Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File:                     y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier:          mZYoMsZuRYa5XSkDAapRlqa1mJDmaPiM6VyLTMcRS5s=
Subject key identifier:   E3:56:4B:31:C7:62:D2:17:68:3A:D7:B8:1D:71:9B:D2:A4:50:87:65
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer:       /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial:       01969183BA0241D861886ACB5EB1F6706970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number:          072C
Signing time:             Fri 02 May 2025 15:00:51 +0000
Manifest this update:     Fri 02 May 2025 15:00:51 +0000
Manifest next update:     Sat 03 May 2025 15:00:51 +0000
Files and hashes:         1: XGSaAvPj_7ZKK3N0e0ECGhx2VrQ.roa (hash: 4J6msExKcBt3FvPoWt2N5Sp5wauv+dD5ByMN6L0xjog=)
                          2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: wekeEswO1d/fMSzM9z4pYZ9Nv/eW3RkJbnq4hydrTJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:83:ba:02:41:d8:61:88:6a:cb:5e:b1:f6:70:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
        Validity
            Not Before: May  2 15:00:51 2025 GMT
            Not After : May  3 15:00:51 2025 GMT
        Subject: CN=e3564b31c762d217683ad7b81d719bd2a4508765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:68:70:98:04:db:48:24:43:2e:15:fc:de:
                    53:5d:b3:50:01:fa:0e:ff:f0:51:01:23:27:43:54:
                    33:e3:e7:d0:12:53:2a:b5:5c:d6:91:f3:71:e0:55:
                    91:63:b3:aa:e2:6e:6c:d7:a0:03:44:c4:cd:38:4c:
                    d1:e3:d4:cf:09:a1:21:6b:fa:f9:ec:93:6b:5b:f6:
                    01:ff:06:05:14:15:6b:6f:89:86:02:a3:50:83:09:
                    01:8c:0d:30:e9:64:f2:ff:74:04:60:7f:16:7d:c4:
                    fe:1c:31:72:b6:10:2d:80:1e:b8:75:e9:7c:12:d4:
                    af:46:c5:bf:b4:4e:e5:b7:e3:30:64:95:2a:ba:47:
                    a6:7e:73:40:f3:bc:08:a2:3e:65:05:2b:d2:5e:8a:
                    87:55:7d:b7:47:2a:5f:55:bf:92:64:ef:4a:69:0a:
                    ec:3a:c5:26:51:d1:82:72:17:4f:58:a4:20:23:7f:
                    e8:8c:2a:f2:57:14:77:78:9f:5e:4b:8c:18:b6:f9:
                    e6:c7:d6:b5:7e:75:65:28:a9:9b:ff:05:9a:17:c2:
                    f1:47:16:fc:ad:fb:d9:b8:d8:f8:9a:1c:91:c0:ae:
                    1e:21:d6:44:b5:7c:14:21:92:e2:d0:8a:02:ff:5f:
                    bf:e9:98:b4:48:e6:16:2f:b5:1b:e7:98:aa:ff:c0:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:56:4B:31:C7:62:D2:17:68:3A:D7:B8:1D:71:9B:D2:A4:50:87:65
            X509v3 Authority Key Identifier:
                keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:72:29:78:27:8e:2f:e6:31:d5:69:66:c6:6c:f6:d3:a4:80:
         d8:5f:a3:b5:54:fc:a1:29:d4:69:05:93:a4:9d:21:15:3a:f0:
         c1:01:99:a1:c7:18:72:74:e2:c1:42:42:df:23:43:57:86:55:
         5d:33:4e:cc:2e:6d:b4:eb:72:4c:2d:97:80:c1:a0:b4:f5:55:
         66:84:7c:a0:c3:9c:a7:f8:23:bb:8a:77:21:7c:36:49:7f:ee:
         f6:be:31:d9:9f:43:b0:ed:9d:76:0f:ad:66:b1:d2:78:38:8d:
         6a:1c:13:87:c8:8e:d5:f4:ad:e0:c4:0a:02:04:ba:07:40:ab:
         21:64:21:2a:3b:8f:e4:48:2e:82:8e:b5:fc:99:75:d5:a5:d6:
         f5:2e:95:38:11:4a:6e:7b:4a:58:4b:81:7d:9b:7c:bd:02:73:
         80:a3:ac:2c:d6:0d:1a:c9:2b:05:64:8a:50:01:1c:c7:35:01:
         a4:87:58:b8:c8:b4:c6:8c:9c:5d:a9:96:75:ff:ca:0c:39:4c:
         04:f0:a4:8f:06:bc:16:cd:c7:dd:01:d9:aa:90:2b:1f:ad:d1:
         60:2f:9c:c1:5f:eb:f0:0d:bf:2a:66:3d:4d:9d:54:96:d8:8b:
         63:76:d7:7c:f9:de:69:28:53:ca:86:0c:65:51:6e:82:5e:6a:
         18:0c:1e:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRg7oCQdhhiGrLXrH2cGlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh
MjBiMjMwHhcNMjUwNTAyMTUwMDUxWhcNMjUwNTAzMTUwMDUxWjAzMTEwLwYDVQQD
EyhlMzU2NGIzMWM3NjJkMjE3NjgzYWQ3YjgxZDcxOWJkMmE0NTA4NzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhihocJgE20gkQy4V/N5TXbNQAfoO
//BRASMnQ1Qz4+fQElMqtVzWkfNx4FWRY7Oq4m5s16ADRMTNOEzR49TPCaEha/r5
7JNrW/YB/wYFFBVrb4mGAqNQgwkBjA0w6WTy/3QEYH8WfcT+HDFythAtgB64del8
EtSvRsW/tE7lt+MwZJUqukemfnNA87wIoj5lBSvSXoqHVX23RypfVb+SZO9KaQrs
OsUmUdGCchdPWKQgI3/ojCryVxR3eJ9eS4wYtvnmx9a1fnVlKKmb/wWaF8LxRxb8
rfvZuNj4mhyRwK4eIdZEtXwUIZLi0IoC/1+/6Zi0SOYWL7Ub55iq/8A9MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONWSzHHYtIXaDrXuB1xm9KkUIdlMB8GA1UdIwQY
MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt
NmUzNmIyZjE3MDZiLzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi
LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHIpeCeO
L+Yx1Wlmxmz206SA2F+jtVT8oSnUaQWTpJ0hFTrwwQGZoccYcnTiwUJC3yNDV4ZV
XTNOzC5ttOtyTC2XgMGgtPVVZoR8oMOcp/gju4p3IXw2SX/u9r4x2Z9DsO2ddg+t
ZrHSeDiNahwTh8iO1fSt4MQKAgS6B0CrIWQhKjuP5Egugo61/Jl11aXW9S6VOBFK
bntKWEuBfZt8vQJzgKOsLNYNGskrBWSKUAEcxzUBpIdYuMi0xoycXamWdf/KDDlM
BPCkjwa8Fs3H3QHZqpArH63RYC+cwV/r8A2/KmY9TZ1UltiLY3bXfPneaShTyoYM
ZVFugl5qGAwecQ==
-----END CERTIFICATE-----
Generated at Fri May 2 23:23:08 2025 by rpki-client