Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          LEpjth89vccECi8nhxJKtXOCn1xU/8vwcJ8vI/GubXw=
Subject key identifier:   25:09:1D:12:A8:4D:F1:CA:9E:27:42:DC:9E:65:14:D1:AB:DF:2B:31
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       01974D0E00DE048962B43C8C465D07772AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1592
Signing time:             Sun 08 Jun 2025 01:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:52 +0000
Files and hashes:         1: Hs5OpoVTxSJfvS3erDXXhGQXJSE.roa (hash: ETk/+dQR/qhcGpGtYBL6fSkfntPwX1tHoXTuoqNreRs=)
                          2: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: Hy7LFIj+l56BsZAeTWVEt0KEH7UMDKCU/ho4eGL7N1c=)
                          3: cRbQbZI4caSihSJdxBwTOdI7jHI.roa (hash: l064fVVkmmooFHUiz4jiDmBf7OxJUiTNePDan7lSIBE=)
                          4: ct4uh4Dvn38kuKb2J9OedNnfBrQ.roa (hash: nZxVoJ4prQOuIIhd7SEgU19Z8RQI5zRlz6rYzsDEzRI=)
                          5: u7siAwXzbgFTEGp6PKjrdqf7Z4A.roa (hash: vJGRmjZ9RvsYFu3lwU4eezlqzVwLgmj9/3K2yZjY284=)
                          6: y5D4TaXJLkrfa4Of0NlhAIHZfQY.roa (hash: IeCyxZUbWUBk/m+unrT9oFimJ4vs3IvgUDAcRXAQ5dA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:00:de:04:89:62:b4:3c:8c:46:5d:07:77:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jun  8 01:00:52 2025 GMT
            Not After : Jun  9 01:00:52 2025 GMT
        Subject: CN=25091d12a84df1ca9e2742dc9e6514d1abdf2b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:79:6e:c4:ff:82:cd:3b:de:1f:bc:1a:23:
                    ed:97:c7:65:0b:b0:ac:c3:78:46:2f:27:fa:08:48:
                    ed:08:d3:eb:2b:0c:c7:f1:a3:72:a0:97:52:d9:d8:
                    b0:d0:f1:97:a8:8f:ae:fb:6d:59:bb:f6:9e:25:10:
                    a7:70:c4:31:c0:c7:d0:8b:22:db:db:02:1a:8d:75:
                    b6:fb:d4:e3:05:73:8b:5f:bb:e0:5b:14:96:87:e8:
                    0f:1a:ab:4c:d0:aa:39:f8:70:56:34:d6:ed:4a:79:
                    0a:35:6c:2e:8e:9f:6e:57:1a:75:45:54:b7:9a:21:
                    9f:8b:8a:e8:69:10:f1:e4:d2:5a:92:b1:1c:e9:5e:
                    90:ac:6c:5b:d9:7c:ac:e8:38:36:57:80:76:ec:3e:
                    cd:11:14:74:ea:b9:c3:66:d9:5c:44:37:86:9a:18:
                    e2:7f:60:fc:90:93:7d:db:9e:13:8d:1b:88:67:bf:
                    d8:85:29:69:ac:4b:32:77:00:0c:66:1f:26:fd:16:
                    47:c9:22:03:be:7c:8c:f8:40:c0:f8:de:44:89:67:
                    8e:91:ad:78:6d:73:02:e5:0a:1a:e0:37:3c:a1:8f:
                    b2:fb:cd:60:2b:c6:a8:0b:0a:7f:0e:54:4a:14:e1:
                    f9:4f:2b:1e:2a:2f:25:56:84:79:f3:92:4c:43:83:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:09:1D:12:A8:4D:F1:CA:9E:27:42:DC:9E:65:14:D1:AB:DF:2B:31
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:2e:4b:86:d7:3e:ea:00:b1:57:cf:f9:8a:05:a6:33:6c:
         db:f0:0a:ad:2a:d1:61:6d:58:20:82:93:0f:6d:c9:d2:94:3a:
         d5:04:d6:c8:b1:73:be:81:7c:ab:02:22:ef:f8:98:e6:88:12:
         25:d4:ae:0b:57:79:d4:43:df:21:7b:2a:85:00:d9:41:96:c0:
         a3:4d:c1:e5:65:01:6e:3a:48:08:d0:01:b4:db:b3:57:a4:27:
         68:0c:62:3e:bb:94:9d:99:82:91:fe:69:aa:33:5c:19:bf:18:
         46:dc:85:ed:ab:29:c5:9d:47:a3:95:d5:bf:a2:78:e4:65:10:
         6f:7a:6c:55:01:ae:e1:48:46:c6:51:75:21:46:68:a1:b7:6e:
         9a:24:2b:d7:ab:26:88:bf:1b:fb:0a:ba:03:85:dd:2b:fc:8a:
         e1:8e:0e:76:39:4b:ca:62:32:d0:f1:7e:ee:f5:1c:f4:6e:1e:
         29:24:d0:b4:c4:15:cc:75:04:52:bd:22:5f:dd:fd:70:fd:e5:
         bf:22:48:f5:4a:4f:41:e2:3a:be:ce:ef:a6:29:34:3a:36:57:
         6c:f9:1b:67:71:35:82:3e:78:2e:3d:d8:4d:32:49:06:b1:ae:
         e5:6b:76:33:c8:95:ab:1c:0d:55:b0:b7:15:09:9b:26:c5:85:
         82:4f:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:28 2025 by rpki-client