Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
File:                     0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft (raw, json)
Hash identifier:          mKWRpH8x8SQh45OYpXhBTrQs/cHzF0QV5JiSb59fZjk=
Subject key identifier:   22:4C:6D:3F:D5:8F:B8:3E:9D:77:3B:91:1E:3F:23:9B:5E:2B:03:9C
Authority key identifier: D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54
Certificate issuer:       /CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
Certificate serial:       01969F3F04DD5D58071D765250E7C0DFBEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
Manifest number:          060A
Signing time:             Mon 05 May 2025 07:00:29 +0000
Manifest this update:     Mon 05 May 2025 07:00:29 +0000
Manifest next update:     Tue 06 May 2025 07:00:29 +0000
Files and hashes:         1: 0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl (hash: hwHyHOhF9NZe6vbT1Rt0+dbHdoW4lvqs+4KAi0pgJec=)
                          2: 13rjk7Vk1R6bM8NZzwpn_wkWd18.roa (hash: eMrnrbTjuA+DpnVyQk46VnyH6+JrKX3BnnGUUHzyW6I=)
                          3: 9Hxo6fI9QehJzkwT4jlRnU3srEg.roa (hash: D8qzDz1wFMEwEqdNljLUBKQQ6VmjewGRNrI/OibTYlU=)
                          4: ap5KNPIgh8eRLDgd9o9o98m3A_g.roa (hash: wFA6DMYFq5ZeJnSJaOkvybASHTJl6BSASaBH5ShXruc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:3f:04:dd:5d:58:07:1d:76:52:50:e7:c0:df:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f60b176d95fd8d3d0bd65c5d12c83941f7f054
        Validity
            Not Before: May  5 07:00:29 2025 GMT
            Not After : May  6 07:00:29 2025 GMT
        Subject: CN=224c6d3fd58fb83e9d773b911e3f239b5e2b039c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:43:a1:fd:ff:e7:21:88:a1:16:20:57:2f:
                    0b:9d:d1:90:95:4d:ac:0e:c6:50:a6:10:4f:7c:d8:
                    07:d2:99:eb:f7:29:7a:d0:52:9a:50:51:a0:3b:f8:
                    10:5d:2e:1a:67:da:d3:00:5e:a5:71:a4:5c:5d:94:
                    d8:c9:75:1e:c6:7e:8c:96:bc:9c:e4:b4:a2:7a:8e:
                    3c:d3:2d:f4:a8:49:c7:11:fa:93:55:9f:5f:d1:83:
                    44:1e:ed:30:14:4a:7f:8f:4a:76:b1:b9:38:59:f7:
                    35:50:64:4c:26:7c:fd:75:b6:5a:66:54:90:25:95:
                    8a:71:de:ae:a2:15:18:52:11:f0:39:f6:1e:bc:cc:
                    ec:4a:43:3c:f4:ec:68:69:2a:4d:7d:a8:c3:70:9e:
                    32:3a:89:46:cf:4b:0b:fa:37:94:40:f3:9c:ee:cd:
                    b4:b6:f0:cd:4d:b9:93:ad:20:ee:d2:0e:85:c8:0e:
                    c3:32:79:d8:ab:0e:02:38:63:cb:bf:c8:c2:55:ad:
                    a3:34:6b:1a:0b:94:40:f8:97:15:87:a9:96:3b:75:
                    d3:6f:4f:44:35:18:e4:fc:5a:0a:8a:1b:e8:14:49:
                    ad:38:02:a8:ad:dc:cd:b2:3b:2a:80:41:04:b2:6d:
                    24:64:cf:4c:e9:0f:30:59:77:86:9e:50:a7:d3:17:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4C:6D:3F:D5:8F:B8:3E:9D:77:3B:91:1E:3F:23:9B:5E:2B:03:9C
