Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
File:                     YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft (raw, json)
Hash identifier:          WGnVv5DaVDG0W1peDrJNdUbuZ8iyzvDxrJIS7C65p7o=
Subject key identifier:   91:68:20:9C:62:D6:3C:E6:D0:EB:D9:10:74:86:CA:5A:77:84:90:B9
Authority key identifier: 62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66
Certificate issuer:       /CN=62f62a847a4edff99571a32e94edff0525b03b66
Certificate serial:       019749D5FB183D0E4A67437B17C5BFD4DD20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
Manifest number:          157A
Signing time:             Sat 07 Jun 2025 10:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:49 +0000
Files and hashes:         1: YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl (hash: GklykqF4pNFtwxpXDWhNVu3pXD/yUxh30+wo4QcnnII=)
                          2: yj99MOmgQbzvoc18YD5uSOARIoI.roa (hash: YzvqgfFVZqoKhUwvVTIX6xIFRaZOm+FhcD12kqdj8mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:fb:18:3d:0e:4a:67:43:7b:17:c5:bf:d4:dd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f62a847a4edff99571a32e94edff0525b03b66
        Validity
            Not Before: Jun  7 10:00:49 2025 GMT
            Not After : Jun  8 10:00:49 2025 GMT
        Subject: CN=9168209c62d63ce6d0ebd9107486ca5a778490b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:75:13:39:48:c8:9e:c5:8d:f5:be:d6:1b:
                    7f:0b:ba:5e:3c:af:e7:11:ea:d2:b5:55:7d:bb:05:
                    32:86:80:21:bd:60:f4:10:6d:d0:e3:0a:c8:a4:ba:
                    c0:f9:fe:6f:f1:c0:50:15:5b:80:1d:96:7a:41:16:
                    44:94:69:ef:78:f4:e5:40:21:af:50:00:17:37:a5:
                    e5:f5:98:b3:3e:5a:de:a2:26:b4:b7:32:51:b3:bf:
                    bf:5a:f5:df:11:7c:d0:b3:38:07:69:99:59:79:1c:
                    75:ba:d6:fa:0c:82:e5:3e:e2:5b:18:ea:3e:7d:c8:
                    8b:14:c9:f2:04:fe:b8:3b:92:b3:57:ba:86:70:c9:
                    42:64:e7:fb:5f:13:47:71:db:73:9b:52:09:95:87:
                    ab:c9:0e:fb:da:19:c3:36:69:cf:df:14:13:7c:48:
                    fc:a9:23:84:fd:b8:e4:b0:96:2a:b9:a7:a1:79:90:
                    f4:4d:9a:1e:a7:76:42:d4:1f:fb:08:a9:1d:b4:af:
                    f8:38:77:2b:2c:e6:90:69:20:ad:74:78:f5:6b:cb:
                    c0:c1:8b:ae:70:ee:02:39:7b:b3:cd:a2:23:db:d6:
                    6b:72:72:c4:82:10:70:ab:86:8f:ca:e5:0a:1e:fa:
                    88:18:4d:ad:1b:d2:45:ca:27:40:a9:9a:b1:0c:c9:
                    40:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:20:9C:62:D6:3C:E6:D0:EB:D9:10:74:86:CA:5A:77:84:90:B9
            X509v3 Authority Key Identifier:
                keyid:62:F6:2A:84:7A:4E:DF:F9:95:71:A3:2E:94:ED:FF:05:25:B0:3B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYqhHpO3_mVcaMulO3_BSWwO2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8f4780-efaf-4e06-a1fa-2550e4b0fbb2/1/YvYqhHpO3_mVcaMulO3_BSWwO2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:3f:b3:60:93:96:5d:47:5e:dd:3d:7e:98:fd:f8:fa:3c:
         ea:9d:b3:7a:9b:23:7a:81:a3:10:09:f7:c6:3b:ed:d2:07:22:
         cd:17:bb:53:58:d5:3b:b6:63:ad:3a:46:e8:e4:3d:cd:e4:6d:
         80:93:b9:96:a5:53:05:15:19:bd:fc:da:c7:76:8d:4e:96:a4:
         c9:38:16:8e:77:97:2c:f1:85:b7:84:f6:f7:ce:15:72:02:63:
         d4:46:eb:28:36:49:d5:99:9e:95:a5:88:56:4e:fe:d4:79:47:
         fa:aa:0e:c7:b6:dc:7f:c6:3e:54:fe:f8:91:aa:0c:76:00:26:
         e9:8b:3c:4d:03:58:ea:4d:1d:71:e6:10:7e:7d:a1:18:0d:bd:
         24:73:1c:6d:df:fc:75:60:5e:c6:65:2b:f1:c2:ce:95:52:3a:
         12:54:a6:85:02:ae:9b:9d:6b:80:6e:16:27:4f:50:54:8c:63:
         66:b5:9e:40:fe:ca:7d:9d:e9:02:2c:e7:fe:b5:9f:f2:91:4f:
         41:d3:77:34:47:09:5e:da:81:ba:29:f3:98:6d:f7:17:f8:d1:
         b6:f6:ec:3f:d4:88:c4:b1:36:0f:7d:1b:70:9d:41:1b:f9:2e:
         10:c3:8e:a5:a0:e6:7d:2d:d4:91:b2:4a:16:9a:c2:a4:c3:14:
         a8:c6:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:07:27 2025 by rpki-client