Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          BIejW2hTJCgZoOChDR8skvP9rUcJcv5vxQs9A2UjMSU=
Subject key identifier:   06:5A:41:E1:C6:E7:B5:F0:CB:40:7B:A5:7C:C5:B5:A4:88:3E:92:5D
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       019650B5FB30867D1089FC4AEC321EE33C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0B2B
Signing time:             Sun 20 Apr 2025 01:00:25 +0000
Manifest this update:     Sun 20 Apr 2025 01:00:25 +0000
Manifest next update:     Mon 21 Apr 2025 01:00:25 +0000
Files and hashes:         1: 8HjMGt2u-FXw7B9KaNMeiFRl_SI.roa (hash: PIXJikr44w+6nZYZyCRJ915rQc/SIe+DvX16n4ZT0no=)
                          2: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: Az0gWaTr0zzBWZdwUdojJ5nRteAOkgF9N3s8rwVceII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b5:fb:30:86:7d:10:89:fc:4a:ec:32:1e:e3:3c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Apr 20 01:00:25 2025 GMT
            Not After : Apr 21 01:00:25 2025 GMT
        Subject: CN=065a41e1c6e7b5f0cb407ba57cc5b5a4883e925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:46:d9:fd:36:3b:31:c1:fe:cf:31:1e:2c:
                    81:48:df:23:ba:52:c4:dd:3b:bc:6c:e5:dd:d8:ee:
                    b5:74:22:60:f2:35:f0:7b:0d:4e:35:02:58:f1:e5:
                    92:3e:3d:19:a6:1a:1b:9a:69:08:50:e3:59:5f:76:
                    d2:47:e7:a6:b5:b4:d7:e9:13:e6:7f:6f:ed:bb:a6:
                    96:13:56:f5:97:79:04:93:3f:1d:78:57:07:eb:98:
                    20:f4:b1:b3:2d:06:05:8b:1e:c0:ba:67:dc:21:ae:
                    f6:e3:d8:9f:6b:6a:e2:e6:bd:c9:e0:34:76:8d:5a:
                    49:09:65:05:8c:cf:81:51:7f:73:db:bc:1b:8a:9d:
                    df:00:0f:94:b9:e0:ac:49:64:09:2f:b1:4a:0b:f8:
                    55:de:4e:cc:7c:0f:37:30:33:22:7d:32:aa:45:e4:
                    c8:f3:06:f7:e2:07:57:ed:64:b3:cf:76:ea:05:e8:
                    38:20:ac:b5:f9:9c:7c:4b:67:5f:a0:41:eb:c6:93:
                    81:49:bd:9b:e5:bf:48:2c:4d:a7:40:1c:c2:79:08:
                    3f:c9:40:c0:e9:db:0e:fd:2d:eb:e5:c9:7a:86:08:
                    c4:93:4f:51:1a:b6:eb:e6:ab:57:08:4f:f6:e2:f4:
                    cb:ed:e4:f2:4e:dd:eb:76:c0:ce:af:12:12:08:bc:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:41:E1:C6:E7:B5:F0:CB:40:7B:A5:7C:C5:B5:A4:88:3E:92:5D
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:ca:35:00:f7:f2:b3:1e:60:f9:e5:63:b9:77:19:e7:d1:
         fb:8e:8f:7d:ae:5e:92:23:6f:99:ee:0d:9c:31:5c:5b:04:dd:
         61:fe:45:86:7a:47:8b:0c:4e:37:5f:af:97:07:3e:70:49:68:
         4e:3b:c6:d0:5f:bf:a9:27:09:cf:56:bb:30:ca:93:38:6d:59:
         87:21:ee:6a:a4:88:22:71:b5:d8:6a:96:30:58:34:bc:9f:55:
         f8:84:d3:88:34:ca:f3:e6:05:e5:a1:27:a8:7d:ab:7a:93:4a:
         20:47:99:eb:aa:01:94:2f:e7:6b:27:5a:12:e6:0f:eb:21:9d:
         bc:53:44:d7:9e:ba:97:6d:3f:5e:ed:30:67:20:e8:b6:99:b4:
         26:10:11:14:26:18:12:17:db:89:78:f8:3f:5d:bc:7e:26:48:
         94:82:a8:8f:35:75:21:87:2a:67:6e:19:eb:6f:6a:a2:36:6c:
         c8:3e:14:99:95:be:4a:a1:12:e1:af:5e:70:cf:6b:3a:27:bb:
         64:63:a6:bd:27:15:28:17:c7:e3:7c:82:89:8a:4d:05:d4:2e:
         0b:91:dc:80:b9:a4:6a:06:4e:94:bd:f9:12:95:91:35:27:02:
         81:89:bf:4f:79:c3:ed:59:8f:0d:32:c7:4a:04:23:f8:2c:e1:
         47:13:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:35 2025 by rpki-client