Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
File:                     Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft (raw, json)
Hash identifier:          vCICaDOcWbivyA/uZORUVd5kZiTADcCar8NRxWZGgB4=
Subject key identifier:   2D:80:23:10:7D:D9:E6:42:56:57:EE:21:D0:BD:D4:C7:15:ED:31:06
Authority key identifier: 63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0
Certificate issuer:       /CN=637115f728f97d16e0d124963764088120205ae0
Certificate serial:       01963EE73A9C1D6FBC3511770EF0476CF22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
Manifest number:          04BE
Signing time:             Wed 16 Apr 2025 14:01:03 +0000
Manifest this update:     Wed 16 Apr 2025 14:01:03 +0000
Manifest next update:     Thu 17 Apr 2025 14:01:03 +0000
Files and hashes:         1: Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl (hash: L4KcnUN+Rz4Gaovx3AzDZE9Xn3FnDJgloyrRLAtYFeQ=)
                          2: bS_l2Fl7JfNBEh4vQiqWP7zWt_E.roa (hash: rZgNK/vUggsFadv3q4dKfzKV95jK84/8a/5X5Aa/1YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:e7:3a:9c:1d:6f:bc:35:11:77:0e:f0:47:6c:f2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637115f728f97d16e0d124963764088120205ae0
        Validity
            Not Before: Apr 16 14:01:03 2025 GMT
            Not After : Apr 17 14:01:03 2025 GMT
        Subject: CN=2d8023107dd9e6425657ee21d0bdd4c715ed3106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:3f:9c:06:5f:32:58:e3:73:4d:c4:b3:2e:
                    6c:7e:27:8a:f4:b3:83:25:33:39:57:b5:fd:e2:e6:
                    db:ad:b8:1b:11:74:cc:03:20:7a:22:1c:60:3d:5a:
                    ac:17:6b:52:f4:31:43:ad:d4:70:64:70:a0:2a:51:
                    93:8f:b3:62:a0:0d:16:59:7e:59:17:db:51:4b:ad:
                    ef:3c:04:e4:a2:39:77:0e:4b:03:b4:81:77:72:86:
                    90:a0:f9:7b:bf:51:e0:77:10:a9:22:74:7d:e6:b2:
                    f5:88:c2:2d:75:27:9d:53:f6:28:54:3c:0d:87:d3:
                    0e:ba:be:8b:95:65:6d:58:f5:b2:68:65:e4:46:db:
                    86:e3:c2:c6:c1:1e:70:bd:87:eb:a8:5b:6b:8a:e6:
                    dc:8f:ef:18:2f:c9:23:40:6f:43:b6:87:23:62:8c:
                    62:97:26:2e:86:e3:7c:82:64:ba:7b:e8:50:7c:76:
                    67:a8:f4:9a:b1:ef:6d:2c:66:48:bf:1d:e3:5a:9a:
                    56:97:e9:5d:a3:d1:da:0d:f2:9b:de:59:1b:e3:84:
                    34:7a:af:7f:d1:cf:37:fb:44:3f:7d:37:a7:ff:58:
                    8b:29:90:0e:a6:4d:4d:2a:8f:83:25:a8:72:18:c2:
                    43:d1:aa:0e:ac:db:e7:4b:81:b2:65:ff:e6:7f:42:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:80:23:10:7D:D9:E6:42:56:57:EE:21:D0:BD:D4:C7:15:ED:31:06
            X509v3 Authority Key Identifier:
