Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File:                     YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier:          Kc1aYpgTniLu2niy9wdYvR0yjtDoFZbp3Olp3QgRmQQ=
Subject key identifier:   2A:43:F5:8B:A3:FB:BB:68:56:3D:13:6E:30:5C:DB:6D:6A:C4:13:22
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer:       /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial:       01974C690707E8A0B6967C00E2F5EBA87BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number:          11DC
Signing time:             Sat 07 Jun 2025 22:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:40 +0000
Files and hashes:         1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
                          2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: tLdz5L0s58CYPlFhd0t4/ngrr/zeHmQdXPQn680N/FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:07:07:e8:a0:b6:96:7c:00:e2:f5:eb:a8:7b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
        Validity
            Not Before: Jun  7 22:00:40 2025 GMT
            Not After : Jun  8 22:00:40 2025 GMT
        Subject: CN=2a43f58ba3fbbb68563d136e305cdb6d6ac41322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:58:83:16:49:d8:aa:68:35:53:a4:d8:09:
                    81:9d:6d:e5:9b:8b:5f:b0:0d:53:0c:b6:55:95:62:
                    3e:f4:9c:6f:00:ff:bc:b5:dd:68:00:9b:e8:78:9a:
                    9f:d3:e4:06:26:ac:aa:ff:17:ef:f6:5d:8f:6e:ce:
                    a6:17:30:b2:aa:43:a1:14:6c:c2:3a:ab:22:0b:b5:
                    f9:b5:ef:b2:68:f2:f9:a3:e8:f8:ba:b6:96:3f:f4:
                    17:10:c0:35:55:24:44:8f:4a:97:e3:b3:dc:4b:22:
                    b5:d8:c0:74:ff:b6:d3:45:29:8a:f4:f1:cc:b0:49:
                    b0:e3:e8:0c:eb:e8:4a:f1:1e:83:b5:96:2e:71:48:
                    46:91:d8:40:75:0e:aa:f8:41:18:8a:37:bf:90:47:
                    40:55:39:4c:73:1d:0b:3c:16:1c:9a:05:9c:0d:5b:
                    54:dc:84:bb:c8:dc:ab:c8:93:5d:d7:b0:ec:31:3b:
                    05:2d:08:1e:da:be:83:cd:34:de:a3:35:fd:1f:5c:
                    19:b5:d3:29:fb:42:72:ea:e6:01:41:59:75:da:e5:
                    17:7a:e2:a3:35:97:88:af:09:51:d8:2c:af:83:72:
                    82:99:70:a0:51:b4:26:01:92:76:a4:71:01:36:7f:
                    2f:60:22:bc:ce:b2:f5:39:7e:6a:af:77:fe:de:99:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:F5:8B:A3:FB:BB:68:56:3D:13:6E:30:5C:DB:6D:6A:C4:13:22
            X509v3 Authority Key Identifier:
                keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:1c:5c:f2:f8:da:ff:fd:9e:ab:e2:68:4a:af:18:41:aa:
         50:78:4d:3c:40:b1:06:7c:3b:94:3b:31:ac:07:30:29:e2:12:
         7d:87:1b:87:e7:6e:f7:8e:a3:b0:80:72:79:33:7c:4c:c7:79:
         04:02:c3:7b:63:37:4a:a3:4a:a0:79:f8:e3:6e:c7:bd:76:b0:
         77:49:75:f6:d2:bd:f7:a4:7e:88:a3:f1:72:3f:a7:a5:02:aa:
         bc:e2:56:29:8c:da:7a:a4:7b:ca:d0:e0:9a:44:09:fd:29:1f:
         12:68:7e:d7:12:21:b7:23:9b:2b:af:df:c4:6e:77:fe:06:b7:
         32:7e:15:e5:10:30:d1:95:7d:d9:c2:8f:37:bf:38:a0:cb:79:
         0a:39:12:c8:71:2d:8a:ff:57:6a:d4:4a:dd:3b:5b:78:b3:8e:
         fa:3b:f9:d4:1c:62:58:b3:79:86:d5:ad:a8:f9:f0:ed:40:87:
         eb:a2:b2:5a:93:bf:05:0a:86:ac:d2:17:c1:4f:41:37:47:21:
         72:20:c0:13:dd:d4:3a:48:04:6f:9d:36:5d:ba:bf:7d:4e:52:
         7b:3e:ed:06:33:99:81:2a:6b:4b:67:58:6d:41:b5:88:1f:26:
         d4:86:84:b2:90:68:79:a9:22:47:c2:74:35:05:23:70:ce:e9:
         2a:fe:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:28 2025 by rpki-client