Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
File:                     YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft (raw, json)
Hash identifier:          iHcRfXH+ir6l1pDE0OJp1JvEKomFPNoEL0bqiwiMTBA=
Subject key identifier:   9F:1D:D0:69:C9:3A:68:9A:DB:AE:2A:F3:EE:1D:8C:13:93:08:7A:58
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Certificate issuer:       /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial:       019748FA056DA3C7488DDFDBCA54ACFB1311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
Manifest number:          124D
Signing time:             Sat 07 Jun 2025 06:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:34 +0000
Files and hashes:         1: YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl (hash: r/2ZxuT6wDlcCc/JRgK9LyPTJvtZ++c4/uQC6xWeAJ4=)
                          2: juaLzkk146uKRNECXoCuy_05vr4.roa (hash: CBsklMpH50L/CyQYAcOQ0dS2lSB0D35sIe8vyHi9T14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:05:6d:a3:c7:48:8d:df:db:ca:54:ac:fb:13:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
        Validity
            Not Before: Jun  7 06:00:34 2025 GMT
            Not After : Jun  8 06:00:34 2025 GMT
        Subject: CN=9f1dd069c93a689adbae2af3ee1d8c1393087a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:be:6b:31:fc:36:5c:a4:76:fe:4f:22:41:
                    27:7d:f6:f6:0c:36:df:b7:44:f2:f9:3c:dd:2b:66:
                    08:1a:76:ef:54:28:11:4f:59:d1:ed:69:c5:ea:2d:
                    f9:d2:ee:a1:d5:a5:41:21:5c:e1:13:06:15:91:01:
                    77:fd:5c:57:46:07:1b:d0:c1:26:a8:49:82:87:48:
                    68:df:fd:cf:53:f9:d7:6d:7b:4e:9c:d8:7e:3f:ed:
                    3e:ec:9f:9c:93:ae:08:4f:fd:cc:c6:8f:a4:40:31:
                    3f:cf:cf:71:95:22:9a:8a:cd:1a:e4:d5:10:da:33:
                    77:3a:0d:26:7b:8f:30:1e:69:cd:d6:7b:40:f6:0d:
                    e8:b5:67:9f:57:66:f6:38:61:62:ca:b7:38:8d:54:
                    de:b5:c8:22:9b:63:0e:7d:14:02:10:2d:d2:0d:84:
                    8c:7b:d8:98:0b:ec:d7:da:bd:95:c0:02:53:f2:4f:
                    f6:69:52:3c:a8:f8:a5:2e:8e:c9:79:de:7d:54:f3:
                    6f:a9:c0:a4:0e:52:a6:de:a0:41:f3:22:d9:a0:88:
                    1c:b1:6c:da:32:07:e0:b7:c3:23:27:34:39:6a:1a:
                    a2:4f:ef:10:9c:c1:df:25:dd:8d:07:09:2c:b1:3f:
                    f0:c9:67:c5:fa:98:38:ae:55:af:8d:b4:bd:82:d8:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:D0:69:C9:3A:68:9A:DB:AE:2A:F3:EE:1D:8C:13:93:08:7A:58
            X509v3 Authority Key Identifier:
                keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:85:78:16:d4:10:9e:f5:ee:89:6b:34:f0:70:f5:fb:fb:
         89:08:1c:4e:a3:16:ec:90:78:75:40:86:87:07:4d:45:8a:9f:
         fc:25:47:49:8d:06:38:56:2f:04:69:84:e4:b7:2c:02:bf:01:
         34:4e:09:c6:e3:34:90:4a:2d:71:b3:a0:3c:39:b9:b3:63:50:
         2f:88:50:3a:1c:b2:d5:62:4e:75:45:0d:56:88:9c:54:b5:de:
         50:30:be:c6:4b:29:b8:2b:aa:2a:94:be:eb:a1:9f:66:d9:81:
         e9:38:f0:f3:74:ef:ed:fa:11:27:cc:89:eb:23:3b:ea:6b:4a:
         ca:ca:83:88:e3:d0:89:60:91:4a:49:d9:83:81:0f:c6:5e:25:
         9b:8b:4e:aa:fd:42:8a:9a:af:7b:37:80:ca:66:4a:44:33:24:
         0b:7a:aa:2f:d3:ae:bb:d0:ce:26:9f:14:40:b9:8f:b4:37:55:
         82:92:67:3c:62:46:80:fe:36:bf:2c:05:33:ea:c0:e3:8a:13:
         1e:6d:56:4a:3f:b2:f1:07:9f:90:f6:c5:d3:40:da:f3:4d:34:
         de:2e:be:a2:c5:09:af:c6:03:7f:fb:77:14:71:5c:d0:9b:83:
         f0:56:67:3e:af:0f:14:81:0a:f0:be:6a:05:30:fc:b4:40:9f:
         e8:b3:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:46 2025 by rpki-client