Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
File:                     r_yn9tponMVFu7uVA5i6xAeXmqM.mft (raw, json)
Hash identifier:          gEqTzuwbI6/Q2hs0gtzUuzsfit4nglIFQPyQLBTAJos=
Subject key identifier:   92:71:02:97:51:1F:01:D0:30:DB:B8:BC:C1:28:97:BB:EA:DE:4F:78
Authority key identifier: AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3
Certificate issuer:       /CN=affca7f6da689cc545bbbb950398bac407979aa3
Certificate serial:       0197B745320188A24A7D66BA3C7AD01975B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
Manifest number:          031F
Signing time:             Sat 28 Jun 2025 16:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:54 +0000
Files and hashes:         1: r_yn9tponMVFu7uVA5i6xAeXmqM.crl (hash: zsKg+4yrvCWbhSMQNWRS2BHHt2rkmUVyW6PSBM9vxVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:32:01:88:a2:4a:7d:66:ba:3c:7a:d0:19:75:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affca7f6da689cc545bbbb950398bac407979aa3
        Validity
            Not Before: Jun 28 16:00:54 2025 GMT
            Not After : Jun 29 16:00:54 2025 GMT
        Subject: CN=92710297511f01d030dbb8bcc12897bbeade4f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:91:04:17:38:34:33:34:06:45:39:a4:47:eb:
                    19:a4:87:bf:d8:e5:23:e1:36:4c:0d:9d:bb:e8:a5:
                    23:1f:45:cc:c2:d6:7a:28:bb:eb:92:17:56:d6:99:
                    61:cf:9c:e2:8b:71:cb:02:fa:67:fe:d1:97:02:bc:
                    67:39:a1:b7:40:bf:d1:7e:55:73:5a:9e:ca:31:c2:
                    4a:59:ca:4f:e8:34:b6:67:10:11:97:5d:ff:a4:72:
                    cc:33:e0:d3:bf:e9:e4:f0:fd:8f:80:ec:98:27:07:
                    b2:c2:97:39:c2:24:0f:c8:42:e6:36:48:ee:f9:0d:
                    e0:16:67:b4:21:96:15:42:f3:49:34:72:ea:0f:93:
                    42:dc:0c:80:c8:31:e1:30:50:ea:43:00:e6:0e:ba:
                    7b:9d:3d:06:73:83:70:c4:be:fc:73:81:24:a6:21:
                    06:3c:cc:4b:a6:f9:f3:ed:8b:5f:fb:22:49:93:dc:
                    b5:bc:e1:a7:2c:84:65:37:6a:e1:4c:b3:f3:c8:eb:
                    42:01:87:3a:59:19:24:bc:3c:1f:30:98:d6:d2:c0:
                    bc:03:c1:1d:61:3d:92:06:ab:34:bc:49:6f:27:82:
                    6a:2a:97:a2:11:15:60:ca:b9:2c:09:23:fa:62:cb:
                    35:b6:44:f8:e0:f5:a6:3c:5e:63:df:04:f4:30:18:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:71:02:97:51:1F:01:D0:30:DB:B8:BC:C1:28:97:BB:EA:DE:4F:78
            X509v3 Authority Key Identifier:
