:a3:13:
                    47:5c:e2:53:48:d7:c1:94:7f:1b:88:a8:ed:32:79:
                    b8:58:3d:28:96:1f:f7:c8:c7:5e:be:83:11:d9:34:
                    0b:bb:c9:d4:b7:18:30:84:92:6b:8a:57:1c:6c:b0:
                    7d:2c:7d:3a:51:c9:16:2d:b6:15:f5:19:52:f3:6f:
                    2c:8f:ad:c6:1b:81:46:b6:b0:a3:9a:44:65:ea:4e:
                    19:c0:4c:13:08:ce:ae:fb:88:aa:8e:3b:69:27:44:
                    6c:0e:86:a0:c4:a1:c8:ec:27:e1:b9:05:de:31:e8:
                    b8:c8:ed:82:90:21:43:d4:e5:c4:52:3a:8a:7e:a9:
                    a2:39:40:65:53:4b:26:7d:5e:10:2d:ea:d3:27:bb:
                    34:c4:f2:81:73:77:0e:61:4d:11:dc:71:68:f0:68:
                    a0:0f:0f:32:7f:a3:8c:40:92:64:ae:16:b0:94:18:
                    f0:c2:58:1b:9e:c1:a9:4e:f3:af:5e:b8:8f:04:a6:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:9E:04:EB:C8:AA:EC:35:2B:47:7A:9F:06:71:48:06:7C:33:C4
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:5b:05:17:ee:6b:f8:57:97:d9:02:b5:fa:ad:d6:40:ba:
         79:41:76:0b:e9:48:a1:c7:11:73:6b:88:3c:4f:74:cb:fb:a0:
         02:eb:03:b1:d8:3b:47:f6:6d:ae:77:52:ee:f1:15:ae:8c:cc:
         80:a5:ea:6e:80:65:79:ce:13:a8:82:f2:22:ac:98:df:25:97:
         59:17:29:92:d1:7f:5f:73:a4:75:79:82:d4:1c:e6:cc:73:1d:
         b1:82:b8:33:88:87:e5:cd:d3:4e:f4:3a:6d:df:a7:f5:21:ec:
         b4:a1:18:89:d5:3e:4e:6e:89:4b:1c:36:8c:59:fa:9d:68:03:
         6e:de:5d:4e:83:c2:e0:37:6a:58:d9:ce:c3:73:44:f6:d5:8a:
         c2:29:eb:98:c1:63:07:6f:f2:08:cd:7f:93:a7:c1:fb:77:36:
         54:01:e6:5c:a8:a3:9f:90:5f:96:4d:c6:9f:cd:3b:17:04:e4:
         5c:89:81:ff:34:bb:9f:ae:81:d0:63:70:54:92:50:30:38:0b:
         00:07:46:3c:c3:55:36:6d:56:4d:3f:cd:fd:ff:3d:d9:fe:6c:
         20:a0:c8:a0:9f:7f:a2:9d:49:66:81:ed:0f:7b:e1:36:90:64:
         73:86:73:d7:ec:7d:8f:ec:fb:02:71:9f:18:6b:b5:e3:5c:a2:
         f1:91:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:39 2025 by rpki-client