                keyid:63:71:15:F7:28:F9:7D:16:E0:D1:24:96:37:64:08:81:20:20:5A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a875d3-9905-4984-b92c-e3be5568293d/1/Y3EV9yj5fRbg0SSWN2QIgSAgWuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:a9:0f:51:bb:bc:0d:03:c4:ee:f0:8c:92:74:86:b1:1d:
         2e:46:c7:63:5c:08:d8:54:19:34:05:20:e0:b3:49:ef:3d:4a:
         35:d0:14:a3:df:bc:b0:9d:e3:75:6b:5d:68:32:e0:4b:55:89:
         14:73:6e:b1:f1:e8:b8:c6:01:36:7e:4b:69:46:80:1c:34:b0:
         3d:0a:5f:27:e6:6f:4e:32:9a:54:68:8c:40:5c:f4:52:20:55:
         46:01:3c:66:17:23:23:e6:08:40:22:85:7d:00:0a:4e:00:36:
         b5:4b:3e:ed:ff:8a:6a:d4:77:5d:ae:d3:d1:84:42:91:e1:96:
         56:4f:e3:a1:5a:2d:6f:ca:26:d4:a0:d8:0d:43:0b:e4:1e:e8:
         9d:96:d0:95:3e:3b:07:7f:8f:56:33:d1:de:1b:f9:90:32:78:
         f0:d7:da:3e:e4:37:a0:eb:8a:43:f4:fe:74:d8:55:44:85:38:
         31:f1:5c:d4:93:48:47:43:e7:1a:ff:f2:ca:d9:d5:8e:2c:ac:
         bc:55:c0:f5:d7:ec:ec:e1:b9:1d:25:5c:bf:c5:64:43:18:68:
         2c:b8:ba:f0:f4:ea:f7:63:9e:2a:eb:c3:c6:df:92:ad:d8:2b:
         b4:f3:bc:f6:f1:61:82:16:e7:28:52:a7:86:cd:09:79:f9:19:
         be:08:cc:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5zqcHW+8NRF3DvBHbPItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzExNWY3MjhmOTdkMTZlMGQxMjQ5NjM3NjQwODgxMjAy
MDVhZTAwHhcNMjUwNDE2MTQwMTAzWhcNMjUwNDE3MTQwMTAzWjAzMTEwLwYDVQQD
EygyZDgwMjMxMDdkZDllNjQyNTY1N2VlMjFkMGJkZDRjNzE1ZWQzMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxI/nAZfMljjc03Esy5sfieK9LOD
JTM5V7X94ubbrbgbEXTMAyB6IhxgPVqsF2tS9DFDrdRwZHCgKlGTj7NioA0WWX5Z
F9tRS63vPATkojl3DksDtIF3coaQoPl7v1HgdxCpInR95rL1iMItdSedU/YoVDwN
h9MOur6LlWVtWPWyaGXkRtuG48LGwR5wvYfrqFtriubcj+8YL8kjQG9DtocjYoxi
lyYuhuN8gmS6e+hQfHZnqPSase9tLGZIvx3jWppWl+ldo9HaDfKb3lkb44Q0eq9/
0c83+0Q/fTen/1iLKZAOpk1NKo+DJahyGMJD0aoOrNvnS4GyZf/mf0J8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2AIxB92eZCVlfuIdC91McV7TEGMB8GA1UdIwQY
MBaAFGNxFfco+X0W4NEkljdkCIEgIFrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMt
ZTNiZTU1NjgyOTNkLzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hODc1ZDMtOTkwNS00OTg0LWI5MmMtZTNiZTU1NjgyOTNk
LzEvWTNFVjl5ajVmUmJnMFNTV04yUUlnU0FnV3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScupD1G7
vA0DxO7wjJJ0hrEdLkbHY1wI2FQZNAUg4LNJ7z1KNdAUo9+8sJ3jdWtdaDLgS1WJ
FHNusfHouMYBNn5LaUaAHDSwPQpfJ+ZvTjKaVGiMQFz0UiBVRgE8ZhcjI+YIQCKF
fQAKTgA2tUs+7f+KatR3Xa7T0YRCkeGWVk/joVotb8om1KDYDUML5B7onZbQlT47
B3+PVjPR3hv5kDJ48NfaPuQ3oOuKQ/T+dNhVRIU4MfFc1JNIR0PnGv/yytnVjiys
vFXA9dfs7OG5HSVcv8VkQxhoLLi68PTq92OeKuvDxt+SrdgrtPO89vFhghbnKFKn
hs0JefkZvgjMcg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:58:57 2025 by rpki-client