Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
File:                     Yf61N-NjXsgAFRDDGSt36xeXwKo.mft (raw, json)
Hash identifier:          Mbj7x1qnrJDYm5lWwxrVjI+g/2XocRfWQAz/iA5dICY=
Subject key identifier:   1F:66:98:E2:02:BA:45:2A:FA:CB:12:89:08:16:E9:D1:55:C7:49:5E
Authority key identifier: 61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA
Certificate issuer:       /CN=61feb537e3635ec8001510c3192b77eb1797c0aa
Certificate serial:       01968AA5916A117F5C972176BBBD28422E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
Manifest number:          0B17
Signing time:             Thu 01 May 2025 07:00:28 +0000
Manifest this update:     Thu 01 May 2025 07:00:28 +0000
Manifest next update:     Fri 02 May 2025 07:00:28 +0000
Files and hashes:         1: Yf61N-NjXsgAFRDDGSt36xeXwKo.crl (hash: 4gx8f8b6G+4zHVeEhF8fud7u3t0DrXYHjeaYclMrS0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:a5:91:6a:11:7f:5c:97:21:76:bb:bd:28:42:2e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61feb537e3635ec8001510c3192b77eb1797c0aa
        Validity
            Not Before: May  1 07:00:28 2025 GMT
            Not After : May  2 07:00:28 2025 GMT
        Subject: CN=1f6698e202ba452afacb12890816e9d155c7495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:24:f0:72:b0:29:10:fa:a1:90:40:f8:85:
                    1a:5f:34:41:b9:d5:11:d8:83:09:fa:38:9a:76:19:
                    ca:b8:93:40:86:74:80:10:19:ee:5a:f4:b2:5f:27:
                    7c:98:0c:df:ac:d6:a1:3c:ff:3f:25:dc:12:6d:91:
                    3e:f4:de:ff:09:c2:f8:37:b3:d2:3b:69:9d:a2:51:
                    14:21:a9:59:b1:53:07:2f:63:d2:3f:e0:7f:55:a9:
                    e7:4d:78:05:a4:00:74:71:97:81:22:c9:80:3c:b2:
                    a1:f9:c7:2b:74:b0:e4:64:a5:8a:3e:65:52:b4:ab:
                    35:3d:c5:9a:90:8e:2a:f0:b5:95:94:25:0c:1d:9f:
                    17:46:95:7c:15:b4:95:31:ea:77:6f:e7:f4:ca:3f:
                    d1:6c:dd:85:7a:84:d6:8b:06:95:82:fa:45:16:7c:
                    fa:fa:ea:66:e0:d1:18:6a:5e:14:62:01:e2:e0:e7:
                    ae:16:21:95:51:3a:8a:07:21:a3:5d:bf:8d:5f:1b:
                    ef:c8:ad:ec:09:fa:51:ee:ef:ee:36:e1:6a:ae:38:
                    19:23:e6:11:c3:1c:74:a6:2d:bd:43:84:83:ad:61:
                    04:89:98:f9:64:6d:bc:50:17:c1:91:6a:ca:b1:5f:
                    0a:84:3c:60:13:49:0f:4d:49:11:f0:8a:ab:01:07:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:66:98:E2:02:BA:45:2A:FA:CB:12:89:08:16:E9:D1:55:C7:49:5E
            X509v3 Authority Key Identifier:
                keyid:61:FE:B5:37:E3:63:5E:C8:00:15:10:C3:19:2B:77:EB:17:97:C0:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf61N-NjXsgAFRDDGSt36xeXwKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/182044-9cbf-4579-b3b4-7856787a2e63/1/Yf61N-NjXsgAFRDDGSt36xeXwKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:37:a1:02:9e:d4:30:5f:5f:00:38:5f:a9:c1:36:af:80:
         32:bf:66:67:14:e7:7b:f9:10:d0:45:0a:b0:7b:61:92:3a:24:
         a9:03:7c:f8:34:6c:26:c4:c0:bc:b9:16:d4:a3:8c:38:95:0e:
         60:9f:72:63:cd:45:42:2f:17:07:c4:ab:a5:9f:e7:9f:0a:21:
         72:8d:c5:42:bd:42:b7:e2:d4:07:36:4f:78:44:09:64:71:ee:
         1c:4a:2b:e3:e5:d0:e3:cd:15:16:9c:7a:e8:7d:41:f5:88:d4:
         03:bb:85:ae:a7:a2:72:a4:29:5f:50:11:57:b1:3f:5e:52:03:
         ad:bb:4d:24:ee:f2:89:f2:fb:6e:44:ed:19:f5:f3:b0:4a:ec:
         d1:5a:77:90:8b:9b:7e:1f:7f:93:63:fd:13:b2:8a:e6:6d:7e:
         6a:26:66:5f:ba:b0:6a:c0:4a:02:aa:ae:c0:f0:90:cb:da:15:
         10:50:65:5c:73:33:8b:36:17:d2:3b:c1:cc:fe:8a:4f:bd:c6:
         6e:f1:c0:a3:28:c4:cf:52:8b:8e:70:75:07:e8:08:04:e0:19:
         b3:cf:86:72:57:2b:e3:51:69:ab:07:39:60:8e:85:1c:a5:f6:
         32:36:85:35:39:42:d4:d4:b4:7a:44:8e:ed:7b:78:22:bc:99:
         d3:48:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:44:43 2025 by rpki-client