Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
File:                     ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft (raw, json)
Hash identifier:          zJim7dPpH+Kmiq3ReQ2hITCYvtCW/9FOtiCGvjEz1zo=
Subject key identifier:   4C:44:E8:AA:CD:EE:A3:E7:CC:77:56:8A:88:41:38:D9:6E:AD:70:55
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Certificate issuer:       /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial:       0196A1D2A66FB0260ACC782F2F41E2C42FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
Manifest number:          0C93
Signing time:             Mon 05 May 2025 19:00:58 +0000
Manifest this update:     Mon 05 May 2025 19:00:58 +0000
Manifest next update:     Tue 06 May 2025 19:00:58 +0000
Files and hashes:         1: ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl (hash: DYGW+3cubgvluAGzsQA4+7cpb0W7ELSGnEJKg5pL20o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:a6:6f:b0:26:0a:cc:78:2f:2f:41:e2:c4:2f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
        Validity
            Not Before: May  5 19:00:58 2025 GMT
            Not After : May  6 19:00:58 2025 GMT
        Subject: CN=4c44e8aacdeea3e7cc77568a884138d96ead7055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:ae:04:51:09:d4:d1:71:ce:bc:9e:01:a5:
                    16:53:40:74:3a:24:84:14:b1:34:af:02:53:40:a5:
                    a5:41:88:42:f0:f6:f3:fc:05:5d:88:68:d9:d3:46:
                    00:a1:7f:60:4c:fb:aa:59:3b:cd:8b:43:f3:48:36:
                    ba:78:10:c9:e5:aa:bd:23:60:32:d7:c7:cc:7b:38:
                    af:18:d3:49:d7:e9:f1:07:54:fc:1c:31:39:1b:80:
                    02:11:5f:30:57:27:49:f9:52:e1:0f:bf:7c:69:d3:
                    99:36:aa:61:0a:83:6c:5d:3b:b6:f3:01:48:b8:f5:
                    34:b5:59:6c:1e:b4:9f:75:73:96:b6:e9:a0:b2:84:
                    71:46:59:30:c3:a9:24:62:79:71:5f:b6:62:45:84:
                    37:b2:06:74:0e:e6:b4:c3:cc:12:1a:32:bd:82:24:
                    99:25:62:6a:5e:25:7d:20:49:a6:b1:08:b2:72:3f:
                    b5:da:6f:b9:36:76:11:bb:a7:18:bb:a9:64:65:31:
                    23:81:2e:fd:d4:1a:d4:e5:e1:dc:e9:65:54:ce:39:
                    08:06:c5:26:0a:c0:7f:c7:91:0c:89:59:18:4c:eb:
                    50:e6:5a:c1:84:c4:c2:4d:db:14:e2:0b:e2:8b:44:
                    c5:21:80:0f:95:21:12:8b:46:b2:4f:30:26:eb:b2:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:E8:AA:CD:EE:A3:E7:CC:77:56:8A:88:41:38:D9:6E:AD:70:55
            X509v3 Authority Key Identifier:
                keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c7:2f:d6:12:6d:00:0a:d9:17:2f:71:fb:40:54:bf:1c:85:
         5d:5b:5c:6a:39:c9:12:d2:b0:58:fb:8f:2a:1c:90:42:4a:91:
         86:e9:a3:f3:12:70:65:17:4e:34:08:3d:e3:0d:04:ff:43:5a:
         53:49:64:9f:c1:db:4f:6c:dc:24:95:b0:0e:ad:50:d5:78:15:
         32:f2:14:87:7a:0d:fc:60:e1:e4:52:82:fb:2a:f6:96:ed:22:
         a1:68:d7:c3:e7:9a:59:8f:99:be:a7:02:87:60:58:3b:f5:4b:
         b5:b7:66:01:05:94:59:f1:f9:5e:14:5d:dc:96:7d:0e:3a:2a:
         d2:06:00:10:6f:64:fe:a6:d5:9d:d8:8a:9b:fe:af:da:d7:43:
         a0:2e:93:14:e3:ae:7a:ec:15:c5:81:76:eb:f7:96:11:d8:df:
         de:f6:8f:79:96:38:04:97:a2:21:79:a4:a4:bd:47:38:59:6f:
         5f:b9:5a:01:d9:95:82:c3:e3:3d:dc:8d:b8:a6:4d:c6:8c:7e:
         84:4a:41:f4:86:03:b1:91:5a:18:ae:0a:c8:96:a1:4f:30:53:
         33:5b:44:49:d4:af:db:08:2f:4d:89:94:c9:9c:56:94:ac:83:
         c1:82:63:a0:c4:fd:08:b5:e1:36:4a:3d:30:ae:29:03:19:e9:
         4d:ad:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:25:40 2025 by rpki-client