Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          7oeNWafztsEfa+7swCv57W3yQMfQG92jb5apaxC74F8=
Subject key identifier:   29:B3:66:11:FE:CF:DE:E8:D6:90:DA:AA:6D:93:73:A2:0C:5A:A1:88
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       01974D44C5630609E89C3D18D971A21BF70F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          0D0D
Signing time:             Sun 08 Jun 2025 02:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:41 +0000
Files and hashes:         1: DcSO93z7fLoOXoqmDIifEXGL2wg.roa (hash: nhLe1W2M8L/RVeyBnebjnTgtFIE/bzp14sFZY8G/wn8=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: BZwtMScID+kdiCX+P/DWCuktxSiw0RSnr6hyTj+jvgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:c5:63:06:09:e8:9c:3d:18:d9:71:a2:1b:f7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Jun  8 02:00:41 2025 GMT
            Not After : Jun  9 02:00:41 2025 GMT
        Subject: CN=29b36611fecfdee8d690daaa6d9373a20c5aa188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:ed:3e:5f:40:c5:c5:ee:60:99:c2:8c:dd:
                    4f:cc:94:a0:bf:8b:ec:60:53:b1:48:b3:8c:72:46:
                    8c:15:c8:ad:c7:5a:e8:a0:8f:f7:0e:74:01:e8:95:
                    c1:13:ab:ff:87:a4:70:46:f6:24:b0:00:ab:69:85:
                    4e:ca:2b:4b:3e:73:82:60:a4:5e:62:a5:e7:28:06:
                    c4:39:50:70:4f:39:4f:3d:03:fa:d3:c8:87:ad:ff:
                    91:34:0c:5a:50:79:54:f3:2e:45:e8:a4:08:9a:b4:
                    63:84:ab:19:7f:27:6a:4d:71:bd:2e:d1:32:e4:f1:
                    66:92:de:45:ef:a0:87:09:d8:87:d6:0d:c7:55:24:
                    ac:b6:c1:7c:cb:f3:d9:13:18:94:c0:73:19:d7:27:
                    e3:b3:cb:41:ab:0c:13:63:55:61:18:99:dc:c8:52:
                    aa:83:e4:22:f6:83:e1:c3:ff:07:5f:87:85:48:d3:
                    f7:f8:8a:5c:84:cc:a4:be:56:92:bf:d2:58:af:ef:
                    7f:9f:3a:c9:0d:a4:25:e9:09:4c:60:a1:a6:ac:3a:
                    39:9d:16:12:3f:12:3a:85:01:ae:c0:5f:be:0e:f1:
                    6a:c8:e7:77:5c:e7:36:25:1f:26:14:2e:7b:a2:8b:
                    fb:40:e8:91:3e:cf:30:48:6c:ca:6f:b1:70:a0:82:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B3:66:11:FE:CF:DE:E8:D6:90:DA:AA:6D:93:73:A2:0C:5A:A1:88
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:43:a8:16:89:9e:bf:f2:29:b4:6f:46:8c:89:c8:8d:2b:e3:
         07:49:58:fe:07:0a:63:f3:f2:2d:82:70:3c:57:b2:8e:bf:7c:
         0f:f6:9b:a4:15:6b:38:95:f2:d2:9e:c6:45:2d:dc:b6:b7:0b:
         03:6a:a2:a2:d2:b4:2e:b6:e9:00:0a:17:aa:64:7b:69:19:7b:
         75:c0:29:76:9f:8e:60:63:d6:76:3b:4c:62:4a:c9:29:3c:15:
         d8:48:62:60:b2:a8:2b:29:be:f8:43:52:48:bd:eb:c4:b0:53:
         44:ce:c7:cb:7f:fc:bc:ac:06:35:cd:4b:29:70:96:5c:1f:8d:
         ee:ad:49:a7:b1:4a:77:43:31:21:db:e8:e7:fa:72:ae:cf:80:
         67:34:b9:a6:37:df:f7:b6:93:3c:84:cf:97:3d:12:05:82:fa:
         d3:b5:60:94:ff:d0:d5:65:b1:d0:13:2d:7d:fc:34:2e:6a:fd:
         b4:be:73:40:e0:bc:e8:7a:40:35:fd:ef:75:a8:94:29:2c:44:
         80:c6:f3:19:07:af:1d:d6:61:b4:63:81:f9:03:06:53:b5:7c:
         da:4c:8e:fd:4f:2f:85:f9:21:1d:d1:ea:37:c2:8b:54:c9:9a:
         a4:15:96:6a:da:d0:83:f4:3c:ca:95:af:27:c9:8a:48:f4:eb:
         e4:9b:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:37:49 2025 by rpki-client