Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          bX4i4MUWWi6/HYYn26fK8Em8UiboMX67aNNWeLwXAEs=
Subject key identifier:   3D:31:36:0F:80:4D:AF:8E:1A:20:66:E8:F6:5B:85:3F:0A:C4:3C:C8
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       019649A186107D99781635BB9EBC92184AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          1150
Signing time:             Fri 18 Apr 2025 16:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 16:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 16:00:44 +0000
Files and hashes:         1: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: ff1lM9bLqllDI9YKxTLwumpPHhoXP7Z52B0GXeqAigY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:86:10:7d:99:78:16:35:bb:9e:bc:92:18:4a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Apr 18 16:00:44 2025 GMT
            Not After : Apr 19 16:00:44 2025 GMT
        Subject: CN=3d31360f804daf8e1a2066e8f65b853f0ac43cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:90:87:05:db:67:2d:2e:c3:ca:dc:ee:90:
                    74:e3:e0:70:c6:fe:40:e3:bf:78:73:e3:ff:43:f4:
                    a5:73:78:f1:f6:a7:bb:a4:bc:a4:15:c7:e5:f1:10:
                    37:7e:99:ab:65:47:f3:5b:cf:60:62:b4:8f:08:59:
                    49:d0:13:67:0a:5d:17:d9:aa:c0:be:d9:a2:70:01:
                    92:19:9e:8f:e7:b6:39:bc:e6:73:5a:28:2e:58:ce:
                    54:75:a8:79:72:95:81:03:71:ed:e3:40:42:90:4d:
                    f1:09:65:4e:8d:09:8a:f2:bb:6e:f4:09:3f:a6:ab:
                    f3:46:d1:10:34:2c:da:48:3f:73:5d:d9:e1:62:2f:
                    0e:92:44:c3:86:bc:58:c7:8d:0c:24:af:5e:59:fe:
                    fd:03:93:76:8c:68:7f:ed:e2:fa:68:fa:88:85:17:
                    9b:a7:cc:fd:07:0f:58:31:c8:6a:6e:0c:47:b7:51:
                    cc:64:72:99:e2:cd:4f:60:b4:7c:f6:9b:da:71:94:
                    cb:a3:d2:4f:cb:54:0f:d8:1a:c5:2b:ec:f6:92:27:
                    2b:a6:70:d6:12:95:85:af:83:55:ce:b1:14:0b:6a:
                    8d:09:9a:f3:75:15:74:a9:84:db:88:ba:fb:c8:08:
                    d0:c1:d0:b3:13:4f:ae:c5:db:d7:a3:61:67:3d:4a:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:31:36:0F:80:4D:AF:8E:1A:20:66:E8:F6:5B:85:3F:0A:C4:3C:C8
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:aa:d0:b2:92:9e:8a:57:3c:cf:a4:5d:a2:bf:7d:56:51:
         1b:f8:68:9d:d3:ce:28:5a:34:64:47:07:1c:c3:9c:43:e5:41:
         89:c0:6d:15:fb:41:c2:c7:08:35:c8:64:a8:82:d2:6a:20:46:
         01:71:70:bc:d8:5c:20:b2:e3:cc:14:2d:87:10:48:73:72:be:
         84:be:a5:56:5e:6e:c1:d3:b2:ab:53:d7:a1:a4:3c:86:d2:81:
         30:85:1b:a6:9e:0f:c1:20:ba:bb:a1:d3:60:f0:e3:60:fe:7d:
         dc:88:b7:85:18:25:fd:59:d2:8c:d1:23:53:31:24:93:44:8a:
         67:22:fa:8c:39:3a:49:1e:e8:a0:0f:89:b6:47:43:0b:96:e4:
         a8:93:70:7c:79:66:56:35:fa:a5:8c:58:d7:03:54:e8:7f:53:
         6f:81:a1:9c:82:6b:26:fc:e4:60:97:b5:6f:6b:41:13:40:64:
         43:28:cc:55:47:a5:fa:3a:d7:17:f8:31:44:19:b4:05:bc:cf:
         e3:f3:61:c3:27:f0:d0:a9:8d:95:76:44:5a:77:7c:0d:52:6a:
         d4:dd:2c:2c:e1:3c:2c:5f:08:ea:d8:68:d6:45:de:b3:5c:35:
         13:ab:e8:00:d3:9a:93:3a:6a:3d:c9:c6:7c:35:29:5e:5d:fd:
         2d:28:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:42:57 2025 by rpki-client