Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          2WcOuAwBac1jVjktgkwm2A2Nzr99iXnEYqfAf8beWVU=
Subject key identifier:   9E:E7:57:06:B3:CA:49:54:B5:BF:02:96:50:F5:AF:1A:6E:1A:59:85
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019748F9D17973D82DA72F851E536816215B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          09BB
Signing time:             Sat 07 Jun 2025 06:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:20 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: /oIKcZpgnujaSCslzKZtaVaNymfR0dVzDRejiBGWuuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:d1:79:73:d8:2d:a7:2f:85:1e:53:68:16:21:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Jun  7 06:00:20 2025 GMT
            Not After : Jun  8 06:00:20 2025 GMT
        Subject: CN=9ee75706b3ca4954b5bf029650f5af1a6e1a5985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:0d:b4:63:37:c4:6c:ee:77:1f:01:a8:f9:
                    b7:f4:5c:51:b0:ed:ff:33:e9:10:e2:9c:f3:d6:e3:
                    8e:f2:e5:63:e1:c4:b8:b8:66:12:2c:b6:5c:af:7f:
                    9b:88:e8:5d:f6:24:41:3b:8c:aa:90:e4:93:39:de:
                    15:cb:2e:ce:32:f8:d2:8b:ba:f8:64:c5:e7:61:e2:
                    09:b2:1f:cc:20:c1:88:db:ff:cf:a1:f3:e6:b9:da:
                    5b:5a:ef:c2:a2:a5:1a:bb:fb:e4:6c:dd:59:04:e9:
                    ab:9f:b8:cd:a0:6b:8a:bd:78:1c:8d:f1:5e:14:94:
                    06:5b:5f:07:75:53:56:ef:54:9e:34:f2:01:1f:bd:
                    70:6b:cc:0e:83:2c:b1:ee:5e:a0:1a:a5:7d:da:d9:
                    04:2c:8c:09:0e:2e:56:4d:74:d8:55:76:09:6d:28:
                    ea:94:e5:8e:93:e7:a1:c5:6b:48:62:77:bc:c4:4d:
                    45:7f:80:95:46:a7:43:f1:14:93:c7:80:9f:01:cb:
                    0c:32:a6:e5:03:b6:25:64:14:b8:d7:ba:1c:b9:d5:
                    8c:cb:9d:b4:ad:4c:68:ad:94:06:b3:9a:a6:2d:fe:
                    52:07:2d:70:72:37:6f:d5:77:01:de:94:5c:4c:3c:
                    cb:e1:7b:d9:02:72:96:5f:bd:a9:82:38:99:6a:31:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:57:06:B3:CA:49:54:B5:BF:02:96:50:F5:AF:1A:6E:1A:59:85
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:35:56:61:b3:2c:54:e7:8d:6d:74:6a:8e:fa:70:2c:33:99:
         14:da:95:b2:e4:ad:9a:83:17:05:b6:5d:49:76:79:33:95:f0:
         71:f0:22:77:9a:af:08:38:0c:fb:b0:d2:b3:d5:ea:72:b3:e2:
         0a:5d:7a:29:c7:bb:07:07:ec:da:1d:d4:30:8d:00:90:63:21:
         ca:e3:91:40:a1:fc:51:88:d7:dd:b9:ab:57:15:c3:b9:88:74:
         92:36:49:40:30:99:26:09:25:84:3d:10:48:ec:b5:0f:24:37:
         13:47:cf:e9:4d:bf:fa:8d:20:33:b8:26:f1:0a:02:87:a3:12:
         bc:54:66:13:53:07:23:e4:d7:39:af:2d:f2:39:24:03:c0:e7:
         c7:2b:ac:6f:2e:00:7c:1e:84:9b:27:e8:ea:f2:8b:e6:59:98:
         87:fe:71:f7:1b:25:93:11:1c:67:38:da:05:d1:22:45:1f:6b:
         a5:81:ca:f2:13:e2:f4:20:3d:06:c0:b8:8c:bf:d5:24:41:38:
         d6:1e:17:d0:f3:a6:e2:79:83:08:c4:0e:9a:1b:68:87:bc:96:
         4e:1d:8b:a2:74:8f:fa:c8:14:af:52:8a:4d:9a:14:9f:13:8f:
         ca:a1:8f:b3:6d:63:98:af:d1:42:6f:2e:f2:99:30:5e:cb:18:
         c2:d3:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:43:00 2025 by rpki-client