Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
File:                     ytx04QgwQh1O7qmCRM_RtBGQN_8.mft (raw, json)
Hash identifier:          +DHz4tQFzX8qEq6rqQFF4zwQkq9Nz53ibMBtlmzfseE=
Subject key identifier:   33:47:CB:E0:3D:6A:86:A3:03:10:D0:70:98:EF:14:60:AF:E6:C1:E6
Authority key identifier: CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF
Certificate issuer:       /CN=cadc74e10830421d4eeea98244cfd1b4119037ff
Certificate serial:       01964AB3C16BC1C0FD8A92AEC4C05A18D165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 21:00:15 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:15 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:15 +0000
Files and hashes:         1: 2ba1m8Gy_1XOQ9HVKpmmzSbnedQ.roa (hash: nQyh0Ol7+Fw/xV4Vz5V2aR6KWFx7hjc+pCgRAL93L9k=)
                          2: ytx04QgwQh1O7qmCRM_RtBGQN_8.crl (hash: xo9W80gy/N+jQrUtYOr71Z62bcKENeKfTd9BunZ+R1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:c1:6b:c1:c0:fd:8a:92:ae:c4:c0:5a:18:d1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cadc74e10830421d4eeea98244cfd1b4119037ff
        Validity
            Not Before: Apr 18 21:00:15 2025 GMT
            Not After : Apr 19 21:00:15 2025 GMT
        Subject: CN=3347cbe03d6a86a30310d07098ef1460afe6c1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:57:12:c6:6c:61:35:bc:6f:3d:a5:cc:46:ec:
                    d4:28:51:45:d1:b1:79:34:31:8f:95:b7:13:22:8d:
                    73:c4:96:6a:a4:94:54:af:2b:4e:86:30:32:08:a0:
                    bd:9e:81:00:c3:1e:78:17:b1:5e:0d:ce:93:5e:1b:
                    0a:67:db:fb:0f:f0:8c:d5:b1:cf:93:e8:7f:70:b2:
                    96:2b:7d:e6:46:90:08:2c:f5:36:4e:ee:e2:b7:1a:
                    a0:ec:f6:6e:8b:7f:f1:c1:4b:53:1f:2d:95:da:44:
                    7d:2d:68:f0:d6:c6:98:40:b9:f4:09:63:ef:b9:3d:
                    9c:75:ba:fa:ec:7b:cf:a7:38:9c:26:78:2e:12:be:
                    55:3d:aa:0b:5b:87:70:57:b6:16:59:d6:76:e0:74:
                    fe:06:a3:72:70:08:20:c8:0e:4c:81:0c:6f:d4:41:
                    83:0f:7d:0c:55:eb:91:b5:72:6a:7a:50:39:86:0d:
                    43:f6:41:c0:45:b1:d3:ca:0c:b8:42:51:3b:f0:1e:
                    a6:69:0a:21:40:be:7c:a7:b0:2f:87:b1:8b:7d:6e:
                    1a:23:42:9f:44:6f:99:bd:3b:46:c2:2e:08:64:ca:
                    18:50:d5:4b:0f:57:72:55:a3:74:b4:17:1d:65:15:
                    b4:21:2b:01:b5:3e:e6:f1:af:8f:1f:24:b2:11:e8:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:CB:E0:3D:6A:86:A3:03:10:D0:70:98:EF:14:60:AF:E6:C1:E6
            X509v3 Authority Key Identifier:
                keyid:CA:DC:74:E1:08:30:42:1D:4E:EE:A9:82:44:CF:D1:B4:11:90:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytx04QgwQh1O7qmCRM_RtBGQN_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8bff72-5c16-4484-acc2-7eb4c088590f/1/ytx04QgwQh1O7qmCRM_RtBGQN_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:0f:c9:b5:b9:80:bc:66:d9:c3:1a:0d:1d:5e:91:d8:ad:
         a6:51:8c:27:6d:a9:17:0e:f1:f9:ef:dc:b4:8b:d7:32:df:70:
         5f:92:6e:70:0d:c8:37:07:2b:27:36:92:03:f4:e3:56:b3:34:
         53:ec:79:af:46:54:a2:e0:32:8c:51:b3:ef:5f:1d:f7:d5:a9:
         2d:71:ce:04:96:2d:a3:0b:e0:78:58:74:29:6c:78:20:11:ea:
         56:66:e4:d0:75:55:84:9d:af:2b:ef:56:e8:0b:79:59:7b:71:
         c7:6c:86:3b:ae:da:e3:76:f0:07:85:4d:20:2c:ef:d5:9b:e7:
         ea:8f:b7:58:ae:08:07:24:f6:26:7d:32:50:68:cf:56:2d:eb:
         86:f0:a8:a5:44:4f:5e:4e:fb:57:50:4c:40:c3:42:84:b0:e3:
         a5:1b:1b:99:ee:34:16:77:d7:cd:62:93:2d:b8:f9:e0:d9:ae:
         56:3c:dc:df:e6:b1:df:2d:ce:bc:79:87:36:e7:cd:2b:94:9a:
         24:86:67:6e:ad:fc:0a:58:18:7c:c7:ee:e0:df:a2:bd:29:c7:
         06:e0:bf:a8:44:6b:a8:1f:5d:ee:3e:f1:55:09:2a:52:a1:ac:
         10:58:f8:31:14:24:01:11:55:4b:18:c3:56:f0:cd:1a:8d:f0:
         eb:95:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:45 2025 by rpki-client