Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File:                     yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier:          AccvEAxxOPt9pD9y+1J115+xJZXozpTFT7V13bV+Pg0=
Subject key identifier:   ED:96:EF:83:A7:55:56:6C:38:02:BA:E4:1B:A8:DB:CC:12:C1:97:7F
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer:       /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial:       01975C1313FC4269BCEE1C964EAA05471D82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number:          032C
Signing time:             Tue 10 Jun 2025 23:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 23:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 23:00:43 +0000
Files and hashes:         1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
                          2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: JNFwEpNVdeO8fUrB0kM9DlMU7pBKUXYSMeSJG/mbJhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:13:13:fc:42:69:bc:ee:1c:96:4e:aa:05:47:1d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
        Validity
            Not Before: Jun 10 23:00:43 2025 GMT
            Not After : Jun 11 23:00:43 2025 GMT
        Subject: CN=ed96ef83a755566c3802bae41ba8dbcc12c1977f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:b5:40:19:67:0d:9e:ff:6c:ed:16:26:43:
                    b7:73:ad:4d:21:2c:e5:d4:3f:0b:ce:0e:3c:86:b7:
                    f7:bf:bc:d2:52:1b:bc:d0:24:85:66:de:cf:e7:aa:
                    c1:df:52:b8:da:07:68:7c:4f:ba:ae:f7:dc:9b:f3:
                    50:82:20:7c:bd:e1:0c:32:11:12:0b:10:6a:72:1b:
                    9e:1a:63:3e:b1:25:95:0b:c6:ff:36:64:13:d2:11:
                    71:8f:a8:7a:d3:08:ae:d3:2b:a8:ef:6a:e3:be:b4:
                    7a:51:88:3d:01:b8:d7:30:ee:ae:2c:a4:04:41:c5:
                    6d:f6:18:a7:be:6e:86:0f:85:5e:e3:83:1e:83:db:
                    a3:d8:d7:f3:c6:55:51:c5:9e:47:e6:7f:eb:6b:fa:
                    6a:3a:5a:d6:c4:44:98:62:11:2e:1e:2e:14:88:da:
                    cc:07:46:dd:77:25:81:b8:8a:0f:9f:a2:7f:2b:71:
                    4f:1d:74:23:e7:43:10:e9:07:84:e7:26:92:b9:88:
                    5d:0c:c4:65:e0:99:48:bf:2e:a4:6d:91:da:88:5b:
                    5d:44:c1:f2:fa:e8:98:07:ac:07:a6:9b:cb:d8:84:
                    4e:c2:f9:1c:e3:c6:23:90:3b:15:bd:44:ef:90:ae:
                    f7:a8:c8:48:7d:a8:af:9c:98:33:4e:09:59:82:7a:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:96:EF:83:A7:55:56:6C:38:02:BA:E4:1B:A8:DB:CC:12:C1:97:7F
            X509v3 Authority Key Identifier:
                keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:18:ea:77:ec:9e:25:50:60:ae:2a:1b:59:3a:54:41:c9:7f:
         b1:06:30:97:ec:27:8a:5f:d9:24:10:9b:45:cd:06:ff:3e:fb:
         05:9a:ca:33:0b:96:7d:8e:4a:16:44:c2:6d:12:7b:37:7d:7a:
         46:23:fe:c6:da:8d:db:b8:c0:f2:a1:f5:a2:c3:15:68:a2:b2:
         54:da:f7:58:c7:c0:64:da:90:fd:ad:f3:3d:06:3b:8b:85:cb:
         77:f1:59:dc:27:11:5a:7f:7c:5c:41:8c:cc:70:d2:8c:e0:a5:
         3d:ed:88:d3:df:69:ec:8e:eb:61:46:a1:31:36:0a:44:aa:95:
         13:23:9b:c1:b2:e2:7e:3a:91:a8:ca:07:42:47:c0:b1:bc:97:
         06:32:3c:a3:a2:b3:27:3f:63:44:08:54:0e:16:1f:9a:47:15:
         f1:65:bf:4d:7e:57:92:35:10:82:7c:3e:f5:4e:5f:80:b4:aa:
         2a:cc:d6:30:4d:08:e8:93:7f:6c:15:32:90:8c:7b:32:dc:61:
         2d:86:0a:3a:54:e1:d2:ab:28:76:ee:0a:a0:47:5b:9b:a7:d3:
         e9:35:67:46:3a:52:4a:94:9e:2b:da:be:90:fa:0b:4e:f6:11:
         b0:d1:b7:c7:30:8f:cd:4f:91:67:7b:03:22:14:6b:39:da:f7:
         48:60:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:31:21 2025 by rpki-client