Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
File:                     YeVlVi0-P1ZenApBlG6lPUXV1lc.mft (raw, json)
Hash identifier:          js5RUgM20OYRksSB5oy6XDN3lN7BkeXW6tQWygosEBQ=
Subject key identifier:   73:80:DE:C9:65:A4:3C:DA:09:B6:2F:AA:67:B1:ED:E5:FB:54:0E:ED
Authority key identifier: 61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57
Certificate issuer:       /CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
Certificate serial:       019758A41BDA76AF48EB21769C2B192D0C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
Manifest number:          0FB9
Signing time:             Tue 10 Jun 2025 07:00:39 +0000
Manifest this update:     Tue 10 Jun 2025 07:00:39 +0000
Manifest next update:     Wed 11 Jun 2025 07:00:39 +0000
Files and hashes:         1: M9EtDFxlEJ9A-FmeV5HNDDZqAp0.roa (hash: WI4ltzw0D8SzP8YIN3g88mLVBUuOvksyWitDll+8J8M=)
                          2: YeVlVi0-P1ZenApBlG6lPUXV1lc.crl (hash: QRgilfvqUsLrJYuRhDUuh1/iZE/xcEbsiX6A7v/hzTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:1b:da:76:af:48:eb:21:76:9c:2b:19:2d:0c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e565562d3e3f565e9c0a41946ea53d45d5d657
        Validity
            Not Before: Jun 10 07:00:39 2025 GMT
            Not After : Jun 11 07:00:39 2025 GMT
        Subject: CN=7380dec965a43cda09b62faa67b1ede5fb540eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:65:4e:aa:89:07:49:52:38:89:68:e2:5e:
                    26:cb:95:95:d7:55:40:7e:c1:49:5f:2f:a5:dc:b4:
                    16:45:c9:e9:dd:15:df:e2:6f:6a:4f:12:b4:50:ca:
                    6c:f5:29:12:b3:94:20:d9:a3:9b:1d:87:45:62:fd:
                    df:98:b1:1b:a9:97:48:58:ac:a2:f0:e4:28:d1:d7:
                    b8:d6:3f:5a:51:05:8c:c6:9f:58:3d:d1:ae:19:bb:
                    50:0a:e8:16:e2:a5:6f:b8:8e:1b:5f:d6:38:b8:5e:
                    76:0b:f9:7a:3a:87:ca:65:06:77:ca:42:52:32:74:
                    73:cd:c9:36:01:89:04:18:e1:c2:4c:15:d4:8d:e6:
                    86:62:30:b1:e0:4a:ee:57:d3:be:f0:31:a4:eb:6a:
                    d7:4d:25:1d:42:78:df:0d:32:57:56:f3:29:c4:44:
                    ee:c4:03:09:7a:f9:1d:d0:56:1e:b0:36:14:40:de:
                    54:2c:34:04:66:bd:5e:e9:7b:ba:60:c3:84:d0:2a:
                    b6:8a:8a:85:61:23:28:0b:85:f5:54:50:f7:6a:ce:
                    da:04:57:e0:1a:37:0c:33:77:dc:35:f2:8f:cd:6b:
                    14:f5:3d:a3:9a:26:21:2d:eb:d6:2d:b4:4c:45:00:
                    9b:62:df:9e:a3:1d:8b:2e:42:01:52:5f:d9:90:72:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:DE:C9:65:A4:3C:DA:09:B6:2F:AA:67:B1:ED:E5:FB:54:0E:ED
            X509v3 Authority Key Identifier:
                keyid:61:E5:65:56:2D:3E:3F:56:5E:9C:0A:41:94:6E:A5:3D:45:D5:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YeVlVi0-P1ZenApBlG6lPUXV1lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66214b-01df-4b01-ba76-f4cbd6ba6c0f/1/YeVlVi0-P1ZenApBlG6lPUXV1lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:e7:0a:95:0a:e9:8e:67:96:7b:82:4b:6e:f5:bb:c7:38:
         c5:1f:d9:18:88:ee:df:18:b5:aa:63:0a:96:15:60:09:56:56:
         2c:47:ef:ce:c5:f5:67:3b:31:93:9a:d5:d0:e7:68:cc:64:d2:
         f1:e5:2a:de:55:80:88:58:7d:1d:f0:1a:60:8c:e9:d4:6c:32:
         91:bc:33:3f:2e:6d:27:c1:fc:a8:5f:77:11:e1:da:f0:0d:b7:
         6c:9c:79:f8:ed:c0:dc:69:32:f2:0e:cd:44:cd:74:bf:99:20:
         af:e6:dd:c2:42:95:e8:92:11:e7:d9:2a:2f:4f:89:08:86:34:
         8e:0a:dd:81:47:f5:b5:7a:58:4a:20:43:d1:8b:bc:20:4f:1b:
         f6:56:26:3a:89:1a:92:fc:05:60:78:7a:b7:80:70:2b:b0:ae:
         8e:26:0c:32:9b:71:b7:52:d3:bd:bc:6b:56:34:2a:0d:8f:28:
         b8:ea:83:97:9c:e8:ce:b4:ef:bc:d0:72:05:7f:81:38:a6:eb:
         70:5a:f3:1e:79:69:07:d0:c9:bf:2c:a8:c2:d3:30:e8:90:7b:
         71:b6:ea:ef:5f:18:ee:05:7c:73:64:20:29:e9:b1:b2:3b:07:
         1e:50:95:7d:bf:c3:87:c0:f7:c4:4e:00:82:23:8c:00:a3:9a:
         f3:84:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:10:47 2025 by rpki-client