Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File:                     yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier:          U6Qw3M9+bGURnUgMmw7PNOFmIxGzjhAS3Cr8JdmxaLY=
Subject key identifier:   DC:FD:CD:31:65:7E:F7:42:4F:6F:28:2E:2F:F3:79:4B:98:42:3F:41
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer:       /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial:       01964D7EBB904D927E1D663EA7F1BE294200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number:          0C2F
Signing time:             Sat 19 Apr 2025 10:01:13 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:13 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:13 +0000
Files and hashes:         1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: w07Riutty1kuojI8hKj2Dgnc1vYx9j8+0AdfMxqzi94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:bb:90:4d:92:7e:1d:66:3e:a7:f1:be:29:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
        Validity
            Not Before: Apr 19 10:01:13 2025 GMT
            Not After : Apr 20 10:01:13 2025 GMT
        Subject: CN=dcfdcd31657ef7424f6f282e2ff3794b98423f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:a2:14:7b:f2:58:e2:f8:6f:43:02:ec:11:
                    4f:19:b2:49:d8:5e:16:d3:8b:a6:37:7e:8b:9f:ec:
                    12:cc:c8:a4:31:5f:41:e9:3b:52:79:cb:01:87:07:
                    71:9a:72:7a:31:a1:e5:39:4c:5b:00:03:04:fe:a7:
                    7a:2a:fd:4e:a3:e4:01:8e:13:07:32:82:95:40:32:
                    32:ea:c8:6a:64:25:ce:da:9e:6c:29:88:12:74:ea:
                    69:23:e4:93:9f:a9:ef:17:2c:49:a7:eb:7d:89:99:
                    2c:26:16:ef:ef:48:28:20:ba:73:25:8c:13:d6:db:
                    da:c6:7c:25:4d:3b:49:bf:df:d7:6f:ae:13:66:72:
                    0f:ef:ba:9d:71:50:5f:46:51:47:c9:09:4b:37:aa:
                    95:ec:79:22:a5:f7:7d:d0:56:12:b1:93:0e:bc:47:
                    fa:7a:84:7b:f7:ae:20:98:56:92:96:d8:7e:dc:93:
                    4f:e6:3c:3c:01:86:10:17:00:70:e3:4d:be:f2:78:
                    ef:c6:de:8a:ca:1b:eb:39:5f:33:98:b1:3c:46:d5:
                    d0:98:4c:e9:57:59:2a:5c:cb:51:0e:51:bb:99:62:
                    8d:7c:c4:72:36:f8:45:c7:a8:6b:15:88:0f:94:33:
                    f0:ae:84:07:f0:ab:d6:5a:97:b1:7e:67:a0:0f:6c:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FD:CD:31:65:7E:F7:42:4F:6F:28:2E:2F:F3:79:4B:98:42:3F:41
            X509v3 Authority Key Identifier:
                keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:2e:7b:0c:19:07:0a:f9:e2:f8:57:d9:81:79:3c:da:eb:
         dc:44:c5:58:3b:18:0c:46:80:fe:d4:2c:a9:ae:51:06:9f:45:
         a2:9b:16:93:88:ae:73:16:7e:68:51:3e:3e:05:ee:3e:24:ab:
         92:5b:0d:5d:a1:e6:d5:f6:86:c9:bc:16:31:ec:2d:fe:24:7f:
         27:8e:ab:ff:77:3f:a3:2b:f1:e2:b9:dd:31:4f:e4:3d:e6:63:
         d6:57:cd:cc:0d:2e:32:f1:cf:52:b8:16:34:d5:64:98:f5:87:
         36:f2:ff:98:b4:00:ff:28:2b:ae:ba:e5:ee:15:e5:4d:cd:06:
         cd:b7:ba:cb:85:a9:ff:43:bc:42:50:8e:7e:ee:8b:36:1b:cb:
         28:2a:59:89:0f:31:bd:3a:57:7e:7e:0a:4b:11:57:ad:14:25:
         93:ae:43:73:4d:73:e7:5a:73:0c:41:41:f5:ba:7c:61:87:89:
         da:ab:6b:08:84:17:fa:ea:6d:f4:df:2d:92:92:ce:0a:3a:50:
         b6:a4:be:28:06:31:9e:9f:7c:45:2c:9b:00:d2:5b:f6:93:b4:
         a6:cb:c9:8f:dd:7c:6c:e0:ff:68:56:4e:f9:b3:49:36:5f:88:
         af:13:c8:ae:db:c2:8e:57:ae:8a:f2:6b:48:6d:a8:b9:29:03:
         47:d9:aa:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfruQTZJ+HWY+p/G+KUIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3
NmEzOGQwHhcNMjUwNDE5MTAwMTEzWhcNMjUwNDIwMTAwMTEzWjAzMTEwLwYDVQQD
EyhkY2ZkY2QzMTY1N2VmNzQyNGY2ZjI4MmUyZmYzNzk0Yjk4NDIzZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRiiFHvyWOL4b0MC7BFPGbJJ2F4W
04umN36Ln+wSzMikMV9B6TtSecsBhwdxmnJ6MaHlOUxbAAME/qd6Kv1Oo+QBjhMH
MoKVQDIy6shqZCXO2p5sKYgSdOppI+STn6nvFyxJp+t9iZksJhbv70goILpzJYwT
1tvaxnwlTTtJv9/Xb64TZnIP77qdcVBfRlFHyQlLN6qV7Hkipfd90FYSsZMOvEf6
eoR7964gmFaSlth+3JNP5jw8AYYQFwBw402+8njvxt6KyhvrOV8zmLE8RtXQmEzp
V1kqXMtRDlG7mWKNfMRyNvhFx6hrFYgPlDPwroQH8KvWWpexfmegD2wJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz9zTFlfvdCT28oLi/zeUuYQj9BMB8GA1UdIwQY
MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt
OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0
LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ4uewwZ
Bwr54vhX2YF5PNrr3ETFWDsYDEaA/tQsqa5RBp9FopsWk4iucxZ+aFE+PgXuPiSr
klsNXaHm1faGybwWMewt/iR/J46r/3c/oyvx4rndMU/kPeZj1lfNzA0uMvHPUrgW
NNVkmPWHNvL/mLQA/ygrrrrl7hXlTc0Gzbe6y4Wp/0O8QlCOfu6LNhvLKCpZiQ8x
vTpXfn4KSxFXrRQlk65Dc01z51pzDEFB9bp8YYeJ2qtrCIQX+upt9N8tkpLOCjpQ
tqS+KAYxnp98RSybANJb9pO0psvJj918bOD/aFZO+bNJNl+IrxPIrtvCjleuivJr
SG2ouSkDR9mqLA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:26 2025 by rpki-client