Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          +jUTrkkG8tcSWcUV0knB/Kz5kIYEInKqB4V2SFqMuE8=
Subject key identifier:   A6:FA:B5:26:22:A8:E1:31:46:A3:35:BD:2D:96:3D:5F:79:26:F4:61
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       01974F6A62268A516A01CFC0C1A895D63B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          1142
Signing time:             Sun 08 Jun 2025 12:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 12:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 12:01:01 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: g9t3EKQJTrI/WtLk3sr69AnFz9RSm5n0bl+CXbMh8YQ=)
                          2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:6a:62:26:8a:51:6a:01:cf:c0:c1:a8:95:d6:3b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Jun  8 12:01:01 2025 GMT
            Not After : Jun  9 12:01:01 2025 GMT
        Subject: CN=a6fab52622a8e13146a335bd2d963d5f7926f461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:d0:6f:e4:37:6d:11:90:2a:55:60:b0:97:
                    6b:4c:0c:dc:47:6b:a8:3a:b7:67:78:c1:97:7e:5a:
                    d1:47:1c:73:f2:0d:68:d2:a8:c5:b1:ea:f4:dc:fb:
                    cb:bd:cb:91:13:d4:34:9a:ef:84:fa:19:a2:67:7a:
                    e7:78:b1:7d:e1:63:a5:1b:3a:7d:72:7c:7a:28:fc:
                    f5:e8:f4:21:27:88:62:17:94:c1:ab:74:23:f3:7a:
                    1a:f0:b6:d3:10:4a:65:b3:9c:f7:7d:83:89:45:c7:
                    f5:60:91:d3:ae:6a:99:48:af:8f:0c:34:74:b4:cc:
                    97:d2:27:cb:d6:0e:3f:b4:09:e3:b8:ba:8b:16:ee:
                    65:35:b6:e5:0b:12:1c:a2:cc:8f:32:a8:68:ee:dd:
                    df:e9:3f:e2:b4:b9:80:1e:62:46:07:11:8d:ed:91:
                    73:1a:63:d5:a3:3b:51:66:68:0f:e5:30:ff:21:fd:
                    79:6b:9f:61:58:7b:80:2d:00:3b:77:86:fd:ff:8a:
                    63:7c:34:78:0d:db:5b:27:15:59:97:ff:f0:95:bd:
                    b2:2a:a8:0c:41:ca:dc:e0:5a:c3:c5:fb:50:ae:3e:
                    73:aa:3b:97:11:81:54:83:c4:78:e1:5f:d6:09:37:
                    83:a1:60:41:ca:fe:cb:2f:55:5a:dc:f0:65:2b:69:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:B5:26:22:A8:E1:31:46:A3:35:BD:2D:96:3D:5F:79:26:F4:61
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d6:62:e0:8f:7e:6c:27:2a:c3:84:84:19:d9:a7:4d:76:88:
         df:c4:62:8b:30:94:df:ab:05:f0:b8:ae:04:8c:8b:56:47:38:
         87:9e:91:88:d0:99:82:c3:02:d5:db:a3:9a:8b:ae:3b:96:b5:
         eb:c3:c8:d9:f8:0e:ab:5c:a2:bf:fc:dc:b8:06:94:c3:2b:14:
         48:42:29:30:65:3d:ac:11:08:0f:1e:fb:6e:f5:18:0e:e0:6b:
         78:05:1b:a5:46:f0:85:be:77:e8:ba:fd:c7:9a:04:d5:cd:9f:
         30:14:7d:04:98:27:f9:8a:b6:a9:f8:b4:98:67:52:71:6d:2f:
         1c:25:ed:f9:b8:62:58:f2:ed:ee:1a:0a:ef:33:45:4b:38:bb:
         d0:8a:b6:03:0f:4c:de:54:c6:9b:d0:d4:ca:b2:77:8a:e3:f9:
         df:20:59:a9:02:96:27:7e:18:d2:c7:a3:ce:94:79:b8:a0:e4:
         4a:c9:6a:c6:68:0f:0c:04:ee:60:64:a3:47:5d:f2:7f:0f:b5:
         1e:b7:5e:6f:7c:5b:3f:d1:59:77:ac:03:7d:77:18:84:38:60:
         f1:02:55:f6:b5:6d:71:97:b8:9b:c5:29:b6:e7:a2:cd:62:89:
         c2:96:a3:bb:13:34:f2:a3:35:ac:56:59:17:7b:c5:98:c3:67:
         49:a4:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:15:58 2025 by rpki-client