Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
File:                     yCyAAaF2QraVYsY6xYkg2jYPFU8.mft (raw, json)
Hash identifier:          VUD0FTqzKOk/n2ASKMpWSS+5Y+IIsc/FbBbxbPS1P+w=
Subject key identifier:   12:12:D1:76:77:1F:F6:67:A8:1B:DD:C9:3E:55:4C:DB:59:6E:AF:A7
Authority key identifier: C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F
Certificate issuer:       /CN=c82c8001a17642b69562c63ac58920da360f154f
Certificate serial:       0196BAECFC0B02050832200F33969EF480C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 16:00:15 +0000
Manifest this update:     Sat 10 May 2025 16:00:15 +0000
Manifest next update:     Sun 11 May 2025 16:00:15 +0000
Files and hashes:         1: 1QZVcXytUuxqM1PLlTk73xY8pDU.roa (hash: oWmFEOAWi7NkKA3U3ke7LKelHFeRhHAmJaVgP86H32g=)
                          2: yCyAAaF2QraVYsY6xYkg2jYPFU8.crl (hash: X8rqvl2/EC3DXd4mDGxeSCb1slnWybDXngXI7Fm2lKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ec:fc:0b:02:05:08:32:20:0f:33:96:9e:f4:80:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82c8001a17642b69562c63ac58920da360f154f
        Validity
            Not Before: May 10 16:00:15 2025 GMT
            Not After : May 11 16:00:15 2025 GMT
        Subject: CN=1212d176771ff667a81bddc93e554cdb596eafa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:0e:2b:17:8f:37:61:74:ae:de:d7:49:55:
                    36:1e:aa:bb:05:2c:c9:e1:4a:88:25:6e:50:fb:e0:
                    89:f0:ff:c7:94:a9:b3:12:1e:5d:6f:42:0d:80:fa:
                    c4:8c:43:b3:57:73:f7:ee:85:17:78:47:ad:92:5f:
                    4d:a6:01:3e:1a:f1:ef:e9:03:0e:d5:be:6e:2a:5d:
                    7f:f8:6d:a1:26:77:35:0d:c9:93:8a:2f:86:35:ad:
                    4a:20:02:76:de:a3:8a:17:d8:92:65:9e:c7:4f:1c:
                    69:c5:57:1c:d4:b4:9e:4e:1b:c0:be:9c:a5:cb:c6:
                    78:68:a2:ff:dc:a5:ac:0f:0f:c7:ff:f8:c2:02:8b:
                    49:0e:56:ea:65:b6:23:fc:74:fd:07:74:b0:7d:a9:
                    9b:07:17:e8:73:11:62:37:3e:98:c8:52:ef:6c:32:
                    ad:b4:e6:29:9f:41:37:ff:06:78:4d:6e:a5:99:89:
                    33:b0:c0:26:4c:f3:86:0f:0e:f1:ad:a8:04:45:70:
                    0c:66:d9:d3:75:e3:3c:c8:0d:0d:75:a5:b3:2f:2c:
                    80:73:f1:5c:f7:c5:65:12:ae:6b:c8:94:8b:54:6c:
                    e7:d4:7f:52:35:dc:d5:42:74:48:65:39:c3:5f:b6:
                    f9:25:ca:f1:c4:ab:ca:47:c4:30:a5:5b:93:46:04:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:12:D1:76:77:1F:F6:67:A8:1B:DD:C9:3E:55:4C:DB:59:6E:AF:A7
            X509v3 Authority Key Identifier:
