Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          HHTigssW3jf0ZHLQF25BXBqyfp7bTmJPqn/tUm3isoc=
Subject key identifier:   C9:F5:97:6A:D8:B8:5E:C7:A8:F4:08:EB:E7:93:2B:A6:33:93:E8:0E
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       019659823784E6C37F77C676350D1B3B3440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          03E9
Signing time:             Mon 21 Apr 2025 18:00:28 +0000
Manifest this update:     Mon 21 Apr 2025 18:00:28 +0000
Manifest next update:     Tue 22 Apr 2025 18:00:28 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: cqG6bcjYjep4SU5KdxbgyM64ZZNXJsLTTUHCw3niwt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:82:37:84:e6:c3:7f:77:c6:76:35:0d:1b:3b:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Apr 21 18:00:28 2025 GMT
            Not After : Apr 22 18:00:28 2025 GMT
        Subject: CN=c9f5976ad8b85ec7a8f408ebe7932ba63393e80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:8a:24:48:ef:ce:a2:f2:80:8c:3c:d7:06:
                    d5:fe:22:7f:80:67:19:eb:65:67:63:15:50:2c:f7:
                    95:5d:8b:b9:aa:92:e7:57:e5:bc:17:9d:e3:50:70:
                    7b:bc:4f:eb:41:dd:b4:57:6b:c2:99:09:b3:dc:53:
                    3e:38:8f:f4:12:c4:7e:4d:1d:5a:11:22:82:ae:8a:
                    42:5b:97:01:d9:f6:51:d9:ab:fc:9f:ac:f2:93:de:
                    ba:2e:f9:8b:e5:c6:be:92:24:d6:70:bc:f6:27:94:
                    7d:a5:3a:ba:a1:65:f1:20:42:6c:51:0f:88:84:db:
                    02:1e:d1:19:37:e7:d7:cc:45:47:5e:fa:8b:a7:4c:
                    22:12:99:8b:3a:c0:b5:0f:f6:d4:f5:29:3a:33:48:
                    39:6f:98:5b:73:28:42:2c:ae:3f:03:c7:d7:64:12:
                    1a:d5:e7:ab:11:aa:75:6c:49:88:a8:d2:ec:0c:11:
                    0e:07:ba:2a:cc:9b:ed:a2:59:96:5e:09:e8:de:d0:
                    58:d6:26:f6:c7:f4:93:6a:36:05:6d:83:12:20:a8:
                    af:f8:fe:af:b1:dd:a8:c8:39:e6:07:6b:9e:e4:dc:
                    29:38:aa:f5:80:3d:04:a5:bf:f3:08:41:1a:6e:69:
                    6d:d9:cd:70:f1:c5:1f:59:c6:40:d7:f0:21:36:8d:
                    a4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:97:6A:D8:B8:5E:C7:A8:F4:08:EB:E7:93:2B:A6:33:93:E8:0E
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f2:3b:97:9f:2d:b7:cc:15:b4:78:22:5e:d0:df:f8:70:0a:
         57:7a:66:dd:a4:c4:43:b8:0d:9b:be:ab:2b:43:9b:d0:e1:1e:
         8f:3b:6a:6c:28:69:65:5a:f1:fb:11:5e:ff:5d:53:1b:18:4e:
         8e:45:30:d3:1b:92:2d:cd:87:c7:3f:ab:28:1a:5b:8b:f0:a7:
         a8:5f:7a:2a:fc:45:4f:49:a5:14:47:c8:c8:69:f7:3f:dd:12:
         db:c0:44:2a:0b:2f:7c:2f:4a:2c:c2:16:89:85:d8:f8:10:00:
         b2:9a:bf:d1:d7:d8:45:f0:02:a4:f9:ce:40:61:43:5a:61:57:
         10:c0:a2:02:e4:ab:9f:25:1b:4c:02:43:10:99:08:9a:07:85:
         52:72:fb:c2:f4:75:24:76:aa:09:80:81:6c:34:f5:e5:20:22:
         5b:de:5f:dd:e5:fa:a6:3f:ef:d8:9b:2b:7d:7c:e1:b0:38:10:
         4a:a4:5d:90:7f:c0:22:61:1f:7d:a0:66:d1:73:e6:7c:cd:f8:
         19:75:39:68:dc:08:fb:66:0a:7e:cc:6d:a2:ad:18:f0:bd:0a:
         f1:04:44:97:5f:31:a1:73:ae:a8:11:48:3a:59:5e:28:72:0c:
         ce:d9:05:27:4f:90:34:7d:30:d8:7f:fd:f9:e5:27:8d:b8:22:
         87:15:55:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZgjeE5sN/d8Z2NQ0bOzRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjZiOTUwYTQ1YTJjNmJhYzE1MDVmY2QwNGQ5NDBjYzA5
NjhmOTYwHhcNMjUwNDIxMTgwMDI4WhcNMjUwNDIyMTgwMDI4WjAzMTEwLwYDVQQD
EyhjOWY1OTc2YWQ4Yjg1ZWM3YThmNDA4ZWJlNzkzMmJhNjMzOTNlODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKSKJEjvzqLygIw81wbV/iJ/gGcZ
62VnYxVQLPeVXYu5qpLnV+W8F53jUHB7vE/rQd20V2vCmQmz3FM+OI/0EsR+TR1a
ESKCropCW5cB2fZR2av8n6zyk966LvmL5ca+kiTWcLz2J5R9pTq6oWXxIEJsUQ+I
hNsCHtEZN+fXzEVHXvqLp0wiEpmLOsC1D/bU9Sk6M0g5b5hbcyhCLK4/A8fXZBIa
1eerEap1bEmIqNLsDBEOB7oqzJvtolmWXgno3tBY1ib2x/STajYFbYMSIKiv+P6v
sd2oyDnmB2ue5NwpOKr1gD0Epb/zCEEabmlt2c1w8cUfWcZA1/AhNo2kIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMn1l2rYuF7HqPQI6+eTK6Yzk+gOMB8GA1UdIwQY
MBaAFDMmuVCkWixrrBUF/NBNlAzAlo+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUt
MDhlMTA2MzgyMjVlLzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUtMDhlMTA2MzgyMjVl
LzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvI7l58t
t8wVtHgiXtDf+HAKV3pm3aTEQ7gNm76rK0Ob0OEejztqbChpZVrx+xFe/11TGxhO
jkUw0xuSLc2Hxz+rKBpbi/CnqF96KvxFT0mlFEfIyGn3P90S28BEKgsvfC9KLMIW
iYXY+BAAspq/0dfYRfACpPnOQGFDWmFXEMCiAuSrnyUbTAJDEJkImgeFUnL7wvR1
JHaqCYCBbDT15SAiW95f3eX6pj/v2JsrfXzhsDgQSqRdkH/AImEffaBm0XPmfM34
GXU5aNwI+2YKfsxtoq0Y8L0K8QREl18xoXOuqBFIOlleKHIMztkFJ0+QNH0w2H/9
+eUnjbgihxVVJQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:13:59 2025 by rpki-client