Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
File:                     yVJqou_HA-knkAcfgubuUpuV6x4.mft (raw, json)
Hash identifier:          WBAHBarJCmjf4uqNtKGvFsz8ronizWQBqw4OdmRelxo=
Subject key identifier:   D8:1E:DF:1D:30:24:76:91:AE:2E:C4:97:47:B7:E0:3F:B1:BD:BD:04
Authority key identifier: C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E
Certificate issuer:       /CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
Certificate serial:       0196CEE20074103B57C998AC812BA9C2E5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
Manifest number:          0A43
Signing time:             Wed 14 May 2025 13:00:39 +0000
Manifest this update:     Wed 14 May 2025 13:00:39 +0000
Manifest next update:     Thu 15 May 2025 13:00:39 +0000
Files and hashes:         1: yVJqou_HA-knkAcfgubuUpuV6x4.crl (hash: eG6b84sWmgzOlO0P6IDQyVF0ch6m0LG+D8b4g3d70rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:00:74:10:3b:57:c9:98:ac:81:2b:a9:c2:e5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9526aa2efc703e92790071f82e6ee529b95eb1e
        Validity
            Not Before: May 14 13:00:39 2025 GMT
            Not After : May 15 13:00:39 2025 GMT
        Subject: CN=d81edf1d30247691ae2ec49747b7e03fb1bdbd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:b6:ad:8c:95:1f:18:fb:4f:21:0c:55:ef:
                    11:17:5d:cc:42:eb:b0:a3:21:d9:43:93:36:6a:9c:
                    8b:3b:73:9c:90:c6:90:d3:af:82:69:ad:f7:03:a8:
                    7d:1b:ae:af:6c:77:e4:c2:d7:4a:6f:2d:91:f7:d4:
                    28:17:8d:a9:04:6a:1c:13:54:4b:6e:de:e1:8b:74:
                    1e:67:6f:a4:d4:6f:ca:f8:76:6e:62:e3:4e:5e:fd:
                    5b:7d:a8:e2:2b:7c:67:0b:5b:c0:25:b4:d0:00:9f:
                    6f:52:54:5c:72:71:93:dc:d1:6a:25:9f:03:d6:4f:
                    3a:27:13:c9:71:76:10:6b:04:f9:47:b8:af:78:74:
                    cd:02:93:f1:af:b0:b9:75:cf:5e:d0:8f:7c:a3:f1:
                    8e:b7:10:43:b8:9c:97:83:a8:9d:e1:f3:67:c3:c0:
                    5f:c5:77:17:27:e3:2c:df:c3:fe:13:14:b1:00:e9:
                    d9:d6:86:07:e8:cb:d3:93:22:27:ed:85:76:76:12:
                    64:ba:6c:68:72:0a:e3:d3:9b:e9:ab:13:db:9a:b3:
                    6b:c2:ef:73:56:9f:fd:ee:91:2e:6a:b0:b8:c4:43:
                    b5:c3:35:df:6a:38:29:15:37:c5:fa:25:3c:3b:80:
                    f6:c4:89:a0:7f:c3:1b:5c:0f:d0:23:fa:82:4d:f2:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:DF:1D:30:24:76:91:AE:2E:C4:97:47:B7:E0:3F:B1:BD:BD:04
            X509v3 Authority Key Identifier:
                keyid:C9:52:6A:A2:EF:C7:03:E9:27:90:07:1F:82:E6:EE:52:9B:95:EB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVJqou_HA-knkAcfgubuUpuV6x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7cf3b3-616f-44ee-a214-f7f690c0af57/1/yVJqou_HA-knkAcfgubuUpuV6x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b7:10:af:ee:b0:55:ce:e2:94:ce:8f:90:4b:c6:50:f7:bb:
         0c:7c:c1:87:73:f5:ef:2f:58:ae:c5:01:6f:f5:f9:7a:6d:c5:
         e1:5c:4c:e0:f7:83:bf:bd:36:78:fc:8c:35:01:18:82:5f:9f:
         64:69:c3:97:78:4f:07:46:90:70:ae:6c:8c:84:de:a1:73:83:
         c7:d8:2f:f4:07:6d:0e:8b:0f:94:78:2d:d8:46:c2:3c:53:de:
         30:3e:34:92:b8:be:90:57:4a:1e:e3:10:58:2a:54:a0:bb:66:
         74:a2:10:42:4e:fc:b6:3c:60:02:7c:ac:19:a4:d1:6c:36:99:
         b1:fb:e1:d0:f0:4f:fb:3e:77:83:fa:3e:07:37:d0:60:44:ba:
         78:03:11:99:1b:0a:f5:97:07:6e:45:5a:cf:71:8c:f4:7f:b9:
         42:5c:4c:7a:3a:73:89:53:fb:54:b9:7f:3b:bc:44:09:d7:e6:
         9f:c3:70:26:df:38:55:4b:a5:35:96:3f:82:13:19:a9:22:6e:
         78:f7:f1:2c:9b:b1:0c:c6:ae:3f:64:2f:80:77:a2:8a:ed:98:
         b1:65:50:70:0d:88:a8:65:7f:ac:b3:cc:a1:41:0a:20:e9:75:
         62:69:32:39:69:d2:e3:6a:cf:bb:92:b8:4d:9e:29:0c:59:1f:
         5d:3f:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:09:49 2025 by rpki-client