Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
File:                     YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft (raw, json)
Hash identifier:          GjccsmmNSUahAZtqp8yW2jafkd/6xGsu7czv1erP6AA=
Subject key identifier:   1F:26:8C:9F:6F:7F:DB:18:97:F6:7A:D8:8A:4C:E1:02:F5:E7:FC:89
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Certificate issuer:       /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial:       019653B7126922076113E3F87C12DC57EDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
Manifest number:          093C
Signing time:             Sun 20 Apr 2025 15:00:28 +0000
Manifest this update:     Sun 20 Apr 2025 15:00:28 +0000
Manifest next update:     Mon 21 Apr 2025 15:00:28 +0000
Files and hashes:         1: 7EngYWaeS2TpT1X_mNY6POQq2tQ.roa (hash: zNz9kI654HO/4QgVbj5ixDAz6Dx+uvcUjyawZ8122Wg=)
                          2: YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl (hash: /ApZwoVi81S2TLltW092OI7xW0f/tw2ag+RMcLBQhqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:b7:12:69:22:07:61:13:e3:f8:7c:12:dc:57:ed:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
        Validity
            Not Before: Apr 20 15:00:28 2025 GMT
            Not After : Apr 21 15:00:28 2025 GMT
        Subject: CN=1f268c9f6f7fdb1897f67ad88a4ce102f5e7fc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4b:5b:08:21:4d:bc:7e:9d:e0:87:ca:b2:e8:
                    21:20:81:21:14:99:04:da:83:b1:f8:6e:d6:09:2e:
                    f0:54:68:15:bc:85:77:eb:1a:3d:c4:ca:42:a6:2b:
                    6d:e6:81:6e:4c:87:52:f7:c6:21:aa:2c:3d:74:40:
                    2a:27:0e:b7:ad:52:1f:03:fe:17:18:dd:6e:12:21:
                    85:5d:d3:a4:d9:1d:f0:68:66:16:1e:cf:87:6b:34:
                    93:3e:3c:99:c5:46:1a:80:88:88:b6:a9:38:40:8b:
                    bd:f2:4b:15:fd:67:30:f5:bc:e0:ac:e0:37:8c:f4:
                    3d:60:93:7b:af:83:2f:c9:38:74:97:dc:0a:d2:dc:
                    2d:34:a7:67:ea:60:6c:64:c5:ce:3a:18:03:a9:df:
                    e8:e8:ce:50:cd:ad:cd:fc:4f:ac:4d:ce:aa:13:02:
                    2e:cc:99:06:0f:33:d0:8a:3f:c2:42:0f:36:f5:f6:
                    eb:d0:54:fa:8c:35:fa:62:b7:1d:27:3c:eb:04:18:
                    15:38:b0:3e:88:bd:fd:ee:e1:51:5f:fa:42:cb:6d:
                    e9:51:4d:82:9e:e9:b5:e4:0d:b0:80:7a:52:42:50:
                    67:08:ed:46:c9:89:63:94:28:93:67:51:69:7c:52:
                    0d:f0:8d:8c:2c:cc:c8:71:85:0d:32:80:21:d7:b3:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:26:8C:9F:6F:7F:DB:18:97:F6:7A:D8:8A:4C:E1:02:F5:E7:FC:89
            X509v3 Authority Key Identifier:
                keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:b9:f8:66:99:a0:7a:2d:f7:24:04:16:17:98:e6:76:de:
         eb:a8:32:5e:ec:2d:9d:bf:05:c1:3a:52:f1:7a:95:bb:3d:53:
         4b:4e:f0:2e:bd:e6:54:bc:21:48:66:4b:28:68:b2:06:ae:b4:
         b3:2d:11:33:9c:27:19:f3:ff:28:0e:35:c4:b5:85:e7:26:41:
         40:f4:1b:b1:d3:d9:01:73:30:d9:c0:1f:fd:b6:0f:e5:2f:f0:
         81:b7:ed:5a:88:b0:c9:bf:cc:cc:13:72:e7:03:b9:c1:13:36:
         55:50:9c:4a:cd:e2:e1:66:18:e1:e9:8f:7a:a6:03:49:41:25:
         26:a8:4a:a1:17:2f:e1:6c:09:d7:68:55:d7:51:53:a8:83:54:
         74:4f:b7:b4:a0:69:2b:72:a7:01:fa:91:9d:3d:32:9d:12:80:
         c8:a4:60:0b:9f:fc:88:e7:88:e6:3c:cc:ac:27:e5:25:47:fc:
         36:a4:c1:e0:48:5a:a9:4b:bf:cd:45:b7:bc:8d:50:e1:94:01:
         9c:f8:86:22:85:88:12:06:93:99:3a:9a:23:6c:b6:40:32:da:
         9b:5c:fb:1c:dc:62:66:91:36:d8:0f:2f:88:93:16:20:66:39:
         b2:4d:bf:b1:bd:38:00:14:98:63:a9:91:99:a0:c4:fd:42:51:
         f4:da:fe:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtxJpIgdhE+P4fBLcV+3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4
YzNiZjEwHhcNMjUwNDIwMTUwMDI4WhcNMjUwNDIxMTUwMDI4WjAzMTEwLwYDVQQD
EygxZjI2OGM5ZjZmN2ZkYjE4OTdmNjdhZDg4YTRjZTEwMmY1ZTdmYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60tbCCFNvH6d4IfKsughIIEhFJkE
2oOx+G7WCS7wVGgVvIV36xo9xMpCpitt5oFuTIdS98Yhqiw9dEAqJw63rVIfA/4X
GN1uEiGFXdOk2R3waGYWHs+HazSTPjyZxUYagIiItqk4QIu98ksV/Wcw9bzgrOA3
jPQ9YJN7r4MvyTh0l9wK0twtNKdn6mBsZMXOOhgDqd/o6M5Qza3N/E+sTc6qEwIu
zJkGDzPQij/CQg829fbr0FT6jDX6YrcdJzzrBBgVOLA+iL397uFRX/pCy23pUU2C
num15A2wgHpSQlBnCO1GyYljlCiTZ1FpfFIN8I2MLMzIcYUNMoAh17MHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8mjJ9vf9sYl/Z62IpM4QL15/yJMB8GA1UdIwQY
MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt
NDIxOGIyYjY5NjNhLzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh
LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6C5+GaZ
oHot9yQEFheY5nbe66gyXuwtnb8FwTpS8XqVuz1TS07wLr3mVLwhSGZLKGiyBq60
sy0RM5wnGfP/KA41xLWF5yZBQPQbsdPZAXMw2cAf/bYP5S/wgbftWoiwyb/MzBNy
5wO5wRM2VVCcSs3i4WYY4emPeqYDSUElJqhKoRcv4WwJ12hV11FTqINUdE+3tKBp
K3KnAfqRnT0ynRKAyKRgC5/8iOeI5jzMrCflJUf8NqTB4EhaqUu/zUW3vI1Q4ZQB
nPiGIoWIEgaTmTqaI2y2QDLam1z7HNxiZpE22A8viJMWIGY5sk2/sb04ABSYY6mR
maDE/UJR9Nr+xw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:38 2025 by rpki-client