Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
File:                     yBi6GFWxEQfs8LKzQ2B8y752o40.mft (raw, json)
Hash identifier:          APy4eJ75h5JLrVOI3yv8kyUcX0KGuGldXiFZlPb1ROw=
Subject key identifier:   DF:89:C9:93:C1:8D:AB:DD:22:F7:81:C4:75:DD:38:3B:E2:45:07:BE
Authority key identifier: C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D
Certificate issuer:       /CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
Certificate serial:       0196741E5E4CFA8B8A9E44D7512CDC5E4520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
Manifest number:          0C43
Signing time:             Sat 26 Apr 2025 22:01:09 +0000
Manifest this update:     Sat 26 Apr 2025 22:01:09 +0000
Manifest next update:     Sun 27 Apr 2025 22:01:09 +0000
Files and hashes:         1: yBi6GFWxEQfs8LKzQ2B8y752o40.crl (hash: +Lv5xMo/PxHLEh4r5jJ4L09UltlAh57KcJXHyJXYwg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:5e:4c:fa:8b:8a:9e:44:d7:51:2c:dc:5e:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c818ba1855b11107ecf0b2b343607ccbbe76a38d
        Validity
            Not Before: Apr 26 22:01:09 2025 GMT
            Not After : Apr 27 22:01:09 2025 GMT
        Subject: CN=df89c993c18dabdd22f781c475dd383be24507be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6c:6d:81:35:69:1c:06:2c:1b:07:62:cd:3a:
                    fe:09:e9:6f:61:12:ec:0f:e1:8f:8c:13:4c:a7:57:
                    6b:ea:b1:b7:e2:7a:f4:32:91:a5:33:a0:f7:8b:be:
                    1c:a5:bc:a0:ae:cf:34:85:56:72:0f:6c:dc:2a:0d:
                    b0:e0:63:4b:8c:7a:ae:36:86:77:92:05:7b:6b:db:
                    8d:b0:fe:42:24:63:2b:a6:00:c8:03:79:6c:0c:80:
                    93:1d:e9:8c:dd:4b:32:c9:c8:46:e5:d0:11:13:7f:
                    0c:be:7e:29:15:5f:b7:18:3f:b0:20:db:bd:13:ba:
                    a9:d5:f5:14:5e:9c:6a:26:13:6d:97:7e:4e:1f:1f:
                    f7:03:d3:0a:03:0b:72:6c:bc:bd:d2:24:a3:d6:97:
                    7b:bc:fd:c2:2a:86:7a:60:52:55:3c:a9:f4:48:1d:
                    6d:b7:48:50:05:52:11:d7:c3:68:20:f9:4c:c1:8f:
                    e0:c5:dc:ab:05:ed:36:6e:bb:f0:4f:80:4b:94:66:
                    88:8c:be:1b:0a:43:f7:cd:d4:96:ea:7b:75:69:65:
                    b7:e6:ac:c4:45:3d:55:bb:a6:86:96:6e:5c:8a:34:
                    f1:76:d5:f2:04:4a:07:f7:53:12:28:b3:44:82:f8:
                    11:31:34:6c:de:6a:d1:b1:57:b0:25:bf:99:79:c7:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:C9:93:C1:8D:AB:DD:22:F7:81:C4:75:DD:38:3B:E2:45:07:BE
            X509v3 Authority Key Identifier:
                keyid:C8:18:BA:18:55:B1:11:07:EC:F0:B2:B3:43:60:7C:CB:BE:76:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi6GFWxEQfs8LKzQ2B8y752o40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/53a1c3-6b7b-4698-b263-9ff6e37aa3c4/1/yBi6GFWxEQfs8LKzQ2B8y752o40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:52:fa:53:4c:06:a0:47:55:0f:4d:72:9b:bc:1b:2d:17:94:
         ed:fd:ef:ba:b5:df:44:cf:96:f5:2f:9d:56:96:a0:76:df:ac:
         9a:c8:d7:fc:76:c4:eb:70:31:bf:f1:91:a7:66:3b:34:64:ac:
         03:6f:19:e3:af:3e:5a:81:7f:e8:b4:fc:ff:d5:00:38:75:86:
         b6:c1:86:5a:3b:e3:4a:dd:ed:30:a8:63:65:c0:3a:95:d0:03:
         ce:78:d2:91:80:d0:b8:16:76:1c:31:ed:32:01:5a:d4:4f:bd:
         b4:d0:6e:1f:aa:cd:4e:97:e8:a9:d3:a9:ac:c7:3c:9f:f3:90:
         04:4e:f9:c1:cd:c1:bf:30:bf:45:c9:dd:52:9f:90:00:1a:7d:
         db:a8:9c:86:a1:f6:27:b4:d3:7b:22:2c:b6:b9:18:f4:9f:8d:
         e5:ad:d1:ac:14:73:27:3f:2b:c3:c6:51:29:58:d4:34:57:9d:
         a4:4c:7b:9b:9f:60:2f:96:03:78:3b:3e:37:ec:48:0d:ee:d0:
         9d:70:d5:65:84:68:f3:1d:31:24:64:c0:ee:38:2e:b6:19:98:
         88:ea:20:10:68:a6:f5:37:ed:67:0f:3b:e2:ae:67:09:24:b2:
         1f:07:73:4b:bd:45:ce:de:ca:09:ea:24:7f:56:74:a0:11:c1:
         13:fa:79:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0Hl5M+ouKnkTXUSzcXkUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MThiYTE4NTViMTExMDdlY2YwYjJiMzQzNjA3Y2NiYmU3
NmEzOGQwHhcNMjUwNDI2MjIwMTA5WhcNMjUwNDI3MjIwMTA5WjAzMTEwLwYDVQQD
EyhkZjg5Yzk5M2MxOGRhYmRkMjJmNzgxYzQ3NWRkMzgzYmUyNDUwN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WxtgTVpHAYsGwdizTr+CelvYRLs
D+GPjBNMp1dr6rG34nr0MpGlM6D3i74cpbygrs80hVZyD2zcKg2w4GNLjHquNoZ3
kgV7a9uNsP5CJGMrpgDIA3lsDICTHemM3UsyychG5dARE38Mvn4pFV+3GD+wINu9
E7qp1fUUXpxqJhNtl35OHx/3A9MKAwtybLy90iSj1pd7vP3CKoZ6YFJVPKn0SB1t
t0hQBVIR18NoIPlMwY/gxdyrBe02brvwT4BLlGaIjL4bCkP3zdSW6nt1aWW35qzE
RT1Vu6aGlm5cijTxdtXyBEoH91MSKLNEgvgRMTRs3mrRsVewJb+ZeceEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+JyZPBjavdIveBxHXdODviRQe+MB8GA1UdIwQY
MBaAFMgYuhhVsREH7PCys0NgfMu+dqONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMt
OWZmNmUzN2FhM2M0LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81M2ExYzMtNmI3Yi00Njk4LWIyNjMtOWZmNmUzN2FhM2M0
LzEveUJpNkdGV3hFUWZzOExLelEyQjh5NzUybzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFL6U0wG
oEdVD01ym7wbLReU7f3vurXfRM+W9S+dVpagdt+smsjX/HbE63Axv/GRp2Y7NGSs
A28Z468+WoF/6LT8/9UAOHWGtsGGWjvjSt3tMKhjZcA6ldADznjSkYDQuBZ2HDHt
MgFa1E+9tNBuH6rNTpfoqdOprMc8n/OQBE75wc3BvzC/RcndUp+QABp926ichqH2
J7TTeyIstrkY9J+N5a3RrBRzJz8rw8ZRKVjUNFedpEx7m59gL5YDeDs+N+xIDe7Q
nXDVZYRo8x0xJGTA7jguthmYiOogEGim9TftZw874q5nCSSyHwdzS71Fzt7KCeok
f1Z0oBHBE/p5aw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:17:00 2025 by rpki-client