Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
File:                     YWAUEB_7zmdROc1MAroAY0rYbgI.mft (raw, json)
Hash identifier:          K0bJ84HmvJgT3iXVQtVXPQsAPXPQ2sCvihb6dwh8ayU=
Subject key identifier:   D4:90:6C:A0:54:CF:57:C3:28:CC:7E:52:49:22:66:28:E0:D3:F1:78
Authority key identifier: 61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02
Certificate issuer:       /CN=616014101ffbce675139cd4c02ba00634ad86e02
Certificate serial:       019645FB4E4FD3715911F7E7E0CB88D7FC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
Manifest number:          1489
Signing time:             Thu 17 Apr 2025 23:00:19 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:19 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:19 +0000
Files and hashes:         1: 7vWonm9bF5IcZc4b_JwarXdqm9s.roa (hash: hJURA5qklA/bOkBC37NwKVvc+QzGI8iekbBVx5yVdVA=)
                          2: YWAUEB_7zmdROc1MAroAY0rYbgI.crl (hash: fPo6qb0UE/XWCZV29fxB+BYdlha/w7evSJXmf4nDFyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:4e:4f:d3:71:59:11:f7:e7:e0:cb:88:d7:fc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616014101ffbce675139cd4c02ba00634ad86e02
        Validity
            Not Before: Apr 17 23:00:19 2025 GMT
            Not After : Apr 18 23:00:19 2025 GMT
        Subject: CN=d4906ca054cf57c328cc7e5249226628e0d3f178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:00:27:91:57:ba:29:3f:d8:b3:15:4d:ec:
                    66:a5:b9:ce:52:08:42:46:6b:cf:71:b6:8a:aa:cc:
                    65:9f:f7:9f:a6:ed:66:4a:17:f0:a3:a3:cb:50:0d:
                    06:70:ce:9a:bc:fa:5b:f8:20:e4:24:56:fb:e5:83:
                    95:7d:e4:37:20:1e:08:56:15:b0:88:9f:7b:70:bc:
                    3f:3b:64:79:5c:3d:35:eb:be:01:e2:43:b3:3d:13:
                    48:d5:56:6c:91:0b:17:70:1e:a6:f0:89:91:e7:3e:
                    0c:29:ab:83:54:41:da:5d:c6:41:ad:dd:ef:d8:76:
                    b8:ba:37:fc:16:91:be:53:04:f0:de:cc:b1:47:77:
                    a1:35:bd:bc:57:f0:4d:35:47:46:49:4f:ca:a0:50:
                    66:a9:29:bb:a2:3b:81:3c:fa:0b:75:e6:e2:ff:1d:
                    62:61:37:d2:33:80:2d:8b:bd:b9:5a:0b:e2:69:5d:
                    d5:3d:1c:9e:c0:c3:d3:27:42:7a:eb:3e:7a:67:59:
                    40:58:78:87:5f:5f:1a:df:82:e8:48:69:87:21:84:
                    b7:23:00:dd:13:b8:d6:63:ee:8f:ed:b0:a6:49:5c:
                    1c:77:fd:33:bb:b8:2f:0b:34:29:0e:79:ae:76:3b:
                    eb:98:2f:46:05:93:80:3b:8c:91:2d:1d:21:62:05:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:6C:A0:54:CF:57:C3:28:CC:7E:52:49:22:66:28:E0:D3:F1:78
            X509v3 Authority Key Identifier:
                keyid:61:60:14:10:1F:FB:CE:67:51:39:CD:4C:02:BA:00:63:4A:D8:6E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWAUEB_7zmdROc1MAroAY0rYbgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cc8441-ddb6-4795-9030-59cddba176ef/1/YWAUEB_7zmdROc1MAroAY0rYbgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:53:bd:2c:68:c2:f8:8a:78:1a:15:1c:0e:e8:3d:53:23:
         13:28:2c:c3:95:86:3c:5a:6d:27:0c:e5:22:79:96:01:ea:c2:
         25:86:b9:cc:a4:e1:e7:05:ec:f1:d5:94:3c:e9:01:fd:92:84:
         29:db:c5:8e:40:9e:a4:92:65:e1:e4:14:c1:4d:9d:41:22:3c:
         b3:ad:4b:20:b3:85:45:47:01:06:ac:2c:4e:0b:7b:54:fe:ee:
         84:f3:fe:0f:ce:27:20:83:30:27:55:81:41:95:d5:50:1a:0a:
         fc:34:90:15:3c:1f:58:7a:6e:ee:ae:5c:2c:a9:27:d3:a1:8d:
         ba:ef:56:bc:0b:dc:34:ae:73:49:dc:bf:fe:c3:db:bb:1e:b4:
         2b:25:56:3f:cd:31:0f:28:c0:50:3a:8f:ed:b0:7e:e3:e3:35:
         31:00:4a:73:75:11:be:2f:ff:14:10:bb:05:bd:9b:d4:f5:72:
         2e:a1:0a:e7:55:1d:3a:cf:eb:63:92:78:e5:b3:b0:6f:97:a5:
         8d:83:e6:90:f2:07:0c:fe:6f:3a:f8:22:dc:d6:48:a5:bf:d7:
         17:60:b6:92:19:fe:0a:8e:75:49:0d:d1:4e:3f:95:6b:3e:e6:
         57:ad:5c:ea:9d:26:03:ed:7c:7e:3e:be:fa:5a:ec:1a:01:08:
         48:35:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:42:37 2025 by rpki-client