Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          qsMgLewshrV2ahgnrHiQNaC7Ug2ZEAtXNLI2kEpvWK8=
Subject key identifier:   18:88:AD:FE:6F:DB:D2:35:76:92:79:5F:D3:97:B9:92:13:00:7C:A0
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       01976F9A5CDEB47B9797EC5FD42A0D542B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          0479
Signing time:             Sat 14 Jun 2025 18:01:16 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:16 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:16 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: 7PXTy+LKWOm8EXdWpYTQPpHFiNYx4dKq5MuXthkCSgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:5c:de:b4:7b:97:97:ec:5f:d4:2a:0d:54:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Jun 14 18:01:16 2025 GMT
            Not After : Jun 15 18:01:16 2025 GMT
        Subject: CN=1888adfe6fdbd2357692795fd397b99213007ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:57:6a:48:f3:0c:06:07:0e:80:16:f6:ad:
                    59:d8:35:59:6d:25:71:25:c0:ee:bf:f4:a7:78:fd:
                    41:71:01:c0:82:fb:86:71:c5:05:bf:43:ad:1e:94:
                    5d:5a:a5:86:20:05:97:1b:df:1f:d9:31:d7:b9:5b:
                    11:37:95:b1:2f:0e:f6:16:2b:50:21:52:51:65:80:
                    df:81:41:20:9b:cf:cb:f4:9d:d9:3b:1f:03:b6:17:
                    ff:4b:28:7e:e6:14:24:89:14:82:03:24:c8:d1:af:
                    65:a4:30:7f:be:d8:ae:e7:85:e4:b2:43:0d:e0:9a:
                    47:54:06:75:f4:bb:49:e8:67:63:f0:85:d5:c5:93:
                    73:d0:c1:8a:69:3c:fd:df:9e:51:ef:94:30:30:14:
                    5d:c1:25:7e:29:36:45:04:75:62:d4:0c:00:f3:1e:
                    41:8c:c7:7e:10:ca:06:39:84:6b:fc:7f:ed:d0:d3:
                    36:09:69:7d:82:50:d9:ea:08:ef:5a:73:04:76:b8:
                    bd:e7:26:70:85:bc:ca:db:56:a9:f6:13:fa:02:c5:
                    12:4d:18:61:67:16:38:6f:e3:90:10:83:82:bc:6b:
                    9b:c8:92:f5:c9:5c:d9:ac:59:96:f4:1a:8e:e4:60:
                    05:40:a4:3d:47:fb:de:1a:1b:f7:1b:d2:a2:ca:dd:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:88:AD:FE:6F:DB:D2:35:76:92:79:5F:D3:97:B9:92:13:00:7C:A0
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:d7:d3:28:74:7c:04:e8:70:b9:8d:c7:74:4b:53:0d:cb:
         51:03:ad:d0:e2:2b:81:71:66:d1:24:fc:5d:5e:63:2d:3a:da:
         b3:cd:22:c1:56:aa:39:d0:69:8e:15:b7:de:7c:db:3d:a5:77:
         76:cf:e9:00:61:52:c7:d5:9e:f3:ff:14:d3:b3:c7:1a:0b:68:
         62:cc:5d:ef:85:d4:26:8a:43:46:dd:7a:36:69:00:fb:83:dd:
         2c:d2:c4:7c:94:b4:9e:fc:8b:61:02:84:35:a4:01:e6:aa:72:
         93:97:4c:77:ee:0f:68:f0:80:cc:5d:7f:49:78:dd:99:5a:ff:
         a0:79:88:65:ff:c3:61:bd:86:11:90:f1:08:ed:87:3f:93:0a:
         5b:56:87:86:1e:23:00:86:f3:a6:03:55:4e:a1:c2:6c:b7:65:
         ef:78:0d:e1:71:53:84:bf:ad:62:14:40:06:63:3c:d6:90:f9:
         2a:99:81:d1:a8:54:f1:c9:4b:05:51:94:d7:84:4a:a8:df:86:
         40:1a:f1:a2:44:57:ec:cf:43:b0:7c:06:0d:33:27:5c:5d:a0:
         3c:a5:32:75:d0:d4:d6:10:e3:ca:ba:c6:18:bb:c2:1a:c5:17:
         f0:19:69:cd:64:1e:b5:cd:8e:c5:22:b3:4e:c1:e9:53:12:a8:
         d4:96:a6:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmlzetHuXl+xf1CoNVCudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjZiOTUwYTQ1YTJjNmJhYzE1MDVmY2QwNGQ5NDBjYzA5
NjhmOTYwHhcNMjUwNjE0MTgwMTE2WhcNMjUwNjE1MTgwMTE2WjAzMTEwLwYDVQQD
EygxODg4YWRmZTZmZGJkMjM1NzY5Mjc5NWZkMzk3Yjk5MjEzMDA3Y2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QxXakjzDAYHDoAW9q1Z2DVZbSVx
JcDuv/SneP1BcQHAgvuGccUFv0OtHpRdWqWGIAWXG98f2THXuVsRN5WxLw72FitQ
IVJRZYDfgUEgm8/L9J3ZOx8Dthf/Syh+5hQkiRSCAyTI0a9lpDB/vtiu54XkskMN
4JpHVAZ19LtJ6Gdj8IXVxZNz0MGKaTz9355R75QwMBRdwSV+KTZFBHVi1AwA8x5B
jMd+EMoGOYRr/H/t0NM2CWl9glDZ6gjvWnMEdri95yZwhbzK21ap9hP6AsUSTRhh
ZxY4b+OQEIOCvGubyJL1yVzZrFmW9BqO5GAFQKQ9R/veGhv3G9Kiyt3oWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiIrf5v29I1dpJ5X9OXuZITAHygMB8GA1UdIwQY
MBaAFDMmuVCkWixrrBUF/NBNlAzAlo+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUt
MDhlMTA2MzgyMjVlLzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOGI3MzAtZjViYi00NjA2LTgzNjUtMDhlMTA2MzgyMjVl
LzEvTXlhNVVLUmFMR3VzRlFYODBFMlVETUNXajVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPXX0yh0
fATocLmNx3RLUw3LUQOt0OIrgXFm0ST8XV5jLTras80iwVaqOdBpjhW33nzbPaV3
ds/pAGFSx9We8/8U07PHGgtoYsxd74XUJopDRt16NmkA+4PdLNLEfJS0nvyLYQKE
NaQB5qpyk5dMd+4PaPCAzF1/SXjdmVr/oHmIZf/DYb2GEZDxCO2HP5MKW1aHhh4j
AIbzpgNVTqHCbLdl73gN4XFThL+tYhRABmM81pD5KpmB0ahU8clLBVGU14RKqN+G
QBrxokRX7M9DsHwGDTMnXF2gPKUyddDU1hDjyrrGGLvCGsUX8BlpzWQetc2OxSKz
TsHpUxKo1JamJA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:06:29 2025 by rpki-client