Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File:                     yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier:          Gj2sXJrBoRNGdI1WrEY5TG28EmnDD/w7c1Kst7MZXHQ=
Subject key identifier:   A5:F9:13:F4:8C:2A:41:AD:28:E2:C3:1E:97:E9:08:5A:6B:EA:33:E8
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer:       /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial:       01974742FF3777C71C4A3A68243683D2C839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number:          0C6F
Signing time:             Fri 06 Jun 2025 22:01:02 +0000
Manifest this update:     Fri 06 Jun 2025 22:01:02 +0000
Manifest next update:     Sat 07 Jun 2025 22:01:02 +0000
Files and hashes:         1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: qxuDwrIW/b1B2xygG5QBIEenmWnrD0dQL5rNfNhhQYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:ff:37:77:c7:1c:4a:3a:68:24:36:83:d2:c8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
        Validity
            Not Before: Jun  6 22:01:02 2025 GMT
            Not After : Jun  7 22:01:02 2025 GMT
        Subject: CN=a5f913f48c2a41ad28e2c31e97e9085a6bea33e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:6b:3f:7c:38:0d:9d:14:01:b2:28:da:83:
                    99:00:10:df:8f:1c:6a:88:46:c0:08:71:f3:a7:96:
                    48:f0:f3:14:5c:7e:c1:9a:d7:a0:74:f7:c4:f8:ea:
                    cb:f0:ca:a5:dd:98:76:78:1f:3c:bc:84:a3:32:0a:
                    8b:e0:06:f2:b9:18:4b:f8:13:d5:58:f1:b4:b0:df:
                    ed:16:81:91:f6:29:b6:14:f0:05:54:e6:e2:e8:8c:
                    bc:96:61:5c:17:0a:e8:04:0f:81:0b:04:7d:f9:90:
                    18:c7:dd:da:ea:2e:ea:77:49:f7:d5:cc:8c:74:1f:
                    89:a8:81:21:5b:d6:2a:38:d5:ee:18:68:4b:26:d1:
                    b5:20:ef:36:5d:12:cc:31:ae:e9:b6:16:4d:e1:bd:
                    75:74:fe:96:3e:a3:7a:c1:b6:1d:16:66:16:c1:58:
                    e8:0b:72:0a:06:bb:f7:ca:de:7f:3e:06:45:c7:de:
                    4b:ee:3c:0c:ab:3f:dd:e4:94:ed:b4:12:21:89:bc:
                    fe:b2:c0:1e:c7:5a:48:58:07:05:f4:41:1b:be:e4:
                    18:0a:a4:16:26:5d:56:8f:34:c3:06:80:cb:ae:d1:
                    08:e4:f6:e4:7c:55:db:a5:02:8b:e8:4d:c5:77:02:
                    12:90:d3:55:b9:27:73:9a:34:ae:9f:da:1f:39:af:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F9:13:F4:8C:2A:41:AD:28:E2:C3:1E:97:E9:08:5A:6B:EA:33:E8
            X509v3 Authority Key Identifier:
                keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:54:6b:65:68:93:42:f2:13:52:60:4f:e6:f1:1e:0a:60:
         3b:ef:f9:a7:a5:13:a2:e5:da:e1:ff:20:9b:1b:f5:d5:3f:18:
         34:b2:ed:90:f6:61:75:16:02:2d:5a:5b:f5:6e:70:bd:27:cf:
         45:41:a1:b8:c3:2f:23:c6:68:c7:63:d7:56:d7:b0:f0:65:3d:
         83:e1:6b:f8:35:04:aa:06:53:6d:20:c7:da:f5:cf:db:21:28:
         d0:19:74:0e:df:ea:85:a0:82:dc:05:81:63:1c:55:67:3c:7e:
         e3:a1:f3:28:4a:b7:e5:43:ca:d2:98:89:db:ff:6b:ab:6c:91:
         d9:de:31:02:3a:63:40:ba:de:61:f0:4c:e7:93:92:26:4c:37:
         02:36:6f:a8:b2:15:70:02:41:76:14:88:cd:25:88:42:1b:4a:
         ba:b3:f4:6c:61:6f:05:88:40:2e:02:9b:48:a6:7c:c1:21:20:
         41:2f:ec:10:ec:23:30:e6:2c:db:71:b6:da:25:60:20:5d:4d:
         62:cc:50:cd:db:58:8f:30:55:39:bd:80:60:d1:67:f7:7b:6f:
         b8:d7:54:6c:e4:2c:d0:ae:43:a7:5b:73:05:8e:19:0d:32:ff:
         28:ff:32:14:d6:84:e4:98:27:bd:1b:5b:4f:35:46:b6:8c:63:
         70:b7:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:00 2025 by rpki-client