Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
File:                     YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json)
Hash identifier:          su2NmCFwHDzabTvdpICGg2d/kiiQooZQAyUFg+EmN4g=
Subject key identifier:   D5:98:04:70:C9:E9:24:EF:7D:CA:E9:26:B3:A8:74:37:49:70:CF:9E
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Certificate issuer:       /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial:       0197481E334432BBF61505FBF05CF40ED220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
Manifest number:          075F
Signing time:             Sat 07 Jun 2025 02:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:28 +0000
Files and hashes:         1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=)
                          2: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=)
                          3: OXzsoQWcfSLHj04LygHORaYth3Y.roa (hash: gP/eQqQ3pnpzbZZ+ZP/h1YGN6dV6ixwkRO3nX2q99p0=)
                          4: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: cQn9Rsykm8McjO4UE1mX1XcNZjOoEyZGxx9L1HV38ck=)
                          5: cpBh0w2t5SUeTveHMXo0e45wl_g.roa (hash: wnpUNv6ppC8UNUrj4/3VOaysZ1B8H6QoFf3xDmtiXxw=)
                          6: nP6Wp7rqjDbaj9VXPjopbJmmZLQ.roa (hash: EDsEYJXVC7X/AF/ZHxiwn2CZKU1Xg1iI8gyvla1QqdM=)
                          7: pGCa8ewPnGrDN42G2YmJiI8CNaM.roa (hash: VHyxjE8BSrobaXn9OLbg6V/jTMp++uPyOrdjWlu+LjI=)
                          8: prBGAJfo6jykezuLUpZ1BEDdn5A.roa (hash: STwdoXQqtV0U9DHkB0uJmQZyaRCvXoZ221e5pNUAHBY=)
                          9: q4jc-vdUn_SPRyBOeT7Y79tQ1cg.roa (hash: kIFdgvUrLHpfbT4mIlIRj4G2juCJ5b18uC5u4Dm0X60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:33:44:32:bb:f6:15:05:fb:f0:5c:f4:0e:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
        Validity
            Not Before: Jun  7 02:00:28 2025 GMT
            Not After : Jun  8 02:00:28 2025 GMT
        Subject: CN=d5980470c9e924ef7dcae926b3a874374970cf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:d5:8b:2f:84:8d:fa:51:2f:ca:01:40:e5:
                    af:8e:be:21:86:93:9e:d1:cb:5b:db:1f:37:73:3b:
                    c7:1f:09:2e:3c:c3:75:13:59:46:38:d4:e8:e0:48:
                    f9:57:85:12:d9:3e:e8:98:80:c7:24:23:61:4b:16:
                    66:c5:d2:41:2a:43:2f:e4:16:4e:3d:6c:76:4a:f3:
                    0d:9b:34:a7:ed:14:e2:e9:79:24:ee:12:87:37:9a:
                    2d:7d:15:d7:5a:98:58:82:2f:70:aa:65:13:dd:26:
                    cf:45:df:cb:27:d6:4b:71:81:13:9d:e4:2d:58:bf:
                    77:f2:e0:76:f0:c6:0e:93:35:2b:29:8a:95:15:ff:
                    ce:9a:e1:8b:eb:48:57:8c:cb:21:25:af:af:87:a1:
                    91:d3:45:e2:86:7d:8c:32:63:bd:9a:df:ec:e8:d6:
                    52:a4:81:b7:7f:d5:4c:bb:0a:58:e8:6a:d4:a3:95:
                    23:e2:a0:9c:e0:24:fc:53:e0:03:42:2e:fe:75:45:
                    38:d4:78:56:98:f8:78:7e:09:de:e2:81:f9:b6:2e:
                    8a:63:eb:c5:60:14:ae:eb:71:34:16:98:b7:e7:fb:
                    4b:b3:db:fe:fc:14:5f:fd:a1:59:85:89:db:0a:95:
                    31:03:a7:4b:9e:6d:3a:8f:95:42:28:55:44:2f:94:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:98:04:70:C9:E9:24:EF:7D:CA:E9:26:B3:A8:74:37:49:70:CF:9E
            X509v3 Authority Key Identifier:
                keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:7e:6b:28:d5:d2:02:55:85:2a:d7:22:5d:7a:63:4f:af:8a:
         00:da:c7:19:d7:1d:79:d5:a1:81:67:36:44:29:13:1e:07:b7:
         3b:3a:46:ac:ca:a8:91:2a:b7:6c:6a:50:5c:ed:82:af:78:1f:
         a5:24:b8:00:4e:68:fc:75:9f:79:0f:f4:45:c9:25:18:0e:84:
         4b:33:d3:66:d4:08:e2:12:b9:3a:7f:83:56:81:53:d4:0d:7d:
         92:72:6d:85:e7:1b:29:38:2c:e7:ad:ed:26:92:ad:e4:d6:38:
         16:b4:2e:17:53:90:a1:73:c6:51:1f:a3:26:a3:69:85:e0:8d:
         f8:98:db:9b:7a:8c:cf:98:96:a0:b2:e7:d5:0b:40:d3:2f:c0:
         c6:f1:d6:e5:22:a4:41:67:5d:b7:7f:d3:6d:10:83:05:ee:17:
         91:a8:6f:ca:c9:fb:e5:98:55:8b:9b:34:6e:2d:28:20:b0:69:
         c7:f3:db:f5:1a:48:82:48:b9:4e:da:91:46:e0:1b:c4:93:a0:
         35:e8:fd:40:4b:bd:7f:65:67:b4:e4:d9:36:fa:af:0c:f6:fd:
         c3:52:be:30:78:7f:95:53:0b:a0:78:1f:cc:ca:10:11:d2:00:
         ed:45:89:19:b7:90:1f:95:59:a9:03:19:d6:a1:31:3c:f0:35:
         51:86:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:56 2025 by rpki-client