Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
File:                     ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft (raw, json)
Hash identifier:          V1HRNXoWPCSD2St4cd9uZ0A6hUJCRF2EfgqYK1fPT5Y=
Subject key identifier:   E1:39:3E:D4:5C:20:1F:F0:A1:75:1D:19:B4:F3:D5:65:E6:FA:55:FE
Authority key identifier: CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04
Certificate issuer:       /CN=ca707e086640056bc271d5d2b3e24d01440baa04
Certificate serial:       01973429D1A5BB32216C02B8E4C0185251BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
Manifest number:          04AB
Signing time:             Tue 03 Jun 2025 05:00:45 +0000
Manifest this update:     Tue 03 Jun 2025 05:00:45 +0000
Manifest next update:     Wed 04 Jun 2025 05:00:45 +0000
Files and hashes:         1: 6gBE7pptZYiOQYzgQrDqpd4YU28.roa (hash: befLdlmkbWAFqJs/2qFJeaYKjLxcSCoV57kISzSShtY=)
                          2: m-uxR0_8eTmWZhstKF2AykIOlW0.roa (hash: nD9JKASfoFUEslOSfBGoZNc0ukQrH6qex/4nKwJQ1Us=)
                          3: wCPLGfwEfOWZHOqkEsXWfcaZpAY.roa (hash: A9EE9J7EKj21RYPt9BS119MIZmB7so+dos1TcgTJEmI=)
                          4: ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl (hash: MgCuCVqW2PMptldfIzrR9LPq0OIheu8gV0lH8I4dGTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Jun 2025 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:34:29:d1:a5:bb:32:21:6c:02:b8:e4:c0:18:52:51:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca707e086640056bc271d5d2b3e24d01440baa04
        Validity
            Not Before: Jun  3 05:00:45 2025 GMT
            Not After : Jun  4 05:00:45 2025 GMT
        Subject: CN=e1393ed45c201ff0a1751d19b4f3d565e6fa55fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:19:f5:61:d3:84:88:69:63:fe:b7:9f:ae:
                    fc:95:86:77:a4:96:84:0c:d4:1e:7f:e3:36:f1:f7:
                    71:49:9c:ac:c4:f7:d5:dd:b1:f5:41:cf:3c:7a:16:
                    6e:0f:bc:40:ee:26:a5:16:36:d8:59:e6:b8:9b:7f:
                    a4:d5:8b:a9:c8:ab:a0:6b:ab:6b:fe:13:09:d6:2b:
                    b2:68:4a:56:2b:d8:d2:72:25:92:f0:b3:6b:63:f8:
                    14:93:f0:43:9b:b8:b1:49:a2:50:50:0d:1c:50:46:
                    c9:45:a8:4e:b1:be:14:dc:b1:4b:3f:82:98:9b:86:
                    51:9e:c4:c8:f8:8b:6f:92:34:6b:cb:20:3b:31:f4:
                    56:b3:19:a2:4d:42:4c:da:fa:a1:25:e6:0c:a9:f3:
                    9d:33:27:a1:ef:9b:b8:d7:c5:93:af:99:92:2c:45:
                    ef:f7:81:aa:c0:2a:fb:33:97:33:12:de:5e:56:34:
                    f6:8b:95:eb:11:0b:47:bf:8a:37:b0:3d:5b:c0:66:
                    e3:10:ce:b9:e1:a7:c4:72:a4:33:3c:c4:7c:13:f1:
                    d0:3b:76:5e:07:58:c1:72:78:98:0e:f8:94:2a:1e:
                    54:56:ab:53:e6:d5:84:b2:64:36:4e:57:8c:ef:85:
                    e0:70:9b:88:76:67:75:c1:35:eb:f2:b7:32:49:ab:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:3E:D4:5C:20:1F:F0:A1:75:1D:19:B4:F3:D5:65:E6:FA:55:FE
            X509v3 Authority Key Identifier:
                keyid:CA:70:7E:08:66:40:05:6B:C2:71:D5:D2:B3:E2:4D:01:44:0B:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynB-CGZABWvCcdXSs-JNAUQLqgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/376ccd-defa-4028-af1c-b99ce30d839f/1/ynB-CGZABWvCcdXSs-JNAUQLqgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:af:c6:37:d3:1c:47:fe:d0:de:41:9f:a3:b3:67:00:02:5d:
         ce:aa:4d:3d:2d:89:69:24:33:9d:3a:e0:55:56:3e:89:88:cb:
         ec:3b:9c:78:2b:fb:ce:0f:43:9a:97:bf:84:0e:86:e2:d7:20:
         2b:9f:63:da:1e:79:8e:3a:01:f8:e3:74:58:f0:8b:02:55:5b:
         1e:20:66:e5:2d:26:7e:b2:2e:24:70:ce:22:99:db:db:4e:87:
         2f:ab:e8:d0:66:83:2f:b2:d5:5e:96:52:6b:96:dc:b3:c4:1a:
         01:6a:d2:b2:db:b8:70:f6:c3:17:c1:72:d2:4b:c9:c7:23:70:
         9d:12:03:71:dc:db:62:50:89:a5:c9:ad:7a:11:30:21:9d:01:
         35:37:41:cd:4b:77:47:48:2f:48:cf:77:d7:8f:0c:f4:9e:c0:
         8b:21:57:1f:b8:97:e0:c9:b0:de:bb:d1:a5:7f:25:2b:85:5c:
         2b:7f:cc:b3:89:7a:7b:60:97:af:56:4a:77:21:0e:8a:66:90:
         80:61:dc:97:5d:7f:92:98:04:3f:86:7d:aa:5a:d9:0d:d1:8e:
         4d:6b:d5:3d:62:ba:7f:cf:c4:48:d4:6c:86:1e:d0:1c:d0:6c:
         9e:03:13:b9:5a:7b:12:ff:ee:bc:d3:b5:0f:41:e7:73:10:6e:
         b6:1d:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:13:10 2025 by rpki-client