Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          J1u3FG/0F8YENhNbR5hqL8Ooa5mts+oZ4eau6JuziN0=
Subject key identifier:   F4:8E:05:41:EB:67:15:89:41:6D:7C:48:4D:67:BF:3F:40:6A:E2:B1
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       01975E381AA0FC5EF942E7F953A31107D62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0D21
Signing time:             Wed 11 Jun 2025 09:00:24 +0000
Manifest this update:     Wed 11 Jun 2025 09:00:24 +0000
Manifest next update:     Thu 12 Jun 2025 09:00:24 +0000
Files and hashes:         1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
                          2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
                          3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: G03f/WjQd93xvQD456sDF/hdljAePp1DA1Ys6natNeo=)
                          4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5e:38:1a:a0:fc:5e:f9:42:e7:f9:53:a3:11:07:d6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Jun 11 09:00:24 2025 GMT
            Not After : Jun 12 09:00:24 2025 GMT
        Subject: CN=f48e0541eb671589416d7c484d67bf3f406ae2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:fe:52:83:13:37:15:d8:21:f1:5d:15:a7:
                    73:74:85:98:14:6c:42:05:5d:6c:a7:6a:ad:6c:47:
                    29:f0:0a:47:b0:df:fb:60:19:3c:8a:40:b1:da:b0:
                    0c:9f:6d:cb:1b:6a:5c:28:72:fa:76:bd:57:b5:3f:
                    4b:0b:0a:e3:9d:89:2d:44:d1:90:93:9f:04:65:6a:
                    74:ba:94:a6:dd:43:c8:8b:dc:eb:db:f3:be:8b:cf:
                    e1:77:99:38:8f:21:25:64:35:43:0b:bf:9c:95:32:
                    e4:1d:82:8c:7c:3a:d7:55:30:81:ee:10:97:4a:87:
                    52:c8:0f:b7:c4:05:8f:00:23:1b:d4:79:a4:2f:f2:
                    24:90:99:c1:15:0c:53:8b:6a:5c:92:a5:a0:00:52:
                    51:27:f6:bf:08:49:cc:95:c2:23:6a:76:1d:ff:e5:
                    c5:7d:1d:e9:bc:c6:d0:41:40:dd:12:ca:4f:a9:6f:
                    dd:35:09:39:ba:88:ed:71:4e:d7:3c:94:fc:d6:b6:
                    22:b6:8d:5d:7e:a4:cb:6e:16:27:42:26:1f:4d:54:
                    f8:16:b3:3d:9c:f7:ff:ad:37:35:ac:6f:83:85:dd:
                    5c:6d:3a:40:2e:ec:9d:ce:6a:c9:4e:71:93:3a:a8:
                    99:f0:44:7d:b3:51:44:64:3c:b4:3a:5b:32:74:b3:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:05:41:EB:67:15:89:41:6D:7C:48:4D:67:BF:3F:40:6A:E2:B1
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:0b:07:37:cf:e0:2d:56:0d:c0:a3:01:97:ec:9e:02:2d:
         93:cb:d0:77:28:24:e6:16:cc:93:7d:ea:17:52:c7:62:59:7a:
         13:ac:89:fa:3f:a5:19:6b:70:02:c8:39:02:a9:bf:ea:24:b2:
         f6:89:2c:b4:9d:40:f8:d7:c2:53:fb:d5:77:45:ca:5f:2e:0d:
         f5:d5:ea:63:e2:71:19:d6:94:79:7f:44:dd:d1:2a:af:1e:1a:
         6f:23:5d:f7:7d:ab:2d:4b:a2:16:a8:e6:34:43:90:75:71:fb:
         36:f7:d7:af:60:06:5e:b2:99:e6:7f:80:3f:6f:e6:a5:21:bf:
         35:75:aa:70:e6:43:bb:cc:ae:6a:4a:6d:1a:67:08:23:c0:67:
         60:6f:05:4c:ab:74:0f:e0:7d:aa:ae:bb:81:28:74:54:0b:aa:
         32:be:0c:53:31:a0:a7:bc:21:e8:51:57:f9:20:17:e8:1d:d5:
         d5:60:8d:71:94:c2:0c:b7:2a:0e:ad:ca:76:4a:65:64:5a:a9:
         2a:33:2e:1b:ad:91:c3:b5:ab:b6:05:a2:6a:08:d3:6b:7c:5d:
         34:bf:0e:1e:15:7b:d1:2d:15:20:0f:46:c7:fc:1a:c6:de:9b:
         8d:c9:29:44:4e:22:b6:20:e7:37:56:3e:7e:29:b4:ab:fe:d2:
         2b:aa:44:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:04:25 2025 by rpki-client