Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File:                     y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier:          wxpZx8PcBvMSDWv6p40ZDUE38epYqQE2LFCGLUYQVCY=
Subject key identifier:   A7:1F:A0:90:80:CA:FC:13:F5:32:98:E5:3C:FA:C4:07:AE:CC:E5:02
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer:       /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial:       0196512429DCCA6C8810B0586273415CAFDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number:          0604
Signing time:             Sun 20 Apr 2025 03:00:46 +0000
Manifest this update:     Sun 20 Apr 2025 03:00:46 +0000
Manifest next update:     Mon 21 Apr 2025 03:00:46 +0000
Files and hashes:         1: Kukv8lguLlqo8syva8to6ZRKCQQ.roa (hash: 6TsYNWvLqQDFoSOz1kHCV3IHIsfRZkDxe8fDivBN+2k=)
                          2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: 5BQAXprv2unhKqPx3sEmheKGokMtohcJ/agEvcDWf5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:24:29:dc:ca:6c:88:10:b0:58:62:73:41:5c:af:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
        Validity
            Not Before: Apr 20 03:00:46 2025 GMT
            Not After : Apr 21 03:00:46 2025 GMT
        Subject: CN=a71fa09080cafc13f53298e53cfac407aecce502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:ce:52:af:8c:ec:ef:dd:fb:c2:e4:4a:11:
                    fe:b4:fc:33:2b:51:48:70:70:f0:00:c5:06:24:47:
                    a2:fd:f7:fc:00:39:72:3d:85:48:1b:7a:04:47:4b:
                    5b:d1:1b:ae:26:13:d0:84:aa:7e:f5:a9:41:45:a0:
                    85:4a:1f:4a:53:f5:9c:c6:91:7b:a7:45:ee:d2:03:
                    f8:be:f7:81:5e:86:62:88:f2:cf:45:0b:9f:52:bd:
                    37:a2:9e:0b:90:21:35:df:4c:75:91:5c:4c:b6:fd:
                    f5:1b:82:06:6c:78:b8:25:c7:e0:09:16:fc:32:63:
                    43:0e:f5:1a:12:a0:b7:3f:6c:48:19:1f:0c:9d:1c:
                    c1:01:fa:d5:9f:f3:83:90:fd:00:40:4c:b4:3d:a3:
                    68:58:9d:47:12:08:0c:f9:39:a0:f8:da:0e:ef:d1:
                    2c:1c:ba:58:fc:83:a0:c8:fb:d8:b1:eb:fb:7c:1a:
                    8e:38:ec:ec:86:15:4e:08:6b:5e:18:43:0a:67:ec:
                    53:ca:71:fa:51:0d:75:f2:38:36:01:f0:86:f1:b1:
                    74:7e:2f:ad:d5:b9:95:e6:7b:e7:c5:df:fd:f4:09:
                    61:0d:db:9a:9e:5d:36:ca:07:73:be:5a:ee:8a:f0:
                    5f:95:da:48:22:c3:2b:59:9a:fa:1b:9c:f2:60:db:
                    50:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:A0:90:80:CA:FC:13:F5:32:98:E5:3C:FA:C4:07:AE:CC:E5:02
            X509v3 Authority Key Identifier:
                keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:c9:98:9e:a1:e0:fb:00:7f:6e:ef:a6:33:ad:09:bf:28:
         f0:8b:a6:4c:60:ca:d5:e7:32:ae:c4:e5:b3:99:72:4e:fe:c4:
         7b:bb:32:77:e7:83:cc:2c:34:28:a9:fc:c0:8e:b7:d6:5b:9d:
         20:bc:1b:02:18:fb:55:8d:a6:2b:ff:b6:89:be:9f:9e:1f:27:
         da:56:f3:ce:53:c1:92:b6:a0:24:a4:46:3d:86:f1:45:81:f0:
         f4:47:c3:08:3b:6e:2a:54:34:03:81:ce:c4:70:28:18:cc:cd:
         3f:f7:a7:11:74:d2:a4:25:35:99:dd:6d:e3:29:7e:b8:19:02:
         05:a3:41:7f:da:d2:06:1d:76:de:89:cb:19:55:4c:f3:20:45:
         ca:49:e8:bd:6c:bc:14:5f:db:c1:11:16:8e:02:f0:cd:d2:25:
         83:e1:f9:c4:29:16:dd:17:a2:fb:d9:10:3e:78:56:7d:b3:af:
         ad:bb:64:93:36:28:76:bd:bd:1f:13:30:10:57:0c:9c:35:95:
         9a:59:fa:03:b6:e3:c8:f5:d3:94:e2:21:bf:d3:81:f7:cc:ab:
         cd:85:5f:e3:f9:8f:f6:73:86:66:ba:53:8f:b1:29:57:f6:5e:
         3c:5d:4c:06:51:c9:ba:47:03:59:12:1b:dd:13:0d:5c:ff:a1:
         e2:98:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:17 2025 by rpki-client