Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
File:                     yvIzYtwacUU22LXhQ_edraACcT0.mft (raw, json)
Hash identifier:          38/yA2gntoFtvDvCkwOhi6mSpflbavrZhAqB2taPEYE=
Subject key identifier:   A5:34:26:9D:4D:67:17:D1:8C:49:E7:95:92:1C:0B:CB:DC:7C:79:24
Authority key identifier: CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D
Certificate issuer:       /CN=caf23362dc1a714536d8b5e143f79dada002713d
Certificate serial:       019749681E20E7CF72232458236A7108D13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
Manifest number:          0661
Signing time:             Sat 07 Jun 2025 08:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:49 +0000
Files and hashes:         1: yvIzYtwacUU22LXhQ_edraACcT0.crl (hash: izEUOSk1M2G0fhI4sdmZ1l0pqHVfjCANwgPwDX8kr40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:1e:20:e7:cf:72:23:24:58:23:6a:71:08:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf23362dc1a714536d8b5e143f79dada002713d
        Validity
            Not Before: Jun  7 08:00:49 2025 GMT
            Not After : Jun  8 08:00:49 2025 GMT
        Subject: CN=a534269d4d6717d18c49e795921c0bcbdc7c7924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:cf:64:96:cc:67:fd:8e:b3:b2:7f:2a:45:
                    34:01:5d:18:ed:9f:5d:7e:99:be:82:e1:85:28:7e:
                    ec:a3:ec:b5:03:d2:8f:b8:9e:66:c8:e7:55:84:19:
                    96:01:89:4f:c8:24:4a:c5:0d:23:c1:01:57:40:1b:
                    6f:cc:a6:94:ed:a1:ff:04:15:95:3c:c6:e6:6d:64:
                    35:65:b2:97:16:d2:1e:6d:6a:3d:47:c0:f8:c3:fa:
                    d5:47:ea:75:24:17:a8:7f:81:e0:e1:f9:61:67:a4:
                    88:2c:11:e8:f3:41:46:cf:ab:a1:4e:1e:fe:92:db:
                    13:9c:b1:1f:6d:f3:8b:01:6b:de:fa:7c:f1:14:18:
                    ab:31:96:89:b7:d8:e5:d2:73:c7:be:53:a9:06:ec:
                    19:4f:27:69:4f:5e:6d:56:84:d7:de:32:eb:66:8c:
                    24:34:81:a3:4d:77:bf:1d:e6:e8:07:c3:c6:1b:38:
                    27:fd:51:f3:77:5f:32:dd:00:4a:9e:7f:c9:82:8b:
                    15:4f:2b:b1:f2:30:72:31:9d:2e:ff:a0:ed:51:aa:
                    c7:2b:a9:84:a5:7b:0a:0d:d3:db:2c:eb:69:1f:95:
                    da:3d:ae:23:02:3b:05:8d:48:98:04:04:9f:6e:59:
                    70:9f:a8:32:0f:a0:b1:9d:95:7f:bb:ac:b6:50:21:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:34:26:9D:4D:67:17:D1:8C:49:E7:95:92:1C:0B:CB:DC:7C:79:24
            X509v3 Authority Key Identifier:
