Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          8AmwRGZpASbcubR92pb+WImjCjrFqcS5WYPODAiwXos=
Subject key identifier:   15:D5:2F:A7:F9:35:BA:D5:C5:72:97:F4:51:EB:0C:1D:F9:AD:89:E1
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       019682B572F47C593FC6FFC4354AF5A4F522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          09A6
Signing time:             Tue 29 Apr 2025 18:00:51 +0000
Manifest this update:     Tue 29 Apr 2025 18:00:51 +0000
Manifest next update:     Wed 30 Apr 2025 18:00:51 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: Mh6D9Nw/igYpNio68oUFybeFvUToH6Enaa7xMd8Wwtg=)
                          2: vzcqP3LvlK_sQg8vPWTBe97Nav0.roa (hash: 3HGCRFI+BCpq9Cd0n6gj7Tnh3DZvLgpQucs3TlDSYJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:b5:72:f4:7c:59:3f:c6:ff:c4:35:4a:f5:a4:f5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Apr 29 18:00:51 2025 GMT
            Not After : Apr 30 18:00:51 2025 GMT
        Subject: CN=15d52fa7f935bad5c57297f451eb0c1df9ad89e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:45:b1:f1:64:54:88:8d:11:0d:42:f5:85:
                    bd:58:0f:5d:4f:00:e0:60:fe:6b:1f:4c:9f:fd:43:
                    39:32:db:34:b4:4f:e0:8b:1d:15:b7:6f:a8:d1:4b:
                    eb:90:7d:44:35:41:4b:76:dc:e1:af:02:3f:11:03:
                    ea:a3:9d:b3:32:a2:03:ba:b6:be:19:8a:fc:b8:c6:
                    4a:b3:41:b5:3a:d3:7a:f1:3a:a8:f1:71:66:90:10:
                    0f:46:39:01:41:e1:f6:50:cf:bd:dd:b4:7c:1c:01:
                    da:fa:d4:95:e5:84:9a:f5:a1:21:a4:29:6b:43:05:
                    12:9e:6f:8e:f5:bd:b5:e6:cc:e7:50:68:e4:38:d8:
                    9e:cd:98:37:55:3e:f5:13:01:71:86:20:8e:e7:93:
                    cf:2c:fc:81:d5:2d:94:08:21:c3:ca:78:98:be:8c:
                    23:9b:09:82:93:ba:5e:4d:19:db:d8:50:30:02:34:
                    14:9c:a2:b1:ee:e2:6a:3a:ed:e2:52:69:4d:d4:13:
                    5f:55:54:b5:04:09:c3:c0:82:98:56:9e:b1:6c:44:
                    b9:37:2d:9a:f5:0e:fe:a0:5d:19:5f:ca:31:36:1f:
                    f4:fe:e8:f7:c6:2d:27:05:5f:c0:b2:ae:41:8b:90:
                    28:b2:da:75:ae:d0:a2:9b:f5:e5:59:ae:fb:f0:9b:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D5:2F:A7:F9:35:BA:D5:C5:72:97:F4:51:EB:0C:1D:F9:AD:89:E1
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:34:60:5e:c2:7c:b4:92:8a:0f:62:24:ac:85:28:9a:04:
         d9:81:e7:f6:42:41:25:cf:5f:90:35:b1:44:9a:91:5b:f5:47:
         17:2d:94:05:23:63:3e:8c:22:34:94:c4:8a:a9:75:e5:0a:40:
         df:46:6e:54:3b:e3:e2:0d:01:79:b5:36:37:32:4a:40:e8:da:
         34:33:73:1a:8e:b6:7b:68:00:34:2a:12:d4:62:70:d1:4c:ac:
         93:06:92:e0:7c:a2:23:93:a5:d2:00:bd:d8:03:f7:c6:02:bd:
         38:c2:a9:ff:97:27:c6:f4:4a:57:d5:c9:3c:99:f7:fc:80:7d:
         f3:c6:aa:4c:cb:3e:44:39:71:03:4e:55:ee:84:b2:88:ab:79:
         29:1f:11:18:33:0c:0c:5f:6d:64:9a:17:09:b9:47:f3:13:8f:
         bb:87:32:4a:a9:4c:cc:83:da:4a:8d:dc:49:4e:4a:15:0b:15:
         ba:c3:d1:0f:64:e1:a6:75:d9:25:c6:16:4b:dc:a2:08:c3:e8:
         ac:b6:35:97:2e:37:8d:98:4d:ca:92:73:f8:9f:ad:0f:a6:7d:
         50:b2:ae:af:97:17:58:e3:fe:26:9e:cf:17:4f:9e:8e:d9:c8:
         0b:b3:58:c0:66:11:af:d1:c9:e9:a8:ca:cb:5a:c0:12:4b:00:
         d4:9a:32:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtXL0fFk/xv/ENUr1pPUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxZWRmZTdhNGZjNjRkZTUyOWQxNjJkZjJmZWQwNzgwYzZl
NWUxYTgwHhcNMjUwNDI5MTgwMDUxWhcNMjUwNDMwMTgwMDUxWjAzMTEwLwYDVQQD
EygxNWQ1MmZhN2Y5MzViYWQ1YzU3Mjk3ZjQ1MWViMGMxZGY5YWQ4OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcNFsfFkVIiNEQ1C9YW9WA9dTwDg
YP5rH0yf/UM5Mts0tE/gix0Vt2+o0UvrkH1ENUFLdtzhrwI/EQPqo52zMqIDura+
GYr8uMZKs0G1OtN68Tqo8XFmkBAPRjkBQeH2UM+93bR8HAHa+tSV5YSa9aEhpClr
QwUSnm+O9b215sznUGjkONiezZg3VT71EwFxhiCO55PPLPyB1S2UCCHDyniYvowj
mwmCk7peTRnb2FAwAjQUnKKx7uJqOu3iUmlN1BNfVVS1BAnDwIKYVp6xbES5Ny2a
9Q7+oF0ZX8oxNh/0/uj3xi0nBV/Asq5Bi5Aostp1rtCim/XlWa778JtLNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXVL6f5NbrVxXKX9FHrDB35rYnhMB8GA1UdIwQY
MBaAFGHt/npPxk3lKdFi3y/tB4DG5eGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEt
YWZmODcxYjViNWY3LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iODFkMDgtNjZjOS00YmU5LWEyMjEtYWZmODcxYjViNWY3
LzEvWWUzLWVrX0dUZVVwMFdMZkwtMEhnTWJsNGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT40YF7C
fLSSig9iJKyFKJoE2YHn9kJBJc9fkDWxRJqRW/VHFy2UBSNjPowiNJTEiql15QpA
30ZuVDvj4g0BebU2NzJKQOjaNDNzGo62e2gANCoS1GJw0UyskwaS4HyiI5Ol0gC9
2AP3xgK9OMKp/5cnxvRKV9XJPJn3/IB988aqTMs+RDlxA05V7oSyiKt5KR8RGDMM
DF9tZJoXCblH8xOPu4cySqlMzIPaSo3cSU5KFQsVusPRD2ThpnXZJcYWS9yiCMPo
rLY1ly43jZhNypJz+J+tD6Z9ULKur5cXWOP+Jp7PF0+ejtnIC7NYwGYRr9HJ6ajK
y1rAEksA1JoyCw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:34:17 2025 by rpki-client