Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
File:                     yikNsvcpBfDbYmsAW6zwiHjRe6w.mft (raw, json)
Hash identifier:          dhBcw7Pzpm2II9Qy2UyGcBpYPMfQZY9WhrfeE9SOOZE=
Subject key identifier:   CD:6E:3D:E8:C1:1D:C9:58:C5:2B:91:72:FE:AB:52:3D:05:78:93:01
Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC
Certificate issuer:       /CN=ca290db2f72905f0db626b005bacf08878d17bac
Certificate serial:       01974B569941ABF72849AACF1E99D471B2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
Manifest number:          09A6
Signing time:             Sat 07 Jun 2025 17:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:55 +0000
Files and hashes:         1: 9ioUlNkUNYBcxyTxkX3rgt5A0s0.roa (hash: FAkZUvlkFTeURhyGPk/Cqy2vo8UntR2/HehcNI9EJVU=)
                          2: Fw_kxU9y2ZFFUFhTyjj3cOM8HE0.roa (hash: RbilBDizHS14qZ4Da7c1uCTbplJrxj3lujK+7Ie1xww=)
                          3: OmRK258WRmdVFaT1b4UKAJEmXF8.roa (hash: S9zpMDpc5tR1fodrfsOibu5FLjUO5h2bsiNgqTRPaIQ=)
                          4: _6UZkqieR9kIkKZwwfKfkm35fd4.roa (hash: TAVIhSh9eMt1b6339NxSWJ46JPMbHN7C8v9n3qx3ibk=)
                          5: gqWeYouP3tCgtjbkj-l_gQg8hIo.roa (hash: /JDKYsMSdFrnBptTFdWQqSfzinHaa7LMqQq1Q4agYW8=)
                          6: iqYLpAFtuo6gr-j-Ly-Vnr8R2MU.roa (hash: qX/Ce2Cu2rGWIQEWtxm8FeM0QBiPxiljZdApDi//miE=)
                          7: yikNsvcpBfDbYmsAW6zwiHjRe6w.crl (hash: wmfbNNoDxVdV6QPkwvjTP/MrriRN4EZIVLezltTMvs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:99:41:ab:f7:28:49:aa:cf:1e:99:d4:71:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac
        Validity
            Not Before: Jun  7 17:00:55 2025 GMT
            Not After : Jun  8 17:00:55 2025 GMT
        Subject: CN=cd6e3de8c11dc958c52b9172feab523d05789301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:28:b5:0e:88:c6:33:2a:9f:c0:22:5a:80:
                    f8:96:79:b9:d0:f4:e2:43:15:4f:e0:4e:30:69:4a:
                    05:14:78:60:eb:b5:a8:21:0a:d0:f6:f5:ff:5c:4f:
                    28:9f:bd:8c:d1:99:7e:f4:17:39:6a:c3:7f:43:73:
                    94:e6:9f:a2:7f:f7:bf:23:50:48:22:f4:19:c0:cd:
                    91:01:7f:28:7b:7c:b1:70:5b:1d:56:1b:7d:82:03:
                    47:6f:25:4a:c1:b0:d4:a4:2e:88:8b:f1:00:ff:b8:
                    36:f6:31:cd:ef:84:8a:76:a7:a6:ae:dd:da:b6:64:
                    77:3b:2d:55:16:d1:e4:79:32:ab:7a:a5:9f:75:05:
                    a6:e5:07:29:1c:b8:d4:72:9b:c8:61:81:42:1c:e1:
                    cf:0f:cf:b8:e7:3f:f2:5c:76:a9:ee:8c:1b:c1:ed:
                    54:96:d5:49:47:0e:63:31:f7:63:db:96:b8:e3:c8:
                    40:f8:b3:fe:6a:e8:32:31:cb:9e:39:dd:eb:50:ed:
                    06:eb:8d:da:04:75:a4:9f:0d:b7:e4:f6:dc:7a:43:
                    bc:2d:d6:25:9d:b6:a6:1d:c2:d6:a4:9c:97:53:69:
                    af:19:7a:32:28:4c:c5:c4:53:d7:02:b1:0a:18:c5:
                    03:78:7f:30:6e:0e:44:2a:1d:61:71:d9:25:8e:f4:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:3D:E8:C1:1D:C9:58:C5:2B:91:72:FE:AB:52:3D:05:78:93:01
            X509v3 Authority Key Identifier:
                keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:77:7a:41:b9:e7:7c:1e:a6:83:ee:8a:55:4a:4c:82:4f:4c:
         fc:22:7e:6d:46:c1:6d:89:c7:14:46:f8:7d:10:b9:90:ae:33:
         c4:8d:5d:4f:b5:9d:e1:05:0f:71:3e:96:f4:f9:62:59:f5:2d:
         eb:23:e7:37:c5:91:67:b0:af:fc:dd:94:f3:4d:e8:2b:91:88:
         44:11:4b:10:01:b5:70:79:f4:b3:b6:7a:5c:1b:27:62:f9:15:
         90:c0:7c:33:9f:ea:ff:3d:41:12:cf:6c:7e:29:09:97:ca:4c:
         a4:88:7c:02:5a:9e:24:a0:1d:d4:29:87:d5:c7:f0:c2:a9:c8:
         98:48:f2:37:63:50:2e:ff:a7:a9:db:5f:94:74:c4:4d:87:ef:
         01:35:ec:ae:d6:76:74:7d:94:63:a8:40:98:4b:14:61:89:db:
         3c:7b:2f:13:5d:44:f0:8d:d3:ec:54:d8:bd:00:14:da:11:a0:
         f3:09:7e:0d:18:32:64:5d:fc:d5:3d:73:96:3c:11:0d:28:18:
         94:ea:d5:3a:5f:ee:ae:78:09:2c:d6:ca:f7:50:88:80:e2:4d:
         e3:7c:43:c9:ec:91:b6:bd:b1:4f:0f:37:f8:d5:16:5d:e5:70:
         10:c6:c3:34:7f:5b:a0:86:3a:6b:7b:84:a6:45:fc:05:2f:fd:
         b5:b0:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:13 2025 by rpki-client