            X509v3 Authority Key Identifier:
                keyid:D3:F6:0B:17:6D:95:FD:8D:3D:0B:D6:5C:5D:12:C8:39:41:F7:F0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_YLF22V_Y09C9ZcXRLIOUH38FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bc5fd7-3e63-4945-afb7-1175e5a07a55/1/0_YLF22V_Y09C9ZcXRLIOUH38FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:fc:a8:7c:17:6a:12:03:75:1d:e3:69:aa:e7:15:e0:40:
         5e:ff:b8:77:f0:45:f3:d3:51:39:82:c7:c4:aa:cc:cb:56:41:
         73:0c:64:57:5f:90:f4:a6:c0:2d:f1:c2:2a:7e:1b:3e:96:26:
         42:06:fb:34:17:d3:01:40:80:bc:c6:aa:de:67:c1:ba:07:78:
         2d:cf:ac:4b:96:a2:73:3d:c0:cc:94:bb:6c:91:9b:94:c8:61:
         88:db:5f:8d:ac:f3:1e:9e:a6:4d:c9:e6:4b:c8:5d:c9:a0:76:
         87:d3:40:d7:55:d3:de:2f:92:ab:37:80:5f:5f:a4:2d:d0:14:
         cc:fe:b3:37:01:4a:17:60:82:2a:f9:21:4d:ca:06:1d:3f:b0:
         ed:5a:7c:fe:13:54:a0:4e:e4:d1:0c:8f:5b:9d:06:39:38:01:
         a6:dd:f0:de:01:1f:d5:00:50:ef:22:54:79:09:7e:0e:63:ad:
         4c:d9:28:68:12:47:0c:1d:c5:34:fd:0c:d4:ab:9e:fe:4c:46:
         84:6d:39:e9:d2:b0:90:b1:82:2c:35:d8:a8:b3:7a:2a:ef:68:
         8f:4a:eb:76:61:56:39:30:43:ac:62:69:70:d3:ca:69:72:de:
         fe:9e:c7:38:fc:53:18:68:7a:e8:ed:be:72:9d:ce:1a:36:cd:
         80:94:18:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafPwTdXVgHHXZSUOfA376+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZjYwYjE3NmQ5NWZkOGQzZDBiZDY1YzVkMTJjODM5NDFm
N2YwNTQwHhcNMjUwNTA1MDcwMDI5WhcNMjUwNTA2MDcwMDI5WjAzMTEwLwYDVQQD
EygyMjRjNmQzZmQ1OGZiODNlOWQ3NzNiOTExZTNmMjM5YjVlMmIwMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNZDof3/5yGIoRYgVy8LndGQlU2s
DsZQphBPfNgH0pnr9yl60FKaUFGgO/gQXS4aZ9rTAF6lcaRcXZTYyXUexn6Mlryc
5LSieo480y30qEnHEfqTVZ9f0YNEHu0wFEp/j0p2sbk4Wfc1UGRMJnz9dbZaZlSQ
JZWKcd6uohUYUhHwOfYevMzsSkM89OxoaSpNfajDcJ4yOolGz0sL+jeUQPOc7s20
tvDNTbmTrSDu0g6FyA7DMnnYqw4COGPLv8jCVa2jNGsaC5RA+JcVh6mWO3XTb09E
NRjk/FoKihvoFEmtOAKordzNsjsqgEEEsm0kZM9M6Q8wWXeGnlCn0xcNLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJMbT/Vj7g+nXc7kR4/I5teKwOcMB8GA1UdIwQY
MBaAFNP2Cxdtlf2NPQvWXF0SyDlB9/BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjct
MTE3NWU1YTA3YTU1LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9iYzVmZDctM2U2My00OTQ1LWFmYjctMTE3NWU1YTA3YTU1
LzEvMF9ZTEYyMlZfWTA5QzlaY1hSTElPVUgzOEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/r8qHwX
ahIDdR3jaarnFeBAXv+4d/BF89NROYLHxKrMy1ZBcwxkV1+Q9KbALfHCKn4bPpYm
Qgb7NBfTAUCAvMaq3mfBugd4Lc+sS5aicz3AzJS7bJGblMhhiNtfjazzHp6mTcnm
S8hdyaB2h9NA11XT3i+SqzeAX1+kLdAUzP6zNwFKF2CCKvkhTcoGHT+w7Vp8/hNU
oE7k0QyPW50GOTgBpt3w3gEf1QBQ7yJUeQl+DmOtTNkoaBJHDB3FNP0M1Kue/kxG
hG056dKwkLGCLDXYqLN6Ku9oj0rrdmFWOTBDrGJpcNPKaXLe/p7HOPxTGGh66O2+
cp3OGjbNgJQY8w==
-----END CERTIFICATE-----
Generated at Mon May 5 15:31:04 2025 by rpki-client