                keyid:CA:F2:33:62:DC:1A:71:45:36:D8:B5:E1:43:F7:9D:AD:A0:02:71:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvIzYtwacUU22LXhQ_edraACcT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a90bc4-0b3b-4b1b-9996-07abe8369428/1/yvIzYtwacUU22LXhQ_edraACcT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a3:10:cf:be:3f:35:9d:48:fc:d7:1c:0c:cc:08:d7:07:69:
         69:86:ab:17:96:dc:13:b0:4e:42:57:50:76:a9:c9:90:96:41:
         5b:e3:33:59:9e:d2:82:e8:27:8a:07:8d:fb:bf:1e:71:12:6f:
         d0:9b:80:5e:69:3b:7f:0c:74:9a:9f:f9:b1:f6:bd:b2:a1:b1:
         70:6c:48:d8:1b:ab:14:75:09:89:3f:b9:e0:f4:c6:63:62:0a:
         f3:37:77:6b:e0:ea:6a:f9:55:b2:84:5e:71:76:63:6b:67:2f:
         18:d4:2b:ed:f6:a7:e9:85:4d:2a:e5:ff:fc:a6:0f:cf:38:dc:
         86:1b:bd:cd:89:e5:ee:42:f7:ca:6e:58:39:ea:0d:c0:e4:12:
         5d:03:ae:86:c3:36:a1:81:bd:65:75:e8:e0:8c:97:4c:39:23:
         e7:a4:98:c7:1e:4a:cb:e0:bf:16:b1:57:6c:35:0f:e1:f7:bf:
         34:f5:2a:80:d3:9c:78:dd:d1:4d:d1:c6:0e:1b:7f:e4:15:67:
         bf:a7:82:e9:7b:b0:4f:34:48:5a:b0:3e:43:6f:2b:97:d0:67:
         8f:ce:96:47:70:79:49:a8:e7:d4:82:97:40:5d:76:89:12:8b:
         85:3b:1c:1b:0f:f4:93:2f:f3:ee:29:4c:b5:1a:87:7c:4a:4d:
         2a:a1:5e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaB4g589yIyRYI2pxCNE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZjIzMzYyZGMxYTcxNDUzNmQ4YjVlMTQzZjc5ZGFkYTAw
MjcxM2QwHhcNMjUwNjA3MDgwMDQ5WhcNMjUwNjA4MDgwMDQ5WjAzMTEwLwYDVQQD
EyhhNTM0MjY5ZDRkNjcxN2QxOGM0OWU3OTU5MjFjMGJjYmRjN2M3OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9PPZJbMZ/2Os7J/KkU0AV0Y7Z9d
fpm+guGFKH7so+y1A9KPuJ5myOdVhBmWAYlPyCRKxQ0jwQFXQBtvzKaU7aH/BBWV
PMbmbWQ1ZbKXFtIebWo9R8D4w/rVR+p1JBeof4Hg4flhZ6SILBHo80FGz6uhTh7+
ktsTnLEfbfOLAWve+nzxFBirMZaJt9jl0nPHvlOpBuwZTydpT15tVoTX3jLrZowk
NIGjTXe/HeboB8PGGzgn/VHzd18y3QBKnn/JgosVTyux8jByMZ0u/6DtUarHK6mE
pXsKDdPbLOtpH5XaPa4jAjsFjUiYBASfbllwn6gyD6CxnZV/u6y2UCHp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU0Jp1NZxfRjEnnlZIcC8vcfHkkMB8GA1UdIwQY
MBaAFMryM2LcGnFFNti14UP3na2gAnE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYt
MDdhYmU4MzY5NDI4LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hOTBiYzQtMGIzYi00YjFiLTk5OTYtMDdhYmU4MzY5NDI4
LzEveXZJell0d2FjVVUyMkxYaFFfZWRyYUFDY1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6MQz74/
NZ1I/NccDMwI1wdpaYarF5bcE7BOQldQdqnJkJZBW+MzWZ7SgugnigeN+78ecRJv
0JuAXmk7fwx0mp/5sfa9sqGxcGxI2BurFHUJiT+54PTGY2IK8zd3a+DqavlVsoRe
cXZja2cvGNQr7fan6YVNKuX//KYPzzjchhu9zYnl7kL3ym5YOeoNwOQSXQOuhsM2
oYG9ZXXo4IyXTDkj56SYxx5Ky+C/FrFXbDUP4fe/NPUqgNOceN3RTdHGDht/5BVn
v6eC6XuwTzRIWrA+Q28rl9Bnj86WR3B5Sajn1IKXQF12iRKLhTscGw/0ky/z7ilM
tRqHfEpNKqFezg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:02:09 2025 by rpki-client