                keyid:C8:2C:80:01:A1:76:42:B6:95:62:C6:3A:C5:89:20:DA:36:0F:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCyAAaF2QraVYsY6xYkg2jYPFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/yCyAAaF2QraVYsY6xYkg2jYPFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b3:89:49:8e:83:e8:63:00:72:73:3c:33:53:23:ef:18:01:
         39:cb:b9:da:27:2f:8a:17:03:2c:ca:75:83:32:47:b0:4a:79:
         2c:88:45:0b:a3:51:a3:9a:9a:05:92:d1:d5:ac:3a:cd:fe:f5:
         1b:92:98:f6:cc:db:57:76:92:14:58:97:82:be:90:2a:01:3d:
         05:e7:36:b5:de:62:c3:12:f6:54:64:de:73:57:38:1d:b4:0a:
         38:a6:51:09:28:dc:40:7a:72:55:5a:68:ca:80:7e:56:2f:8c:
         65:be:17:a6:18:fa:ed:0a:c6:da:1e:a6:b8:01:c0:69:3f:79:
         51:4b:35:51:61:88:5a:d5:01:aa:71:b7:6a:63:32:2d:c2:b2:
         80:61:e2:38:be:35:e2:6a:60:f8:99:9e:3f:9b:30:cb:6c:56:
         43:28:39:19:2d:ad:cc:af:fb:48:26:d9:f9:0e:25:b2:a2:f1:
         cb:a6:73:69:0e:a1:97:a0:62:5e:b4:34:9e:ba:8e:18:90:3e:
         b5:20:de:53:2d:ab:dc:52:4a:58:9c:36:f3:94:61:e3:4b:b8:
         da:74:3d:de:e1:6a:30:ec:bc:bf:09:b5:9c:5c:62:dc:0c:b4:
         42:1b:28:5b:d4:41:de:17:86:a0:54:9f:b6:a6:2a:fd:61:42:
         08:49:da:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67PwLAgUIMiAPM5ae9IDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MmM4MDAxYTE3NjQyYjY5NTYyYzYzYWM1ODkyMGRhMzYw
ZjE1NGYwHhcNMjUwNTEwMTYwMDE1WhcNMjUwNTExMTYwMDE1WjAzMTEwLwYDVQQD
EygxMjEyZDE3Njc3MWZmNjY3YTgxYmRkYzkzZTU1NGNkYjU5NmVhZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQIOKxePN2F0rt7XSVU2Hqq7BSzJ
4UqIJW5Q++CJ8P/HlKmzEh5db0INgPrEjEOzV3P37oUXeEetkl9NpgE+GvHv6QMO
1b5uKl1/+G2hJnc1DcmTii+GNa1KIAJ23qOKF9iSZZ7HTxxpxVcc1LSeThvAvpyl
y8Z4aKL/3KWsDw/H//jCAotJDlbqZbYj/HT9B3SwfambBxfocxFiNz6YyFLvbDKt
tOYpn0E3/wZ4TW6lmYkzsMAmTPOGDw7xragERXAMZtnTdeM8yA0NdaWzLyyAc/Fc
98VlEq5ryJSLVGzn1H9SNdzVQnRIZTnDX7b5JcrxxKvKR8QwpVuTRgRVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIS0XZ3H/ZnqBvdyT5VTNtZbq+nMB8GA1UdIwQY
MBaAFMgsgAGhdkK2lWLGOsWJINo2DxVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mYzIwNDQtNjFjZi00NGJhLWFiYWUt
YzJiMGRmN2Y0M2JkLzEveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mYzIwNDQtNjFjZi00NGJhLWFiYWUtYzJiMGRmN2Y0M2Jk
LzEveUN5QUFhRjJRcmFWWXNZNnhZa2cyallQRlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObOJSY6D
6GMAcnM8M1Mj7xgBOcu52icvihcDLMp1gzJHsEp5LIhFC6NRo5qaBZLR1aw6zf71
G5KY9szbV3aSFFiXgr6QKgE9Bec2td5iwxL2VGTec1c4HbQKOKZRCSjcQHpyVVpo
yoB+Vi+MZb4Xphj67QrG2h6muAHAaT95UUs1UWGIWtUBqnG3amMyLcKygGHiOL41
4mpg+JmeP5swy2xWQyg5GS2tzK/7SCbZ+Q4lsqLxy6ZzaQ6hl6BiXrQ0nrqOGJA+
tSDeUy2r3FJKWJw285Rh40u42nQ93uFqMOy8vwm1nFxi3Ay0QhsoW9RB3heGoFSf
tqYq/WFCCEnaVA==
-----END CERTIFICATE-----
Generated at Sat May 10 22:28:20 2025 by rpki-client