Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File:                     YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier:          8vsL9BcFw1f66+fDNxvTqFvNasPk4yEyOm7aSAzOGKc=
Subject key identifier:   A1:C3:B0:0D:B6:C9:D2:B7:F1:D0:5E:A7:A2:50:6E:19:6A:D9:11:06
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer:       /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial:       0197469E9DC1008C9ABE6BFBE8A9C5DF7500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number:          1180
Signing time:             Fri 06 Jun 2025 19:01:29 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:29 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:29 +0000
Files and hashes:         1: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: r7bnGg6UFDefcMKXGwLbXh/8YOMxDPccssLi1rmD20U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:9d:c1:00:8c:9a:be:6b:fb:e8:a9:c5:df:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
        Validity
            Not Before: Jun  6 19:01:29 2025 GMT
            Not After : Jun  7 19:01:29 2025 GMT
        Subject: CN=a1c3b00db6c9d2b7f1d05ea7a2506e196ad91106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:e9:37:81:dc:68:15:4c:05:71:eb:4c:4a:
                    2d:61:05:40:42:39:fd:35:84:46:ed:b7:f6:02:c1:
                    04:8a:f6:f6:de:92:1a:87:0f:b4:72:fd:70:85:9d:
                    ee:09:e0:a7:0e:c1:ff:ef:70:d9:fa:c8:78:d5:05:
                    0c:47:bb:29:83:81:f6:72:3c:a6:eb:d2:a8:7b:5e:
                    67:3d:09:38:63:b1:06:21:03:ec:71:ce:15:71:16:
                    b9:12:e8:18:57:5e:04:a1:a5:27:0e:b0:4b:86:54:
                    59:90:e4:a6:ce:d5:61:3e:8d:5c:2e:bc:63:dc:d5:
                    a0:7b:8c:3a:93:50:09:d4:72:be:53:8d:a0:75:f9:
                    e4:63:b4:4b:e4:3e:fb:4e:93:f1:03:53:50:7e:50:
                    04:ea:3d:7d:83:44:d2:0d:4a:b3:d3:08:e1:49:09:
                    a7:4d:6d:65:f2:a4:64:b8:c7:be:e2:78:10:ed:0b:
                    bc:51:4d:1c:85:7b:66:f8:fb:93:36:92:09:39:63:
                    cc:a0:a8:80:19:a8:d5:b9:2e:ff:c2:a7:7c:cd:b2:
                    86:65:9a:0d:90:8e:a6:48:73:44:7a:64:19:e1:75:
                    9e:36:84:60:b5:9c:b3:f2:25:36:a6:9d:38:b9:68:
                    a9:92:24:2b:07:9a:1f:b1:f0:b5:f3:e0:32:95:a2:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C3:B0:0D:B6:C9:D2:B7:F1:D0:5E:A7:A2:50:6E:19:6A:D9:11:06
            X509v3 Authority Key Identifier:
                keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:bf:e4:44:98:10:34:73:48:62:29:03:f0:18:9f:f2:1f:
         ef:0b:cf:35:b0:eb:0b:42:7c:45:5b:2d:ce:3b:05:fb:5f:90:
         60:d5:17:fd:08:a0:26:28:75:9a:52:ac:65:8a:bd:33:62:26:
         37:b1:c2:15:9c:a3:74:78:c0:49:4c:76:b0:9b:d8:51:fa:fc:
         84:f4:55:ae:ba:1b:00:f3:de:e3:1b:09:cd:e9:b6:7b:62:a8:
         8e:01:af:5a:d9:89:db:04:e1:57:ea:4b:ed:71:d2:ea:ce:1f:
         48:1c:b9:c9:f6:79:ca:6c:13:83:f5:39:f0:42:c7:16:e2:b5:
         b0:97:96:d9:4d:31:23:d4:89:62:2e:29:79:17:d6:77:8b:8b:
         c5:e5:96:82:c6:bb:c1:bd:95:8a:94:d1:b6:54:9a:49:4c:ff:
         63:85:fe:cb:4d:9b:65:9f:b0:3c:62:e7:fd:f4:7a:50:ff:e2:
         94:8c:66:3a:54:02:93:ae:d4:91:b4:9d:85:3d:f8:7c:98:93:
         39:8a:0d:ff:24:f2:f0:37:c2:b4:4b:e7:62:69:66:23:3c:4d:
         ce:bf:8c:ae:a2:a9:14:5a:ba:7d:dc:4c:86:c6:98:1e:9a:d7:
         a3:72:ab:41:46:ee:24:a2:31:76:f6:6b:65:36:a9:0d:22:fc:
         2e:0d:b8:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnp3BAIyavmv76KnF33UAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5
ZmUwN2IwHhcNMjUwNjA2MTkwMTI5WhcNMjUwNjA3MTkwMTI5WjAzMTEwLwYDVQQD
EyhhMWMzYjAwZGI2YzlkMmI3ZjFkMDVlYTdhMjUwNmUxOTZhZDkxMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTbpN4HcaBVMBXHrTEotYQVAQjn9
NYRG7bf2AsEEivb23pIahw+0cv1whZ3uCeCnDsH/73DZ+sh41QUMR7spg4H2cjym
69Koe15nPQk4Y7EGIQPscc4VcRa5EugYV14EoaUnDrBLhlRZkOSmztVhPo1cLrxj
3NWge4w6k1AJ1HK+U42gdfnkY7RL5D77TpPxA1NQflAE6j19g0TSDUqz0wjhSQmn
TW1l8qRkuMe+4ngQ7Qu8UU0chXtm+PuTNpIJOWPMoKiAGajVuS7/wqd8zbKGZZoN
kI6mSHNEemQZ4XWeNoRgtZyz8iU2pp04uWipkiQrB5ofsfC18+AylaJykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHDsA22ydK38dBep6JQbhlq2REGMB8GA1UdIwQY
MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt
MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2
LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARby/5ESY
EDRzSGIpA/AYn/If7wvPNbDrC0J8RVstzjsF+1+QYNUX/QigJih1mlKsZYq9M2Im
N7HCFZyjdHjASUx2sJvYUfr8hPRVrrobAPPe4xsJzem2e2KojgGvWtmJ2wThV+pL
7XHS6s4fSBy5yfZ5ymwTg/U58ELHFuK1sJeW2U0xI9SJYi4peRfWd4uLxeWWgsa7
wb2VipTRtlSaSUz/Y4X+y02bZZ+wPGLn/fR6UP/ilIxmOlQCk67UkbSdhT34fJiT
OYoN/yTy8DfCtEvnYmlmIzxNzr+MrqKpFFq6fdxMhsaYHprXo3KrQUbuJKIxdvZr
ZTapDSL8Lg244Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:00 2025 by rpki-client