Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File:                     Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier:          Zo4rSgN67B3qMej07zkY8DLJORJ+e36oEbr9VHU+EwM=
Subject key identifier:   C1:4D:61:2B:E4:68:31:21:55:8E:32:E2:70:C7:13:CF:3F:A7:50:61
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer:       /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial:       019748F9F6F99352F90CEAC5D76D6BF6BAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number:          0E37
Signing time:             Sat 07 Jun 2025 06:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:30 +0000
Files and hashes:         1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: /IW1P12borCRpHXibQzViSIFjNITBoYiaNPdifQ6wak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:f6:f9:93:52:f9:0c:ea:c5:d7:6d:6b:f6:ba:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
        Validity
            Not Before: Jun  7 06:00:30 2025 GMT
            Not After : Jun  8 06:00:30 2025 GMT
        Subject: CN=c14d612be4683121558e32e270c713cf3fa75061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:13:16:25:82:e8:6e:20:17:fc:7c:1a:41:
                    b9:8b:81:b2:66:54:2a:7e:2e:94:3c:ee:11:20:5b:
                    93:50:eb:d5:2c:8a:11:01:77:81:5e:70:cf:a5:50:
                    63:17:b3:42:b4:66:30:4a:2e:b2:f1:75:8b:b1:30:
                    fc:4c:37:94:7f:d7:ed:45:31:57:f5:cc:e4:55:42:
                    b4:a9:8a:6a:b0:95:c9:6b:65:43:71:a6:3c:48:c5:
                    b1:8e:63:a8:40:d3:8d:0f:cc:60:c6:e3:a5:81:62:
                    6d:8b:b3:73:2b:aa:e8:b1:9c:17:69:bb:6d:6f:f0:
                    8d:c8:6e:5c:c1:31:7f:7f:68:02:79:b0:9b:cf:9a:
                    e2:7f:11:94:b9:3c:88:03:d1:de:59:dd:d4:87:f8:
                    fc:93:61:7c:d7:f7:fa:f4:ab:ab:ba:57:32:c2:f0:
                    81:66:4d:64:97:c7:ae:43:7f:af:21:30:1d:0c:e6:
                    e6:d5:6e:9a:1e:04:be:7f:a6:01:b3:c2:89:bc:b0:
                    db:66:be:c6:34:14:80:fc:a8:ad:26:c4:f7:de:f0:
                    2c:23:3c:59:2e:1f:e3:7b:73:13:74:7d:66:49:58:
                    ea:04:d4:3b:37:80:fb:9f:07:38:07:a7:5f:10:7b:
                    d0:fd:c3:7d:7b:84:1b:1b:01:ea:2a:52:5c:23:85:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:61:2B:E4:68:31:21:55:8E:32:E2:70:C7:13:CF:3F:A7:50:61
            X509v3 Authority Key Identifier:
                keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:97:89:d5:66:e7:63:4a:06:25:1e:84:cc:56:2d:a3:09:48:
         ab:6d:34:c9:62:4e:10:be:f3:f2:10:13:25:77:dd:a4:b7:69:
         69:6d:36:d1:39:3f:8c:1d:4a:c2:6b:1f:78:b6:37:70:0c:8c:
         c1:7c:0a:16:27:a7:ff:c4:b4:8d:a0:1c:9b:f1:34:b5:6e:d8:
         62:54:6f:fe:8a:7e:69:9b:69:bc:d3:87:ab:5f:24:bf:97:90:
         ff:36:31:53:64:09:62:90:1d:8c:38:03:fd:3d:80:64:ba:66:
         16:e6:f4:c7:3d:46:cc:90:ab:9b:54:ec:e4:b5:1a:2d:7f:5e:
         89:11:64:ef:d6:63:f0:6c:4e:53:42:bc:60:e0:21:34:7a:11:
         91:7c:83:c8:d2:97:4e:db:da:21:b0:81:04:4b:ee:0e:42:ab:
         e5:a8:38:d7:2e:75:1d:33:38:a4:0a:5a:04:b1:fa:ec:b9:eb:
         07:df:db:76:08:52:89:4b:39:bb:4b:7d:7d:a1:29:76:96:0b:
         dd:24:ba:e6:68:71:3b:54:fe:1d:6c:70:24:cb:e3:77:67:a6:
         0e:25:43:05:92:50:67:9c:94:14:b9:ef:60:13:81:6f:eb:8b:
         14:05:67:f1:9e:55:5d:d3:b0:69:18:d5:b8:a1:67:f2:e6:9a:
         71:4b:35:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+fb5k1L5DOrF121r9rrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzN2Q2NGQ0NzI1NjNiN2U4NzNmNWI3OWY5MWM5ZDNmZmZj
M2RiZjkwHhcNMjUwNjA3MDYwMDMwWhcNMjUwNjA4MDYwMDMwWjAzMTEwLwYDVQQD
EyhjMTRkNjEyYmU0NjgzMTIxNTU4ZTMyZTI3MGM3MTNjZjNmYTc1MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2kTFiWC6G4gF/x8GkG5i4GyZlQq
fi6UPO4RIFuTUOvVLIoRAXeBXnDPpVBjF7NCtGYwSi6y8XWLsTD8TDeUf9ftRTFX
9czkVUK0qYpqsJXJa2VDcaY8SMWxjmOoQNOND8xgxuOlgWJti7NzK6rosZwXabtt
b/CNyG5cwTF/f2gCebCbz5rifxGUuTyIA9HeWd3Uh/j8k2F81/f69KurulcywvCB
Zk1kl8euQ3+vITAdDObm1W6aHgS+f6YBs8KJvLDbZr7GNBSA/KitJsT33vAsIzxZ
Lh/je3MTdH1mSVjqBNQ7N4D7nwc4B6dfEHvQ/cN9e4QbGwHqKlJcI4WYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFNYSvkaDEhVY4y4nDHE88/p1BhMB8GA1UdIwQY
MBaAFGN9ZNRyVjt+hz9befkcnT//w9v5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYmQ2YjQtZWViMi00ZjFiLThhYWYt
ODE3YWY4YTc2MjUwLzEvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYmQ2YjQtZWViMi00ZjFiLThhYWYtODE3YWY4YTc2MjUw
LzEvWTMxazFISldPMzZIUDF0NS1SeWRQX19EMl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJeJ1Wbn
Y0oGJR6EzFYtowlIq200yWJOEL7z8hATJXfdpLdpaW020Tk/jB1KwmsfeLY3cAyM
wXwKFien/8S0jaAcm/E0tW7YYlRv/op+aZtpvNOHq18kv5eQ/zYxU2QJYpAdjDgD
/T2AZLpmFub0xz1GzJCrm1Ts5LUaLX9eiRFk79Zj8GxOU0K8YOAhNHoRkXyDyNKX
TtvaIbCBBEvuDkKr5ag41y51HTM4pApaBLH67LnrB9/bdghSiUs5u0t9faEpdpYL
3SS65mhxO1T+HWxwJMvjd2emDiVDBZJQZ5yUFLnvYBOBb+uLFAVn8Z5VXdOwaRjV
uKFn8uaacUs1VQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client