Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File:                     YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier:          Gf1W1p60b9ciRbVMGYHlJJ5cYWcMQXYpIWUZVu20i+Q=
Subject key identifier:   A3:A2:C4:94:8A:BF:7D:BF:60:81:05:E4:2D:E5:8E:00:F1:71:66:DE
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer:       /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial:       0196507F19C26BF6EBABA0542D7F52FA66DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number:          0AF7
Signing time:             Sun 20 Apr 2025 00:00:29 +0000
Manifest this update:     Sun 20 Apr 2025 00:00:29 +0000
Manifest next update:     Mon 21 Apr 2025 00:00:29 +0000
Files and hashes:         1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: kchCPytu4szli9azd8DCYNNhldqulSqNbK5m+aDyskA=)
                          2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:7f:19:c2:6b:f6:eb:ab:a0:54:2d:7f:52:fa:66:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
        Validity
            Not Before: Apr 20 00:00:29 2025 GMT
            Not After : Apr 21 00:00:29 2025 GMT
        Subject: CN=a3a2c4948abf7dbf608105e42de58e00f17166de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:9a:54:b8:33:16:6a:1b:d4:6f:4d:eb:a8:
                    18:ed:c2:30:de:d1:02:a0:81:7d:a9:e8:88:d2:0a:
                    e2:ed:f4:a5:a5:55:05:4a:ae:5c:7a:bc:b7:57:d2:
                    32:3d:1c:6b:fd:f9:55:e2:e6:8d:f1:de:2a:8e:91:
                    0c:a0:bf:a8:f3:80:f9:4c:50:19:57:ac:11:39:af:
                    90:fc:82:29:1e:f7:09:1e:78:7f:84:92:53:02:b6:
                    47:10:e0:7c:8d:06:41:63:a1:29:5d:f0:8c:a1:38:
                    d6:28:24:96:d9:a7:30:23:bd:1b:49:94:56:45:70:
                    1e:e1:82:70:2b:79:36:30:44:5c:03:06:0b:43:15:
                    da:f0:8b:d2:58:6b:e3:47:32:0c:44:11:d7:b0:64:
                    c1:cd:09:c6:b9:be:76:e1:d1:b2:00:eb:57:0d:88:
                    2c:5d:ad:73:e7:dc:b9:95:d4:32:81:15:51:87:46:
                    35:bd:a2:00:41:8c:f6:00:2e:13:31:48:72:3e:2d:
                    62:36:97:76:36:dc:3d:21:5d:84:83:b5:12:7a:b6:
                    be:9b:a8:ac:28:a2:0a:86:39:e6:65:6a:da:3b:ce:
                    84:3c:61:f6:e3:2b:6d:bb:79:db:74:b3:19:2d:35:
                    bb:47:b1:cd:60:94:db:2e:54:1a:97:e7:03:10:53:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A2:C4:94:8A:BF:7D:BF:60:81:05:E4:2D:E5:8E:00:F1:71:66:DE
            X509v3 Authority Key Identifier:
                keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:8b:ff:64:4a:0c:5e:cc:03:93:bf:9f:6d:8b:40:68:9c:
         ca:2f:7e:c6:dd:49:85:f7:55:34:bf:82:54:6c:4c:ff:e8:c9:
         5b:f5:ae:d8:01:a9:f1:7f:0a:4c:59:ae:7b:27:ef:a1:41:61:
         2d:39:da:28:0d:07:02:65:39:e9:84:d1:5b:9c:b3:a8:5b:bb:
         c6:f1:a0:da:3d:2c:bb:f7:51:77:e4:9f:cb:b7:a0:d7:d0:a5:
         1c:45:02:b6:e3:a9:a4:f1:07:28:62:f6:13:3c:c1:e2:aa:31:
         fb:9b:ee:73:fc:e1:69:ec:76:e1:87:bb:05:34:ac:fe:7e:78:
         a8:c7:74:6b:95:1b:32:3a:47:f7:a3:93:c5:fc:66:1f:1c:35:
         ce:6f:83:c4:93:e0:4c:b6:e5:47:75:79:73:ec:50:d0:ac:9b:
         cf:1f:4e:14:46:15:3a:3f:d2:ac:a6:5e:0f:d4:46:51:b1:71:
         61:e7:55:2c:41:29:b1:ac:2d:f5:33:64:89:9b:88:3c:c8:f8:
         56:60:ab:ba:65:a4:3e:da:17:0f:b7:1b:49:41:35:74:59:87:
         b3:6a:7f:85:c5:76:11:13:a7:9a:51:a0:c1:c4:36:22:3a:f0:
         00:f5:e4:df:41:ae:f7:ba:01:6a:d7:7a:14:f0:c6:26:87:c0:
         e3:d6:99:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQfxnCa/brq6BULX9S+mbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjgyNGI4NWFiYTdiYzM1MTJiMTIxNGIzODVkZTU3MGZi
Mjk0YmYwHhcNMjUwNDIwMDAwMDI5WhcNMjUwNDIxMDAwMDI5WjAzMTEwLwYDVQQD
EyhhM2EyYzQ5NDhhYmY3ZGJmNjA4MTA1ZTQyZGU1OGUwMGYxNzE2NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23GaVLgzFmob1G9N66gY7cIw3tEC
oIF9qeiI0gri7fSlpVUFSq5cery3V9IyPRxr/flV4uaN8d4qjpEMoL+o84D5TFAZ
V6wROa+Q/IIpHvcJHnh/hJJTArZHEOB8jQZBY6EpXfCMoTjWKCSW2acwI70bSZRW
RXAe4YJwK3k2MERcAwYLQxXa8IvSWGvjRzIMRBHXsGTBzQnGub524dGyAOtXDYgs
Xa1z59y5ldQygRVRh0Y1vaIAQYz2AC4TMUhyPi1iNpd2Ntw9IV2Eg7USera+m6is
KKIKhjnmZWraO86EPGH24yttu3nbdLMZLTW7R7HNYJTbLlQal+cDEFNRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOixJSKv32/YIEF5C3ljgDxcWbeMB8GA1UdIwQY
MBaAFGG4JLhaunvDUSsSFLOF3lcPspS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAt
ZWE2ZWQyOWNhYjVlLzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jMGU3YTEtMDZmNS00Y2EwLTgyMTAtZWE2ZWQyOWNhYjVl
LzEvWWJna3VGcTZlOE5SS3hJVXM0WGVWdy15bEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksWL/2RK
DF7MA5O/n22LQGicyi9+xt1JhfdVNL+CVGxM/+jJW/Wu2AGp8X8KTFmueyfvoUFh
LTnaKA0HAmU56YTRW5yzqFu7xvGg2j0su/dRd+Sfy7eg19ClHEUCtuOppPEHKGL2
EzzB4qox+5vuc/zhaex24Ye7BTSs/n54qMd0a5UbMjpH96OTxfxmHxw1zm+DxJPg
TLblR3V5c+xQ0Kybzx9OFEYVOj/SrKZeD9RGUbFxYedVLEEpsawt9TNkiZuIPMj4
VmCrumWkPtoXD7cbSUE1dFmHs2p/hcV2EROnmlGgwcQ2IjrwAPXk30Gu97oBatd6
FPDGJofA49aZWA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:45 2025 by rpki-client