Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          V02kabwOl7l8U92VFt/a/yk68gA8bSsLAT3Q/46j+BQ=
Subject key identifier:   11:B4:2D:5A:9D:BA:3E:84:A2:D8:92:4F:82:E3:B1:6F:06:D0:48:F3
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       019636BFD8553EBA642B13AF5001E3F820E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          10C1
Signing time:             Tue 15 Apr 2025 00:01:04 +0000
Manifest this update:     Tue 15 Apr 2025 00:01:04 +0000
Manifest next update:     Wed 16 Apr 2025 00:01:04 +0000
Files and hashes:         1: 12AV02WzatVTC7uOxlQeaKEJtqA.roa (hash: 7hl8YaRyf0cdSgyKBQo2CnhX6la19soTodVA7PjTEdQ=)
                          2: 56aGLoH7Bse2LO-_92GKlUjhbBU.roa (hash: 9BM7a0N91eERqW7VUlPdX8P/hOguhSCnOBLInaqrNrM=)
                          3: YKI1QxSsRCvMI42z7gKMRoDEuho.roa (hash: WYNYodUvJC3YWBcxN+4I4LLLEMPhhJhkLJzrQ0VkxhI=)
                          4: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: FTEVF3XNrR2Hr7uI4tzK/GdoxFocAEH/6+sDqFSScWo=)
                          5: _s7rDdjPGkqITnjs4HXWtYEhylg.roa (hash: yutc5QjtO14cszaNAoscezE/PV3utOm8cKnd/h6llDE=)
                          6: pSukRsg6yv_sYe0co7sE6hrZh3c.roa (hash: OlYqoIOvdl7EmyHKtVzqNVI4kNzxjN4mpc7eyWrczUM=)
                          7: rAyW0TP-vGc73Omwbt5tXG5Tfr0.roa (hash: 5nh1erpOS3lLyg2wz81Za6vItHnPOnIJ07yWuIvXvjs=)
                          8: wA335v0tN6j8TOVCya6MJB0vGZE.roa (hash: Wv3IFbmlxvLR5yW5Px59rxWtiozQA3QTcuT4bqFgTbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:36:bf:d8:55:3e:ba:64:2b:13:af:50:01:e3:f8:20:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Apr 15 00:01:04 2025 GMT
            Not After : Apr 16 00:01:04 2025 GMT
        Subject: CN=11b42d5a9dba3e84a2d8924f82e3b16f06d048f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:1f:fb:55:45:df:f7:bf:af:6b:3a:9c:b8:
                    ac:9c:f3:1e:3c:4e:74:ce:fd:0a:f1:45:20:5d:35:
                    3a:ca:fb:ea:45:fb:58:e1:3f:d2:88:62:f7:1e:d6:
                    92:55:d5:52:da:04:ee:be:e9:4d:68:ab:0e:b8:f4:
                    85:93:61:e8:a0:80:74:7f:be:2c:40:0b:ad:80:df:
                    39:79:61:61:e8:d3:c3:ac:8c:2b:93:e9:35:3e:cb:
                    13:28:5a:06:9b:9a:02:f5:f9:80:10:43:74:69:4c:
                    24:51:35:7c:2b:c1:96:b8:3c:16:4d:2a:76:5b:79:
                    e6:7f:c8:5b:25:72:5e:13:a7:7a:d1:d2:5e:6d:e6:
                    bd:6f:8c:fb:98:e3:68:92:15:d7:94:bb:60:cd:05:
                    10:ab:8d:56:d4:a1:31:4a:7b:22:5c:ff:72:bc:94:
                    33:29:3c:6b:c6:bc:5c:ed:b3:b1:3a:6e:ed:98:b2:
                    e8:5e:56:e5:92:92:db:a8:cb:50:7a:69:a7:52:46:
                    c7:86:fb:72:2b:3a:3e:f1:ce:66:69:75:33:44:5c:
                    f4:b3:4e:88:09:82:b7:e0:ee:39:fd:c2:c1:e6:bc:
                    03:30:c5:3d:1b:dd:6b:61:44:d9:31:1b:55:21:ff:
                    20:5a:44:a8:ea:1a:3d:95:65:8b:04:5c:ad:a4:7b:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B4:2D:5A:9D:BA:3E:84:A2:D8:92:4F:82:E3:B1:6F:06:D0:48:F3
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:69:fa:84:f5:39:3e:79:cc:d4:d0:54:6c:9e:e3:2b:88:
         3d:27:01:2e:78:9b:ea:17:ca:c5:13:e6:2b:48:77:e1:a1:56:
         50:05:48:56:0b:4e:a5:7e:dc:56:5d:95:cd:9f:d0:c5:ca:1e:
         95:63:82:b1:58:e1:4f:90:2a:9f:36:bd:66:aa:92:fb:53:16:
         72:99:5f:d2:f5:85:eb:10:31:02:98:a7:be:00:91:ed:0a:85:
         aa:d2:e3:dc:28:33:e8:7e:8e:28:dd:49:57:36:88:ed:ba:54:
         91:28:41:97:1e:19:79:03:4a:86:29:aa:4f:39:f3:af:cb:28:
         15:ea:19:64:32:63:76:46:72:68:51:b7:0e:0a:fc:f4:a4:4f:
         40:e8:65:b2:d9:e1:6c:40:5e:89:98:f5:39:1c:b9:26:25:0e:
         f7:b2:1a:ec:6d:4f:83:dc:56:04:80:55:ee:60:66:e6:68:0a:
         73:bc:e3:aa:5e:7e:81:13:c0:d8:20:2f:dc:f4:8b:23:b8:08:
         be:a5:97:e1:c0:9a:51:1d:c4:44:cb:13:4e:9e:bb:28:36:2b:
         cf:d5:10:cf:0c:64:64:62:a8:a9:04:22:d6:e6:38:21:f7:e6:
         be:90:b2:03:6a:aa:13:7e:66:99:b9:f2:6d:7c:3d:84:2c:f0:
         21:43:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:01:52 2025 by rpki-client