Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File:                     yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier:          peHyHG9x+qlCMrSC8PGIGK/vKC07258ou/LnVmmxNzs=
Subject key identifier:   B5:8B:38:7F:93:A1:A3:EC:DE:20:91:96:A1:A3:C0:A7:E7:51:B1:A3
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer:       /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial:       019750469342E34715DEA8DD0D45553451ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number:          089B
Signing time:             Sun 08 Jun 2025 16:01:31 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:31 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:31 +0000
Files and hashes:         1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: yIaAJnFf2p/41p3q+mLJH/qg+/RPvwTmDfuofALa42Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:93:42:e3:47:15:de:a8:dd:0d:45:55:34:51:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
        Validity
            Not Before: Jun  8 16:01:31 2025 GMT
            Not After : Jun  9 16:01:31 2025 GMT
        Subject: CN=b58b387f93a1a3ecde209196a1a3c0a7e751b1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:4c:06:ed:52:2c:bf:e7:7c:59:c0:30:78:
                    50:b1:9a:1c:16:4f:40:bb:9d:d9:6c:47:5c:cf:00:
                    ec:c1:1c:d2:bd:60:0e:3a:3d:ff:2b:34:71:4f:39:
                    d8:a8:3d:ab:84:49:68:be:42:a1:89:cf:dc:98:76:
                    ed:a2:b6:c1:e3:86:18:55:83:4d:89:6a:b0:c4:86:
                    9d:97:0d:45:cb:0e:30:ba:db:12:50:47:6b:7e:a1:
                    8a:59:53:af:9e:8f:e5:19:5c:c0:ed:1b:86:07:1e:
                    5d:51:26:c3:ff:2d:8a:7c:98:ba:c0:87:ab:db:bd:
                    a2:30:81:04:5d:df:f3:ec:56:a9:92:12:be:b5:a7:
                    00:8c:cd:a7:fe:d2:85:2c:f7:5c:65:b8:7a:ca:72:
                    07:62:3c:a6:70:8e:e8:d4:54:f6:56:2e:75:ed:e3:
                    47:8a:e5:a8:d6:2d:c8:9a:78:06:af:f6:0f:f1:cc:
                    2d:1d:0b:4e:e3:13:95:be:bc:8a:5d:de:af:e7:bc:
                    ec:37:94:38:f0:9f:e7:fb:b8:a1:a2:16:95:cd:cd:
                    5c:67:61:db:21:e4:b3:82:c3:c5:ba:54:96:c6:2b:
                    b4:6f:fc:41:27:cb:06:ef:a2:34:0d:21:10:6b:0b:
                    c5:27:ce:a2:d9:a8:dd:ea:8a:6e:6e:8c:49:78:69:
                    da:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:38:7F:93:A1:A3:EC:DE:20:91:96:A1:A3:C0:A7:E7:51:B1:A3
            X509v3 Authority Key Identifier:
                keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f1:b4:df:8f:8f:fa:78:66:8d:f9:cb:2e:d8:e7:20:26:c5:
         02:f3:af:c9:03:5f:31:e3:63:9f:ab:99:aa:00:68:7f:1b:4a:
         85:c2:d2:bd:fc:3c:54:d4:ae:79:92:7e:d8:d7:83:ae:fc:f0:
         30:d9:6e:86:d1:de:a2:d2:36:8f:4c:c6:4d:e9:99:43:66:1f:
         cf:ac:b1:ac:e1:4b:89:1d:4a:1c:79:9b:21:8a:3b:3d:0b:f6:
         ee:04:28:88:20:90:28:7d:5a:88:93:d9:db:cc:38:e0:24:b8:
         94:3d:e1:25:4a:3a:0d:52:a2:f3:ae:6c:49:80:24:aa:ab:ee:
         91:ec:d2:c9:03:83:07:83:62:89:c7:65:cb:6c:61:22:d1:ab:
         a5:42:ee:64:b7:ce:8d:ba:87:b4:c7:ef:db:93:82:11:8b:82:
         43:74:41:30:e9:7c:af:c2:e9:16:87:ad:a0:bf:a9:a0:ad:2a:
         31:96:ee:e7:50:16:2c:ce:42:8d:8d:b1:4d:e8:8d:8d:13:66:
         72:70:5d:16:2b:7d:5c:96:5f:6a:fa:26:ff:46:3e:1e:54:4f:
         d1:80:3a:af:1d:ff:dd:de:04:16:19:b8:20:9f:2a:54:fd:e3:
         db:25:87:62:1b:09:a4:b4:c3:6d:3d:89:b5:14:e9:30:08:08:
         01:0f:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:53:00 2025 by rpki-client