Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
File:                     YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json)
Hash identifier:          D+MFqzp38AtXbodMELTi976V2+n70wBfG7U8vQSAZO0=
Subject key identifier:   33:EE:B6:C8:93:4D:36:90:22:58:DB:E5:CF:28:D4:1A:79:E0:D0:5F
Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23
Certificate issuer:       /CN=60e2c8f75f385acb4b94a68d899351ba347a3323
Certificate serial:       01988356E597A7D3F6CE32B3A54AE717D580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
Manifest number:          152E
Signing time:             Thu 07 Aug 2025 07:02:46 +0000
Manifest this update:     Thu 07 Aug 2025 07:02:46 +0000
Manifest next update:     Fri 08 Aug 2025 07:02:46 +0000
Files and hashes:         1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: JZbKldqSuEEBr0B1ANnaEPuJQ3qtbllv1LnwIfZ6gUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:56:e5:97:a7:d3:f6:ce:32:b3:a5:4a:e7:17:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323
        Validity
            Not Before: Aug  7 07:02:46 2025 GMT
            Not After : Aug  8 07:02:46 2025 GMT
        Subject: CN=33eeb6c8934d36902258dbe5cf28d41a79e0d05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:d3:e1:af:96:04:f9:db:a1:b7:8c:0e:cf:
                    71:e1:7e:2d:d4:72:d9:82:50:84:f8:36:87:99:64:
                    cb:72:f9:94:74:7c:e6:39:06:69:c2:fe:e1:6f:52:
                    2e:02:e2:85:a1:09:e4:c8:90:ae:4a:d2:ed:40:b3:
                    c9:1d:7e:e8:4a:2d:5b:f7:94:f2:59:fe:95:ad:09:
                    a1:04:c0:c5:89:b2:6e:6b:46:fc:f5:6d:aa:99:38:
                    e5:e6:a0:95:7b:d8:72:bb:5f:c4:7b:99:67:1e:db:
                    bd:85:f1:20:80:55:97:3d:6a:01:ed:d8:d6:5f:d4:
                    0d:74:ec:f0:87:46:0d:18:87:25:30:53:4e:08:19:
                    5a:9a:97:2f:4b:99:0a:85:37:0b:87:d1:37:15:1d:
                    07:54:98:6c:3d:4c:fe:b4:ba:08:32:99:45:a5:4d:
                    67:cd:50:48:23:83:fc:a7:01:65:ac:a3:6b:95:49:
                    e9:b0:bf:98:83:7d:ee:e3:97:a8:ff:e3:b0:35:ee:
                    c0:2d:79:2f:e9:00:85:dd:43:05:cd:07:d2:c0:d0:
                    c1:aa:45:a7:d0:d5:ad:8d:ac:ff:d6:4f:88:64:39:
                    0d:7f:cc:d2:ab:46:ad:58:13:9e:85:fb:9a:03:0f:
                    4f:ad:6d:99:2c:77:0d:a4:28:0f:d2:04:1c:58:3e:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:B6:C8:93:4D:36:90:22:58:DB:E5:CF:28:D4:1A:79:E0:D0:5F
            X509v3 Authority Key Identifier:
                keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:14:0e:69:0a:06:5a:36:b1:cb:d2:e7:b9:74:19:99:68:c4:
         61:a3:d5:0b:c5:88:8d:ee:08:21:46:9b:d2:90:fa:03:83:fc:
         f1:b4:56:2a:34:ff:14:5c:14:31:6a:a2:94:26:1c:ab:79:fc:
         9a:f3:c3:73:86:7b:b5:fb:af:73:0e:1f:9c:cf:7c:67:a2:63:
         ce:0f:9b:c8:bf:36:4c:4d:a9:6e:fe:1c:0e:ff:eb:b2:b3:fe:
         aa:cb:f9:6e:94:54:26:3f:7b:21:65:52:a2:48:e6:be:cb:92:
         ee:28:a5:a6:98:a5:32:a8:46:07:a2:90:f7:bb:65:6a:ea:07:
         f3:01:70:45:7e:50:52:25:c5:e6:7c:48:8c:3a:99:f8:ee:f9:
         9f:c6:65:3f:da:b1:cc:63:0c:60:fa:6a:59:38:24:c5:8c:76:
         d1:e1:0f:62:c9:e6:31:d7:20:80:dc:ea:16:5b:ea:ce:8f:3c:
         70:f3:84:08:3e:f0:e6:f8:25:8b:5b:9e:16:4e:e5:72:93:db:
         76:65:dc:50:fb:f1:2d:aa:ab:44:20:10:34:61:d6:4f:72:f1:
         29:63:3c:9b:34:92:13:16:dd:79:8d:b0:33:1c:08:64:66:e5:
         3f:43:f8:c2:f2:c0:69:47:f8:2c:3c:be:e6:45:a5:9b:50:de:
         db:a1:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:57:55 2025 by rpki-client