Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          2we3lOvHz82FVGJFzyE2lHvcY5F8bHCFUUSUUI2OpWg=
Subject key identifier:   D9:19:15:4C:E3:44:CD:E3:20:6E:D2:CE:40:90:3F:D2:0A:CB:A8:B2
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       019739F4FEEAB397D6EFC359AD868FFC570D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          1576
Signing time:             Wed 04 Jun 2025 08:00:46 +0000
Manifest this update:     Wed 04 Jun 2025 08:00:46 +0000
Manifest next update:     Thu 05 Jun 2025 08:00:46 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: 55YkGd86MwMZiyzriXG3r2VBhUBwWrJ5JeSZHzXJ5Ag=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:f4:fe:ea:b3:97:d6:ef:c3:59:ad:86:8f:fc:57:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Jun  4 08:00:46 2025 GMT
            Not After : Jun  5 08:00:46 2025 GMT
        Subject: CN=d919154ce344cde3206ed2ce40903fd20acba8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:31:48:a6:8e:c0:18:d8:1f:dd:e6:f4:77:
                    06:4b:64:18:a4:67:04:86:fa:e7:31:06:09:ad:a7:
                    3f:7c:d6:7f:61:b1:8b:1e:60:42:0a:49:8a:44:b3:
                    ce:80:90:a3:52:a0:a2:43:24:ed:23:89:cd:10:4c:
                    aa:b8:82:ca:6d:47:0f:4a:32:94:34:17:26:bd:13:
                    65:97:fa:d1:b2:ce:99:e6:78:14:cf:12:93:b4:ff:
                    d2:17:2c:f1:d2:32:f0:9a:30:56:c7:73:01:17:aa:
                    c5:34:bf:92:e9:8e:9c:2f:e4:90:8a:6b:dc:b2:a0:
                    07:46:ca:af:e1:d7:94:2b:58:56:42:c5:cf:f5:61:
                    81:55:56:02:05:75:5d:85:e2:cc:53:13:08:ea:9a:
                    cf:b6:74:b7:bc:fe:5e:27:70:ca:49:35:36:01:89:
                    25:24:c0:10:d8:3b:88:73:ff:82:3f:0b:d2:5a:7e:
                    6c:da:6b:b7:bf:90:15:0f:94:96:04:93:78:c9:ab:
                    83:1c:ad:ab:e5:3d:8b:42:28:22:2b:2c:f1:33:ea:
                    e9:aa:eb:97:b0:8a:b0:bb:e6:9f:c4:36:b9:89:2f:
                    e2:b4:66:00:83:1a:1b:c9:ae:7a:fc:89:c7:5d:9d:
                    66:50:9c:41:26:ef:75:38:4c:a1:b3:19:52:a5:cc:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:19:15:4C:E3:44:CD:E3:20:6E:D2:CE:40:90:3F:D2:0A:CB:A8:B2
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:eb:7f:c8:17:e8:b9:8e:3c:f1:02:38:5e:e7:89:33:0e:
         17:93:fe:55:bc:1c:cd:e0:52:7b:ac:dd:96:02:e7:00:a1:e2:
         10:79:2e:82:bb:47:a0:b4:5d:cc:93:01:38:58:aa:22:a9:da:
         31:37:9b:8d:3c:60:72:ad:61:61:dd:6b:d0:b0:07:17:22:a4:
         07:bc:06:65:b5:23:f3:bf:2d:0e:d4:3d:5a:63:d5:85:1e:77:
         e3:62:b9:11:4e:1c:6d:6e:7f:74:4c:46:31:51:03:2b:7a:39:
         c2:8a:c7:e1:ba:52:85:8e:bf:4a:13:bf:5e:eb:f4:23:f5:2f:
         a1:02:79:d8:8e:34:ba:ca:02:cc:b9:8b:a0:6f:bd:86:d3:68:
         9f:cd:fe:10:6a:65:ab:b1:27:0e:73:46:37:91:20:76:d0:3d:
         ba:67:3f:23:5c:fe:bf:f4:1b:34:e4:e0:2f:ef:b6:8a:3e:e2:
         9e:9b:15:03:05:05:46:e0:52:a2:f9:2a:bc:e8:98:99:02:c3:
         40:53:ea:aa:37:a2:2b:c8:34:ee:b6:b8:d3:bd:eb:2e:6c:fc:
         a8:23:6d:7d:67:cd:ba:84:36:a0:4f:f5:78:9a:4b:82:f3:3b:
         0a:f2:52:07:6d:ca:3c:66:aa:1a:e3:b9:35:ae:fb:d7:2a:b2:
         00:94:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:04:08 2025 by rpki-client