                keyid:AF:FC:A7:F6:DA:68:9C:C5:45:BB:BB:95:03:98:BA:C4:07:97:9A:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_yn9tponMVFu7uVA5i6xAeXmqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/19ba97-19af-4f88-96aa-1985b0b0825e/1/r_yn9tponMVFu7uVA5i6xAeXmqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:15:73:3c:a9:9b:ce:a5:3c:e8:cb:50:04:a0:73:86:c6:bb:
         da:35:41:e7:00:7d:97:42:3c:a4:65:17:e5:a4:7b:9b:31:62:
         c2:23:70:e2:53:27:52:76:ce:9c:e9:79:d2:93:ae:60:8e:ed:
         d5:2a:ef:df:1f:77:89:00:fe:67:6b:50:98:0e:49:bf:9f:c5:
         42:08:e6:f5:db:90:28:8a:92:bc:e8:c3:a9:24:25:ff:33:45:
         b4:d8:af:f3:44:8b:a5:bc:05:37:58:4e:9d:82:1e:85:16:e3:
         af:a6:99:b4:e0:03:dd:15:eb:8b:d8:45:54:46:50:6e:b9:b8:
         a9:ea:68:f1:c9:35:a2:82:49:98:12:6b:56:5d:63:ba:0b:74:
         b6:f6:4b:f0:81:e5:76:d8:ba:91:db:d0:cc:cb:8a:97:32:c9:
         c5:82:22:fe:52:7a:76:c2:19:8f:5f:54:e8:8d:1b:ee:a3:42:
         11:71:af:e2:f4:84:7b:44:77:46:b9:ac:6d:41:59:5b:d8:fd:
         b9:01:f7:78:73:d9:c8:2e:7a:78:be:84:24:e1:91:8e:8a:9f:
         17:7b:ce:5d:16:3f:ec:ec:c4:02:ce:47:e6:3e:79:17:2f:3e:
         7b:b4:db:18:c0:d6:b2:44:7a:e3:f2:13:02:fb:c9:4e:c5:a5:
         1d:6c:9f:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTIBiKJKfWa6PHrQGXW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmNhN2Y2ZGE2ODljYzU0NWJiYmI5NTAzOThiYWM0MDc5
NzlhYTMwHhcNMjUwNjI4MTYwMDU0WhcNMjUwNjI5MTYwMDU0WjAzMTEwLwYDVQQD
Eyg5MjcxMDI5NzUxMWYwMWQwMzBkYmI4YmNjMTI4OTdiYmVhZGU0Zjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZEEFzg0MzQGRTmkR+sZpIe/2OUj
4TZMDZ276KUjH0XMwtZ6KLvrkhdW1plhz5zii3HLAvpn/tGXArxnOaG3QL/RflVz
Wp7KMcJKWcpP6DS2ZxARl13/pHLMM+DTv+nk8P2PgOyYJweywpc5wiQPyELmNkju
+Q3gFme0IZYVQvNJNHLqD5NC3AyAyDHhMFDqQwDmDrp7nT0Gc4NwxL78c4EkpiEG
PMxLpvnz7Ytf+yJJk9y1vOGnLIRlN2rhTLPzyOtCAYc6WRkkvDwfMJjW0sC8A8Ed
YT2SBqs0vElvJ4JqKpeiERVgyrksCSP6Yss1tkT44PWmPF5j3wT0MBj26QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJxApdRHwHQMNu4vMEol7vq3k94MB8GA1UdIwQY
MBaAFK/8p/baaJzFRbu7lQOYusQHl5qjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEt
MTk4NWIwYjA4MjVlLzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xOWJhOTctMTlhZi00Zjg4LTk2YWEtMTk4NWIwYjA4MjVl
LzEvcl95bjl0cG9uTVZGdTd1VkE1aTZ4QWVYbXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBVzPKmb
zqU86MtQBKBzhsa72jVB5wB9l0I8pGUX5aR7mzFiwiNw4lMnUnbOnOl50pOuYI7t
1Srv3x93iQD+Z2tQmA5Jv5/FQgjm9duQKIqSvOjDqSQl/zNFtNiv80SLpbwFN1hO
nYIehRbjr6aZtOAD3RXri9hFVEZQbrm4qepo8ck1ooJJmBJrVl1jugt0tvZL8IHl
dti6kdvQzMuKlzLJxYIi/lJ6dsIZj19U6I0b7qNCEXGv4vSEe0R3RrmsbUFZW9j9
uQH3eHPZyC56eL6EJOGRjoqfF3vOXRY/7OzEAs5H5j55Fy8+e7TbGMDWskR64/IT
AvvJTsWlHWyf7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:47 2025 by rpki-client