Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File:                     ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier:          WutHll7s9MZrqKkkRT31WyOo4mHmXAkGb2nK8qDChVM=
Subject key identifier:   4B:F9:76:10:BE:E6:38:89:CD:E4:A8:C4:FD:6F:9B:DD:1A:CD:93:56
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer:       /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial:       01974C69C9CD7BF28B5BD5B8E58133C433E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 22:01:30 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:30 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:30 +0000
Files and hashes:         1: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: bEi6Dt5XtdYJxcPd3B5xlxyGRTi/eHzaXqIY61qIhv4=)
                          2: zr3t3IA44QoorxZIsw1MTeuie_g.roa (hash: ompX8t7N2TkHWnLirBbMhvCUBmfybfJcK/n6fwWr0hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:c9:cd:7b:f2:8b:5b:d5:b8:e5:81:33:c4:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
        Validity
            Not Before: Jun  7 22:01:30 2025 GMT
            Not After : Jun  8 22:01:30 2025 GMT
        Subject: CN=4bf97610bee63889cde4a8c4fd6f9bdd1acd9356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:2b:1c:69:7f:2e:03:69:1d:75:6d:7c:f3:
                    5e:3d:a9:af:09:5a:45:05:a1:6c:72:90:98:e4:2f:
                    23:54:10:43:20:20:bd:1a:87:f9:35:9a:6c:55:cc:
                    08:2a:ad:e0:f3:26:72:21:da:a3:46:ac:7b:23:d0:
                    75:72:ac:be:ff:af:c3:fa:c2:c9:54:33:94:82:c1:
                    1a:23:d2:ec:6c:55:ac:7a:21:11:81:51:b2:84:3b:
                    2c:9a:1c:ab:cc:6d:74:a1:10:02:9a:d6:d0:a1:dc:
                    22:95:ba:50:4e:6d:fe:e7:0a:40:20:2e:dd:1a:4f:
                    af:9c:d7:66:bc:35:1e:2a:c8:82:33:75:a7:c0:9f:
                    72:55:0f:31:9c:c2:96:2a:62:68:34:27:72:e8:ed:
                    b6:98:c3:64:ac:71:7b:76:de:91:18:8f:25:5d:46:
                    df:4e:40:b8:31:09:b0:bc:40:3e:3e:72:c1:9b:be:
                    b1:23:c1:d0:9c:ad:27:34:27:64:a3:72:80:cc:2f:
                    e6:4a:40:9d:b9:75:0b:d1:4a:65:77:e3:54:9f:bf:
                    91:d6:47:76:a2:9f:b2:f8:a7:f9:4f:d5:09:be:73:
                    c5:a3:f1:9b:f7:b7:33:9a:1f:94:cd:e7:ba:a1:95:
                    59:ed:67:ad:20:91:5d:77:42:bf:ef:85:95:fd:48:
                    76:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:76:10:BE:E6:38:89:CD:E4:A8:C4:FD:6F:9B:DD:1A:CD:93:56
            X509v3 Authority Key Identifier:
                keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:e0:e0:62:f3:46:4e:f1:03:79:25:46:fc:27:19:40:ad:
         19:cb:ea:ab:88:4e:af:83:c9:db:42:ce:d0:d8:e2:6d:62:74:
         8c:01:33:ac:7f:3f:fb:77:97:eb:d0:33:b6:bf:8f:39:94:08:
         34:91:33:30:a7:b1:e9:a8:81:bf:bd:48:0d:a6:ed:a0:00:07:
         85:3a:a5:b5:4d:0c:ec:24:40:87:d9:b2:17:a5:8f:2d:fd:4a:
         5b:56:d0:9d:f1:05:b1:ae:4e:5b:5b:95:a6:df:b8:dc:e3:20:
         c5:2e:87:01:3d:e8:5f:fa:0a:fc:0f:b0:ef:91:72:b5:f6:47:
         08:09:59:ff:48:cd:0f:31:8a:b6:b3:78:02:0f:61:f9:4d:a9:
         53:84:c7:a5:cc:ea:14:26:0f:24:48:c7:c6:cc:45:e4:f8:37:
         62:10:5e:82:3f:6a:00:ca:38:8b:58:77:a2:87:90:1c:63:f1:
         60:25:30:9e:b7:6c:a1:91:f2:5e:3e:92:db:88:03:89:e7:83:
         d6:02:e1:ca:f8:aa:49:52:eb:b6:2b:97:d3:15:bf:2e:87:1d:
         30:1d:80:81:c6:30:6c:3b:52:78:f5:7f:01:12:cf:a2:87:44:
         c4:dd:d6:17:2c:71:bc:28:1a:7d:dc:27:dc:93:b1:90:f4:8f:
         c2:8b:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:09 2025 by rpki-client