Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
File:                     YuXk_tXMr2A7RmhKIVU86GJu-cE.mft (raw, json)
Hash identifier:          vvl44CJ6gju0vQvAgJA9oLoG/QKHfOqWuecKNGv5eM0=
Subject key identifier:   27:63:D1:50:B6:CA:54:A1:5E:24:85:DE:67:AA:A0:38:C2:F9:11:A0
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       0196BF6FB8404A38B697B21EC3C5317E31AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
Manifest number:          0222
Signing time:             Sun 11 May 2025 13:01:31 +0000
Manifest this update:     Sun 11 May 2025 13:01:31 +0000
Manifest next update:     Mon 12 May 2025 13:01:31 +0000
Files and hashes:         1: YuXk_tXMr2A7RmhKIVU86GJu-cE.crl (hash: AxbhTR1dbbfa5nKxUY+LdHGlWN6d9wxSvLua2auxFTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:b8:40:4a:38:b6:97:b2:1e:c3:c5:31:7e:31:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: May 11 13:01:31 2025 GMT
            Not After : May 12 13:01:31 2025 GMT
        Subject: CN=2763d150b6ca54a15e2485de67aaa038c2f911a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:5e:3b:0a:ff:ad:b7:53:69:80:fd:00:2f:
                    70:4a:9c:ac:53:21:d2:1e:f5:11:a3:bd:03:ca:59:
                    df:5c:f7:da:db:60:fa:11:b8:c1:2a:a3:1c:a0:eb:
                    95:59:8d:3c:30:fe:26:bc:2b:cc:77:40:ff:f6:39:
                    c0:35:82:87:93:52:44:8d:00:68:9e:87:44:16:5b:
                    97:2f:ae:6d:ea:5d:6f:af:ce:c2:aa:2b:c7:2c:44:
                    e2:e2:c4:2c:21:91:01:b4:da:86:7b:27:e4:45:f4:
                    6d:d4:3d:31:01:29:de:4e:81:69:09:d4:ba:47:8d:
                    84:e7:60:e4:30:bf:a4:7c:82:35:ee:d3:05:e9:64:
                    49:9e:93:4f:63:b5:2f:ff:19:09:4e:a2:48:4b:91:
                    c9:a2:51:66:0d:27:b1:ac:ec:fe:8a:ad:2d:7f:73:
                    cc:b7:2b:e3:5e:03:47:74:58:da:61:01:51:47:31:
                    7b:20:28:e7:d2:dd:36:74:56:9e:ea:5c:00:7b:da:
                    25:9c:56:78:d8:c6:7b:77:36:a2:41:1b:89:a7:f4:
                    e9:12:80:e5:f0:17:f0:5f:f5:fd:81:5a:04:5f:0f:
                    c9:55:4c:0c:56:74:ce:b7:f4:9b:ba:58:49:0b:34:
                    8a:b4:dc:94:35:6e:54:8e:1a:e7:9f:1e:f2:6a:ad:
                    27:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:63:D1:50:B6:CA:54:A1:5E:24:85:DE:67:AA:A0:38:C2:F9:11:A0
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:b9:bb:51:6e:34:cb:5c:ad:e2:ee:32:97:45:e3:82:58:
         ba:ee:e2:9c:e5:b8:a5:00:ab:c0:6d:1d:04:68:87:f4:e3:37:
         42:b5:21:33:2d:f2:47:2a:7e:82:14:6a:33:39:fe:b8:6f:1a:
         6f:2c:fc:a7:f0:f6:65:58:0e:7f:c0:5b:db:7b:ee:62:26:54:
         6a:ac:cc:de:d8:54:e4:2c:b6:8b:67:8b:bf:4c:2b:d4:e6:af:
         26:03:c6:0f:0b:45:45:cb:df:f6:a9:c6:72:db:b3:ca:00:69:
         25:39:1c:f3:28:0f:46:7e:c9:67:33:86:b5:28:f2:c5:b7:29:
         61:93:dc:c2:a0:c6:a5:81:30:d5:c2:24:9a:9f:56:d4:bb:cb:
         2a:70:25:05:f9:ed:f8:46:1b:3e:2e:d8:9e:29:b1:00:85:99:
         da:a9:6e:e4:c6:cd:ba:10:91:bf:25:b6:95:cc:2c:8b:e4:2f:
         5d:d6:7e:f8:23:96:23:da:b3:2b:20:c5:92:cc:1c:22:2f:09:
         73:d5:86:a5:b3:13:fa:eb:f6:52:94:cb:03:53:2a:38:d4:bc:
         e2:e5:e8:1d:da:5e:64:7a:d7:7f:86:51:89:c3:6d:e1:b3:f6:
         1f:66:44:62:6c:77:37:b5:5b:e4:d0:4d:9e:e9:35:63:9c:96:
         d6:b3:b0:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b7hASji2l7Iew8UxfjGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZTVlNGZlZDVjY2FmNjAzYjQ2Njg0YTIxNTUzY2U4NjI2
ZWY5YzEwHhcNMjUwNTExMTMwMTMxWhcNMjUwNTEyMTMwMTMxWjAzMTEwLwYDVQQD
EygyNzYzZDE1MGI2Y2E1NGExNWUyNDg1ZGU2N2FhYTAzOGMyZjkxMWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ReOwr/rbdTaYD9AC9wSpysUyHS
HvURo70DylnfXPfa22D6EbjBKqMcoOuVWY08MP4mvCvMd0D/9jnANYKHk1JEjQBo
nodEFluXL65t6l1vr87CqivHLETi4sQsIZEBtNqGeyfkRfRt1D0xASneToFpCdS6
R42E52DkML+kfII17tMF6WRJnpNPY7Uv/xkJTqJIS5HJolFmDSexrOz+iq0tf3PM
tyvjXgNHdFjaYQFRRzF7ICjn0t02dFae6lwAe9olnFZ42MZ7dzaiQRuJp/TpEoDl
8BfwX/X9gVoEXw/JVUwMVnTOt/SbulhJCzSKtNyUNW5Ujhrnnx7yaq0n1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdj0VC2ylShXiSF3meqoDjC+RGgMB8GA1UdIwQY
MBaAFGLl5P7VzK9gO0ZoSiFVPOhibvnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgt
M2UxZDczMWRkNjMwLzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wNDQxNzktODBkZC00NTFhLWJmZDgtM2UxZDczMWRkNjMw
LzEvWXVYa190WE1yMkE3Um1oS0lWVTg2R0p1LWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKO5u1Fu
NMtcreLuMpdF44JYuu7inOW4pQCrwG0dBGiH9OM3QrUhMy3yRyp+ghRqMzn+uG8a
byz8p/D2ZVgOf8Bb23vuYiZUaqzM3thU5Cy2i2eLv0wr1OavJgPGDwtFRcvf9qnG
ctuzygBpJTkc8ygPRn7JZzOGtSjyxbcpYZPcwqDGpYEw1cIkmp9W1LvLKnAlBfnt
+EYbPi7YnimxAIWZ2qlu5MbNuhCRvyW2lcwsi+QvXdZ++COWI9qzKyDFkswcIi8J
c9WGpbMT+uv2UpTLA1MqONS84uXoHdpeZHrXf4ZRicNt4bP2H2ZEYmx3N7Vb5NBN
nuk1Y5yW1rOwgg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:15:01 2025 by rpki-client