Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
File:                     YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft (raw, json)
Hash identifier:          iBH8A1SADNbTnSHKCgIMbpLGnwlHXJvwhE8Gbb5I21c=
Subject key identifier:   4D:E1:31:E5:16:7A:92:EA:56:21:87:BA:D7:5F:E3:F3:40:C5:24:EA
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Certificate issuer:       /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial:       01964E5A162F6F633B574EDBA4315A611962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
Manifest number:          095C
Signing time:             Sat 19 Apr 2025 14:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 14:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 14:00:48 +0000
Files and hashes:         1: YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl (hash: rwukeBkqWelu8zWfrLjPmJ2+JgtZs7n+2/msWuMTO58=)
                          2: jYlgI_qcApYE3RAZAnK4EbiyzdM.roa (hash: xXRxHK1q9xpKOQP7dBVRrylt76oRLGOFXjW/2uY1+iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:16:2f:6f:63:3b:57:4e:db:a4:31:5a:61:19:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
        Validity
            Not Before: Apr 19 14:00:48 2025 GMT
            Not After : Apr 20 14:00:48 2025 GMT
        Subject: CN=4de131e5167a92ea562187bad75fe3f340c524ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:7a:dc:08:cc:7b:be:f1:05:1b:a0:79:51:
                    d3:4e:73:2b:07:d2:00:1d:48:5c:51:f2:a6:36:5e:
                    52:ca:e5:92:91:79:83:87:19:96:d0:c9:0f:b5:64:
                    b0:c3:94:ed:32:f4:b3:1a:ed:b2:87:37:fe:db:f4:
                    0b:78:0e:f6:1f:87:e0:d7:80:00:ce:c5:fd:ce:3a:
                    d2:a8:96:e0:ee:76:3a:a7:cd:b2:3e:c4:e5:72:d6:
                    3c:22:ae:7b:80:f8:fc:24:58:c7:be:32:f5:70:09:
                    84:14:c3:ce:99:5f:9d:0b:1c:da:dc:47:dc:03:b3:
                    d6:3f:c0:0a:f4:6b:07:55:e3:ab:a5:94:0d:58:6f:
                    2d:43:9c:30:53:1c:38:f9:22:2c:9a:18:3c:8b:ab:
                    0d:96:cc:76:11:56:fd:10:b4:cc:b8:a7:cc:7e:1e:
                    b9:19:2c:28:17:29:35:77:66:b1:d8:77:4a:8c:10:
                    25:52:db:b9:a0:36:46:81:a9:9b:a5:f0:a0:23:5a:
                    ea:2f:5e:32:50:f9:53:0c:67:46:b7:5b:b5:3d:40:
                    ac:9d:cc:65:fe:1f:28:82:17:48:ad:f1:c7:95:e2:
                    05:b9:a1:59:0e:57:7e:d9:0d:d1:71:b7:69:3f:d7:
                    22:fb:e4:24:01:e9:2b:5c:50:0d:30:4b:15:ee:30:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:31:E5:16:7A:92:EA:56:21:87:BA:D7:5F:E3:F3:40:C5:24:EA
            X509v3 Authority Key Identifier:
                keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:b1:77:6d:50:cf:2b:66:14:d0:6a:38:ff:0a:5f:1a:c8:
         79:e8:46:8e:72:46:49:ec:fc:83:ef:86:3e:4e:e6:48:69:d2:
         cd:e0:4c:1c:9d:17:bd:e8:2b:39:29:d3:81:b7:f7:c3:9e:6c:
         e5:92:02:5d:15:12:27:76:e0:d2:a1:61:3a:7a:10:28:ca:de:
         85:b6:78:c5:5d:08:88:8c:fa:c0:8c:1b:6f:f6:20:94:97:4f:
         0a:05:2c:c7:a2:74:8c:0b:46:ed:95:6a:62:37:d1:ab:ff:19:
         34:75:ff:29:6c:ce:de:d9:ba:58:a1:ad:e8:6c:a6:2c:45:bc:
         44:fe:ab:93:ca:f7:7a:a2:6e:88:65:85:00:71:63:40:44:e3:
         40:02:8d:2b:98:9f:bd:85:a8:30:29:ef:72:77:55:c4:9b:ed:
         1c:08:9e:2a:5a:65:9a:23:94:fe:a7:c5:bb:15:5d:fd:23:e1:
         cf:53:83:64:84:99:e8:a2:a7:2c:cb:ad:cd:4b:36:95:05:21:
         23:15:b0:a2:2b:5d:13:96:a9:bb:77:6d:22:5c:02:b8:48:77:
         90:0d:db:e8:c3:23:a7:8c:c3:83:df:16:5a:b8:56:a6:85:17:
         12:90:1a:8d:7a:ae:13:f6:86:96:1e:06:b0:5f:6e:42:88:34:
         67:31:cb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:27 2025 by rpki-client