Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File:                     YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier:          CvVbwPVMFdeYatfadvJn5nxrRyk+1gYbpfRnnWsa9Fc=
Subject key identifier:   C4:A4:F9:D3:5D:5F:21:97:34:AF:88:48:45:56:CB:25:19:5F:B7:54
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       019611A115BE1373499473548DC193CF14D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number:          01C8
Signing time:             Mon 07 Apr 2025 19:01:31 +0000
Manifest this update:     Mon 07 Apr 2025 19:01:31 +0000
Manifest next update:     Tue 08 Apr 2025 19:01:31 +0000
Files and hashes:         1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: UBkkDTeIuUvP2wxlG7hvAp+KnxgRd3AsX5le4V9LheY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a1:15:be:13:73:49:94:73:54:8d:c1:93:cf:14:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: Apr  7 19:01:31 2025 GMT
            Not After : Apr  8 19:01:31 2025 GMT
        Subject: CN=c4a4f9d35d5f219734af88484556cb25195fb754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:47:3a:72:8a:fb:df:25:b2:1a:98:1b:14:
                    b8:6d:01:fe:57:d5:b6:f2:e2:10:8c:d7:e5:40:68:
                    c1:8b:b0:fd:d0:cc:4d:3c:04:2e:ce:b1:1d:7b:01:
                    c7:b1:36:c2:b4:21:27:72:42:d9:11:35:49:c8:55:
                    db:d9:63:f3:ec:5e:41:5f:96:ba:b1:a1:f0:56:d2:
                    15:a2:12:2e:85:cd:1f:f8:06:e3:e7:1e:f7:0e:81:
                    a0:f7:43:90:5d:ac:2d:bc:78:78:05:e1:0f:3d:41:
                    7c:4d:f5:8b:7d:2a:03:ec:1d:b3:53:75:f1:f8:88:
                    17:f8:b3:f1:b6:6d:66:aa:25:00:71:ac:3c:f3:ae:
                    5e:ca:92:c6:78:45:89:23:e9:b1:34:c5:1d:0d:02:
                    fc:ab:4a:6c:e3:32:e9:05:80:f8:55:75:11:88:bd:
                    4a:43:8f:ce:e0:5c:31:c6:06:64:c0:93:1b:01:1f:
                    1a:2c:9a:39:0b:56:50:aa:e5:b7:7c:b8:e2:0f:d5:
                    8f:6f:61:ca:40:92:93:54:88:78:8d:fe:80:e3:88:
                    b7:cc:42:55:33:97:eb:94:0c:2e:ab:49:d9:35:5a:
                    bf:37:26:24:84:20:ab:1a:f7:b2:12:59:57:91:e7:
                    45:49:5c:c1:e5:a4:ef:5a:41:dd:17:45:fa:f8:e5:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:F9:D3:5D:5F:21:97:34:AF:88:48:45:56:CB:25:19:5F:B7:54
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:98:50:34:13:3b:c2:f6:96:2f:6e:db:19:39:f2:62:c6:f8:
         32:7d:00:7e:35:99:e9:eb:c7:37:8c:a1:40:01:af:3f:95:97:
         82:26:73:fb:36:01:39:3d:b7:7a:4d:5f:7a:96:5d:70:90:ac:
         8a:9e:d3:99:16:5d:ef:9c:21:2e:48:16:5d:9e:69:7c:43:4f:
         72:c6:f0:85:02:e7:7d:6d:58:32:bc:63:37:bd:67:76:b7:cb:
         66:b8:89:ec:ec:ef:fc:1c:9f:92:ad:1b:bc:f7:5f:27:89:2a:
         b6:21:54:b3:9b:de:54:28:4c:95:8e:5e:96:42:90:22:68:7a:
         36:7d:b6:02:1b:8f:10:0d:93:2d:fa:03:f3:d8:b9:27:7c:ba:
         c3:e4:a7:c1:e3:7e:00:22:4a:f9:2e:33:60:45:98:52:7e:0c:
         f4:a6:72:37:52:4a:a8:96:c6:7f:4b:dc:e4:6a:d5:e7:2a:a2:
         b8:16:47:4f:97:cb:c5:b8:4b:dc:7d:e6:6e:d5:55:42:c0:74:
         1e:cb:73:7f:6a:63:c7:ea:b3:9e:bf:6e:e6:02:82:58:1a:15:
         4f:09:3a:29:eb:20:64:55:bd:0a:1c:f0:2f:18:1e:fa:42:52:
         63:99:f1:25:40:23:f4:f1:42:70:84:6e:a4:be:f4:d5:19:e3:
         e4:be:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:13 2025 by rpki-client