Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File:                     mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier:          H1YBoLOOfc7B4lIM1opQCfKVahkjCPix+YiD6d0eLLE=
Subject key identifier:   15:5C:7B:C5:7D:FE:B3:7B:15:58:FC:5A:53:E8:6A:54:A4:4F:63:B3
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer:       /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial:       01974C31D44B868AC06CBA21309A5EC4FEF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number:          0883
Signing time:             Sat 07 Jun 2025 21:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:23 +0000
Files and hashes:         1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: pnDSoB+diaUbVFYTdi72TFE3UkLCOxDMpJVa1brxSyc=)
                          2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:d4:4b:86:8a:c0:6c:ba:21:30:9a:5e:c4:fe:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
        Validity
            Not Before: Jun  7 21:00:23 2025 GMT
            Not After : Jun  8 21:00:23 2025 GMT
        Subject: CN=155c7bc57dfeb37b1558fc5a53e86a54a44f63b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:4e:94:d8:14:c7:39:ea:e7:47:24:f5:5a:
                    a3:06:c3:9b:4d:13:e1:30:60:4e:d9:45:b6:d6:88:
                    12:f9:74:e8:be:fe:c1:80:d2:3f:e1:97:f8:f1:a7:
                    05:f4:9a:7e:57:62:a3:8f:29:49:3e:e3:97:84:6c:
                    3b:18:68:3e:1e:f2:2c:67:d7:96:08:82:86:45:2e:
                    27:58:58:54:70:09:a7:31:bd:1e:1b:6e:38:fd:65:
                    95:2c:f5:0b:5e:c5:6b:6f:04:97:4b:66:3a:7f:07:
                    24:81:1d:12:87:3f:0b:89:72:87:5e:a9:ca:71:ca:
                    18:7e:62:97:b9:ee:70:71:19:e9:25:02:47:da:38:
                    36:f9:85:b7:e1:8e:75:c4:e1:f9:9e:fe:b4:c5:c5:
                    9d:45:46:44:12:e3:e5:61:9a:d8:7e:8f:d8:02:92:
                    89:2e:e6:94:16:3f:aa:1c:d5:1b:79:70:83:12:08:
                    96:df:17:28:d6:7a:9a:74:03:95:46:d5:b8:ed:4a:
                    7b:3e:c2:3a:f3:31:b1:f7:9c:66:1f:ee:b0:e9:5d:
                    83:45:0d:78:1c:0a:23:14:e3:37:c8:2b:b9:93:67:
                    9b:96:cc:97:90:a9:0e:75:f5:90:b5:41:7c:9d:d9:
                    3d:11:a3:da:c7:2a:84:40:4b:44:b3:82:0c:a3:ea:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:7B:C5:7D:FE:B3:7B:15:58:FC:5A:53:E8:6A:54:A4:4F:63:B3
            X509v3 Authority Key Identifier:
                keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:d7:89:95:5a:fb:4a:60:fa:44:4f:70:f6:e3:e9:b7:a8:
         18:64:a6:f7:b2:b9:ec:fc:33:42:78:e3:dd:01:c4:28:4a:52:
         9e:ca:88:80:ca:01:ec:82:c8:5d:a0:b4:db:49:01:d3:0b:85:
         97:71:a6:d6:45:8c:a9:1b:07:31:00:bd:b0:4c:43:f1:d6:3d:
         4b:dc:64:d4:fe:82:e8:15:a1:e3:d1:8b:42:f4:92:17:2a:6b:
         99:a7:80:0d:23:8a:08:89:1f:87:59:73:47:7c:b3:51:6c:7b:
         14:af:d6:d7:21:70:3a:70:d2:ee:74:b8:9c:7f:2f:53:76:bc:
         8b:0c:be:09:18:c4:df:5a:0c:a5:95:fa:eb:ab:c7:d7:7c:0a:
         ec:89:5f:06:82:2b:02:d1:5c:c4:00:32:63:6e:b9:58:69:d9:
         0d:c3:73:4a:10:ca:77:ef:2e:6e:24:ed:a0:2c:9a:a2:3a:4c:
         54:5c:2b:76:6d:c2:1e:6f:c0:04:d7:79:03:83:e5:b1:70:d8:
         7f:d9:ab:a9:e4:a5:24:aa:94:34:a0:27:f1:03:09:bc:4b:e2:
         c6:fe:d3:b2:ad:a3:1d:7d:a4:a7:4f:66:44:01:cb:6f:aa:82:
         49:01:ea:df:24:ab:73:14:12:41:af:f4:04:83:0a:79:94:3f:
         d9:01:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:22 2025 by rpki-client