Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File:                     yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier:          33mbdZrELK+VTcGnuyB4xhZ7FeMlrzG4mmBE6pbXqa4=
Subject key identifier:   D0:7E:D4:7F:C2:54:6E:9C:D0:05:F7:33:C8:76:62:98:18:5C:62:E5
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer:       /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial:       0196507F4D31985F1808497B450CD07B8E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number:          0577
Signing time:             Sun 20 Apr 2025 00:00:42 +0000
Manifest this update:     Sun 20 Apr 2025 00:00:42 +0000
Manifest next update:     Mon 21 Apr 2025 00:00:42 +0000
Files and hashes:         1: yCnipoUsu7OGpYLMyUk7C5Mf4Y0.roa (hash: /0wnIB5zXFdR7lKXtpV7vbYLWJWmyCiIhUGInpg7xqg=)
                          2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: ubUXpNDTSYrlvzbZZC0Xfb9YgXswbiGR4o3aWZLZWRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:7f:4d:31:98:5f:18:08:49:7b:45:0c:d0:7b:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
        Validity
            Not Before: Apr 20 00:00:42 2025 GMT
            Not After : Apr 21 00:00:42 2025 GMT
        Subject: CN=d07ed47fc2546e9cd005f733c8766298185c62e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:a3:04:15:45:cf:13:55:71:18:8c:59:d7:
                    d5:a9:2b:ba:eb:93:e5:db:34:8f:72:92:4e:11:92:
                    93:3d:27:e1:e2:35:1f:25:da:2b:dd:9b:84:d4:2a:
                    c5:63:b5:d4:1e:71:33:07:23:f1:fe:99:7a:d2:77:
                    5e:81:aa:ab:1a:c6:09:1e:2f:d6:f7:91:1b:a5:34:
                    f4:17:ae:4c:e3:6b:e3:a0:b6:63:4b:de:25:f2:9e:
                    57:e7:87:fa:64:0c:40:1f:42:19:8f:0c:78:61:39:
                    ac:1d:3c:bb:55:ef:9e:7d:80:47:65:77:b7:5b:89:
                    6e:7c:04:ad:07:ad:91:fd:07:a8:9f:da:8e:20:c5:
                    f7:91:74:36:b3:da:79:04:2a:55:ce:bc:46:98:42:
                    4d:37:6a:ae:7d:05:2e:7f:3a:10:6b:00:ab:37:bf:
                    4b:84:51:77:1d:17:7e:b2:ae:b9:46:65:9a:84:5c:
                    59:5d:33:62:10:b1:3b:20:ea:3c:69:0a:60:a7:81:
                    dc:22:26:ab:1a:7d:0f:a0:d2:5c:52:2b:4a:b1:08:
                    59:e1:e6:f1:2c:61:95:c7:2f:82:28:32:c6:c9:12:
                    ae:d2:ce:b0:47:b0:99:ef:65:0d:00:8f:23:e4:85:
                    72:86:ec:bb:93:40:ac:4a:94:06:c3:0e:f2:33:12:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:D4:7F:C2:54:6E:9C:D0:05:F7:33:C8:76:62:98:18:5C:62:E5
            X509v3 Authority Key Identifier:
                keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:f1:9c:f2:40:f5:62:a5:d3:89:62:e2:62:2e:da:92:e4:
         b3:d2:48:5d:b7:f2:bd:6f:ff:74:9d:24:2d:ee:af:db:6f:52:
         92:c7:49:20:94:0d:d8:c1:89:e3:64:08:42:a1:37:5c:9c:25:
         14:ca:79:f9:e2:41:2a:cd:3f:9c:4c:1b:fa:2a:4b:83:52:19:
         39:50:f1:09:a7:57:02:1e:4b:fd:1d:41:6b:2d:00:27:9b:3d:
         c3:bc:c7:0a:e6:e5:36:98:f0:6f:ad:71:c1:ec:26:cb:c7:5c:
         60:a0:1a:fb:cb:b8:ed:b6:f5:c2:88:55:fc:27:01:76:a5:21:
         2c:e9:9d:08:fb:da:3a:42:bf:2f:e2:ba:43:a5:62:b7:0e:24:
         4c:8b:1a:07:07:34:01:3c:81:5f:af:19:0e:6b:f8:c1:b9:f2:
         6f:32:e4:8f:d7:46:39:6b:0d:ef:28:43:63:99:c7:29:5e:67:
         fa:54:d2:dd:38:3b:e2:b5:12:47:8d:5e:39:83:fa:38:fb:57:
         e3:61:66:0c:4f:96:a2:f7:30:79:ca:aa:c6:25:37:fc:e0:1b:
         b7:fd:a4:a3:fc:c8:a6:2c:52:32:59:1b:50:54:9a:81:21:bd:
         7d:9d:c6:c3:bc:fa:45:ab:d4:9b:b5:c9:96:69:6e:65:89:0b:
         3f:83:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:20:53 2025 by rpki-client