Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
File:                     YblVGO1PVYKi9sEZVXQChLwIgTQ.mft (raw, json)
Hash identifier:          jGdRNS7/VAHm333ZbJAk38cKwhfRcL0V9r56hdhhGm4=
Subject key identifier:   71:79:B9:88:98:F6:B9:B7:68:ED:2F:58:BA:44:44:D1:37:E5:89:9B
Authority key identifier: 61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34
Certificate issuer:       /CN=61b95518ed4f5582a2f6c11955740284bc088134
Certificate serial:       01974779F534D3278F2FE7BFCD6C21526626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
Manifest number:          05FA
Signing time:             Fri 06 Jun 2025 23:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:04 +0000
Files and hashes:         1: QPglHGOSHFrs1mgAtq2zwd82Smc.roa (hash: y5xHnZXArsaVabnfSwbndMTBY0pIDvTGUm5JTD4ZakI=)
                          2: YblVGO1PVYKi9sEZVXQChLwIgTQ.crl (hash: r/4KyXq18q/G/Cncu3d2YXAjqAc9go++iL8eqz1Nrkc=)
                          3: eTJhKe-LETepmtUCJc23KDC15Os.roa (hash: bWxC4iCttKGE5WGBMq9/txv6VyYSnQgWWwgULLvAoD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f5:34:d3:27:8f:2f:e7:bf:cd:6c:21:52:66:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b95518ed4f5582a2f6c11955740284bc088134
        Validity
            Not Before: Jun  6 23:01:04 2025 GMT
            Not After : Jun  7 23:01:04 2025 GMT
        Subject: CN=7179b98898f6b9b768ed2f58ba4444d137e5899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:c8:92:a5:6e:0c:49:42:2e:a4:aa:f7:10:
                    c5:d8:01:7b:52:44:90:e8:c9:ca:23:7a:78:51:90:
                    bd:a6:9f:e3:15:a7:cd:4e:57:99:13:ac:e0:04:59:
                    ff:f6:3b:1a:b3:ca:17:44:38:07:0f:89:49:24:7c:
                    a8:b8:b4:a5:65:08:7f:c6:c9:ac:e6:0c:96:eb:39:
                    24:04:fa:40:0f:3c:3b:74:b2:9c:14:f5:eb:74:53:
                    2b:11:55:09:89:ca:78:40:92:16:61:08:35:6d:e7:
                    fb:66:f8:05:ac:ba:8b:a1:50:43:6f:a4:f6:8a:01:
                    21:b6:6b:85:b3:13:a8:14:b0:cf:7f:97:50:8d:d2:
                    fc:38:90:6f:6f:94:ab:f3:5a:f0:35:dd:3b:66:53:
                    40:6d:bf:87:fa:be:c7:41:9b:4a:47:21:8c:83:24:
                    80:16:08:0d:e5:d6:d0:c3:c2:c6:dd:62:2b:5b:5c:
                    53:bb:96:66:cf:53:47:03:3a:67:79:c9:68:2c:2e:
                    96:75:02:f8:eb:f7:81:47:73:50:3d:f7:9c:c5:9a:
                    ef:70:61:84:eb:16:03:1f:96:fc:54:19:07:1b:7e:
                    e4:fe:24:4f:8c:13:a1:c3:9e:c9:9a:2b:77:be:b4:
                    20:9c:b7:83:96:97:e2:1c:4f:01:aa:ec:3f:f3:3d:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:B9:88:98:F6:B9:B7:68:ED:2F:58:BA:44:44:D1:37:E5:89:9B
            X509v3 Authority Key Identifier:
                keyid:61:B9:55:18:ED:4F:55:82:A2:F6:C1:19:55:74:02:84:BC:08:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YblVGO1PVYKi9sEZVXQChLwIgTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3240e9-0eab-48fb-960b-3b651bb08efb/1/YblVGO1PVYKi9sEZVXQChLwIgTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:7a:80:5a:f0:76:59:ea:df:08:6a:6c:d6:e9:7d:2c:e2:
         31:0e:1c:24:db:ee:97:d9:51:9f:be:b9:cb:42:f1:24:86:39:
         9c:e9:57:f6:2a:be:e4:63:fc:1f:20:eb:5f:a1:f7:5a:5a:70:
         5a:5b:f3:2e:02:eb:61:4b:e7:08:b8:1f:0c:88:a3:b4:dd:fb:
         7b:66:66:87:38:b4:20:a6:68:f7:d2:94:23:dc:3e:27:88:46:
         cf:09:5d:be:3d:af:69:24:ed:20:6f:7d:92:8e:71:2d:4d:67:
         5a:ac:88:6a:b4:5d:c5:4b:08:8e:69:0e:25:0e:4f:00:ba:ac:
         39:03:15:9b:e8:f4:2e:38:9a:e5:bd:c4:fd:b2:ad:05:73:b3:
         7e:51:33:04:a8:d5:e5:81:02:7d:a6:ed:19:2b:4c:24:fb:66:
         bc:33:92:e8:87:b4:f0:54:b5:42:a0:ff:a2:e0:1c:0e:40:5b:
         82:fc:6f:7e:a2:bf:b3:6a:4b:87:2c:85:e8:b0:3f:0f:84:8b:
         8a:d7:76:b8:c2:d2:a6:8c:a7:bc:42:fa:42:e2:1c:fc:0a:02:
         62:40:0c:52:35:2a:90:39:2b:b5:96:8d:76:f2:d8:1c:49:a8:
         f1:aa:e7:57:cc:41:07:d4:81:80:9d:2e:fb:e6:24:c4:f7:e9:
         17:66:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:16:45 2025 by rpki-client