Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
File:                     YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft (raw, json)
Hash identifier:          ypjZ76TH+5bW/scjqqPcVaoYykBX/Q3EVSna2leWoT0=
Subject key identifier:   C1:BE:1C:23:12:61:5F:70:67:11:FF:3B:EF:D2:CC:E1:F2:03:F8:98
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Certificate issuer:       /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial:       019754902F42CE2E11B617A2923CD5EEC879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
Manifest number:          15A9
Signing time:             Mon 09 Jun 2025 12:00:24 +0000
Manifest this update:     Mon 09 Jun 2025 12:00:24 +0000
Manifest next update:     Tue 10 Jun 2025 12:00:24 +0000
Files and hashes:         1: YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl (hash: 7V3QxA5iEtF+pdaqMo0jHX4vbVrDOF9UNLEWCWLEmbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:90:2f:42:ce:2e:11:b6:17:a2:92:3c:d5:ee:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
        Validity
            Not Before: Jun  9 12:00:24 2025 GMT
            Not After : Jun 10 12:00:24 2025 GMT
        Subject: CN=c1be1c2312615f706711ff3befd2cce1f203f898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:6f:f3:eb:ad:d4:59:58:a9:6c:62:6b:99:
                    95:c8:2b:38:07:b0:a0:76:6b:da:4f:9f:3d:c9:d8:
                    bb:24:65:d0:71:e7:76:11:b3:7f:97:6f:52:b9:08:
                    6e:74:4d:dc:ee:92:ec:39:30:28:fa:f1:bf:81:17:
                    16:c5:35:97:2e:39:98:05:86:37:ed:25:b7:0b:c2:
                    e4:9b:74:6a:b0:a5:3e:be:45:a5:a5:dd:a6:f6:53:
                    2e:21:41:14:d1:2b:e0:f3:3e:83:35:c2:93:b1:ed:
                    1e:01:09:36:a3:20:4b:74:3d:7d:b2:81:8b:0e:0f:
                    25:39:d1:5f:90:54:14:c0:d6:8c:09:36:40:80:0f:
                    9a:b6:1c:cf:17:f7:f5:4d:fb:bf:fd:5c:94:ff:32:
                    6d:94:23:cd:1f:0f:0e:9d:64:c2:0a:8b:fe:da:34:
                    4d:40:e5:ec:fd:86:50:2c:d8:95:97:9f:c3:a2:f8:
                    d8:6d:e5:73:3b:ee:e2:10:87:30:af:e0:87:7b:02:
                    9e:2b:66:78:88:a3:36:4b:82:a7:82:07:1d:e5:ce:
                    9c:21:9a:f5:b3:5d:28:09:ed:d5:c4:29:73:fc:bd:
                    3e:71:84:10:d1:93:c5:f3:3c:2e:4e:63:bf:34:69:
                    70:99:a8:70:b8:fd:0b:d5:cb:3a:9b:f8:b6:1f:be:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:1C:23:12:61:5F:70:67:11:FF:3B:EF:D2:CC:E1:F2:03:F8:98
            X509v3 Authority Key Identifier:
                keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:96:ea:cc:cb:33:e8:35:ce:b0:e9:43:33:ec:70:95:76:4b:
         ac:a9:ae:30:7f:af:cf:1a:34:f1:4c:48:88:e1:fd:59:6f:07:
         82:41:0d:f9:14:48:36:7c:06:a2:27:d7:b8:a8:cd:19:59:25:
         94:e7:93:8c:8a:24:86:d7:42:31:d0:8b:66:19:37:40:bb:fc:
         1a:fb:81:1f:6c:2a:f1:e1:05:6d:43:ad:16:17:36:3d:2a:43:
         d7:3c:b5:51:c7:48:45:66:3a:f6:98:7a:45:d5:f9:82:22:c3:
         38:c0:a8:5a:1f:68:68:15:08:71:55:6a:da:bb:45:db:01:48:
         e5:81:22:e1:cb:b8:55:df:dc:7d:ca:56:9c:1b:92:b7:70:40:
         ef:d3:f3:1c:66:5b:0c:da:7b:4a:cd:94:1e:26:5d:b2:ec:2d:
         24:e0:55:3c:0c:fb:59:c8:06:5b:42:c6:35:64:78:0f:26:a1:
         26:6b:4c:74:92:28:32:e2:d6:b5:88:da:6a:c5:75:5b:6c:35:
         c5:23:59:ea:a5:e6:54:95:8c:b9:b4:af:13:99:70:f1:42:28:
         0d:3a:9b:9f:34:e7:23:44:62:85:44:d4:b2:9b:41:55:eb:c1:
         5b:6a:c3:49:e5:96:05:08:42:f5:36:09:eb:e2:0f:56:92:ed:
         6e:6b:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:40 2025 by rpki-client