Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
File:                     ylmb3Bz8eujML7oV_NgMoRc3hGc.mft (raw, json)
Hash identifier:          OsymATM+GHhuHrtigEAwtkrZwpuHpqZtd3/IzIMpm7o=
Subject key identifier:   95:47:68:BB:33:62:7D:76:2D:8F:8B:41:D1:B1:73:80:6E:21:B3:D2
Authority key identifier: CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67
Certificate issuer:       /CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
Certificate serial:       01974BFB5395F4B99CD2A7CE41CB506B15AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
Manifest number:          0195
Signing time:             Sat 07 Jun 2025 20:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:51 +0000
Files and hashes:         1: ylmb3Bz8eujML7oV_NgMoRc3hGc.crl (hash: VFXAEzYcBd0DXkVkARGMD9bEKgNTavjl+Ti5jCBNudI=)
                          2: zIZvUw6LEttnk9GqCkFL8S-ncbM.roa (hash: g5dRThI/Wu6nM24igsF8Y2hQEgVjjdxUN3aRLJWGc3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:53:95:f4:b9:9c:d2:a7:ce:41:cb:50:6b:15:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca599bdc1cfc7ae8cc2fba15fcd80ca117378467
        Validity
            Not Before: Jun  7 20:00:51 2025 GMT
            Not After : Jun  8 20:00:51 2025 GMT
        Subject: CN=954768bb33627d762d8f8b41d1b173806e21b3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:ea:4c:d7:6e:5d:fd:81:bd:8f:98:49:0e:
                    00:f4:be:7f:7d:ee:d0:e9:4c:ab:25:54:d8:f7:a4:
                    7c:66:1e:1a:0b:ba:50:c4:7f:3b:6d:91:95:6f:32:
                    52:91:3e:d8:af:f9:b9:fd:1b:f4:54:06:75:15:fd:
                    64:8d:d4:7a:a8:d5:29:24:43:4f:38:77:aa:85:e1:
                    74:6b:4a:19:9b:d5:97:64:8c:5b:cf:74:fb:e0:bd:
                    c4:37:20:c5:8d:82:99:39:87:e5:30:4d:bc:2f:50:
                    e4:d5:9a:cf:1d:18:81:b2:88:b9:d4:7a:e4:ef:8e:
                    8a:e8:da:b7:72:50:20:2f:88:cc:12:bd:75:a2:2d:
                    37:de:0f:16:e4:a1:96:7f:b4:3b:48:35:43:2e:ae:
                    23:ff:95:0f:67:57:d7:bd:a0:46:b7:3c:1d:38:02:
                    7a:dd:79:c6:6a:c5:ea:d3:02:ee:6a:81:e1:7a:a9:
                    5b:1b:ad:2d:42:29:5a:50:99:6b:60:3b:98:ff:80:
                    80:be:d2:16:16:71:a7:90:81:02:13:fd:9e:59:c7:
                    62:43:20:ac:e9:79:dd:a9:ec:9b:4a:74:21:d1:df:
                    b4:61:5c:6b:fb:29:85:65:2d:76:67:34:18:5b:ad:
                    62:98:90:96:5e:7a:dc:0d:ed:e5:49:e0:e4:6a:67:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:47:68:BB:33:62:7D:76:2D:8F:8B:41:D1:B1:73:80:6E:21:B3:D2
            X509v3 Authority Key Identifier:
                keyid:CA:59:9B:DC:1C:FC:7A:E8:CC:2F:BA:15:FC:D8:0C:A1:17:37:84:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylmb3Bz8eujML7oV_NgMoRc3hGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1cecb8-97d9-473f-b004-cc912746e47e/1/ylmb3Bz8eujML7oV_NgMoRc3hGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:56:96:f5:40:e0:02:67:30:6d:c4:5b:97:6e:ad:1c:b6:c9:
         99:15:0b:4f:93:9f:1e:af:c2:12:7e:ab:1f:00:e2:61:aa:b1:
         0e:a0:6f:68:18:b0:42:82:7c:6d:f6:fd:12:8a:f3:a8:86:58:
         a3:50:67:5d:a9:2f:b7:ef:8b:38:87:5a:54:f9:02:d6:76:4c:
         5e:46:a5:ae:3f:59:0f:1c:db:fe:05:f6:cc:1e:84:a5:45:a5:
         b5:38:10:6b:89:0d:0a:66:1c:5a:a0:ba:0f:8a:05:8e:10:69:
         a3:9a:be:9b:b3:51:46:47:53:07:b3:02:86:2b:a7:7e:bf:fe:
         10:37:b0:9b:f5:62:e2:fa:c4:0a:c9:33:96:97:4f:ed:20:3b:
         c6:42:35:73:16:dc:90:f2:bb:a3:da:c5:c7:70:60:de:3a:67:
         8c:48:c9:95:ba:e5:72:65:e7:85:65:cd:81:00:08:8a:b6:fa:
         d0:16:87:d6:1e:5b:e6:91:f5:9a:eb:7e:ea:fe:da:39:fa:2b:
         4b:ee:7b:32:55:6e:65:33:ed:3b:2e:2b:b6:9c:59:63:9f:30:
         1a:82:ba:bb:d2:a2:f8:b5:62:22:23:3d:5e:e4:35:7f:fc:55:
         0f:f7:0c:0a:fc:d8:bc:08:de:1a:43:86:14:d8:26:6b:1a:c8:
         e1:1b:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:00:30 2025 by rpki-client