Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
File:                     YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json)
Hash identifier:          4oshNEvh75HEj7HQV9X2LieIRCkd5PCAh3X79O75WYE=
Subject key identifier:   FE:49:81:38:A3:59:16:BF:FC:DD:2F:2E:D6:92:52:DC:E9:E3:D5:FD
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Certificate issuer:       /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial:       0196BFA5781DF86F46EF351B1BE261BB2AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
Manifest number:          0C48
Signing time:             Sun 11 May 2025 14:00:14 +0000
Manifest this update:     Sun 11 May 2025 14:00:14 +0000
Manifest next update:     Mon 12 May 2025 14:00:14 +0000
Files and hashes:         1: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: 0Ol+tVsJXJLr/o9zGyOvBm8fBNesHkhtFs+igua1cxU=)
                          2: qe5ykFg2X3b3t6MuR-AZugNF4JA.roa (hash: lYA0LiGE3mwxqKf8EcIyljYtenHVRof/hSBwfSS+hr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:78:1d:f8:6f:46:ef:35:1b:1b:e2:61:bb:2a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
        Validity
            Not Before: May 11 14:00:14 2025 GMT
            Not After : May 12 14:00:14 2025 GMT
        Subject: CN=fe498138a35916bffcdd2f2ed69252dce9e3d5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:5b:57:6c:88:c5:5a:54:6c:5c:f7:35:cd:
                    1e:89:28:53:a1:a8:c7:2a:7f:07:cd:c5:f6:bb:7f:
                    10:d3:e2:90:fb:24:e6:b5:79:7c:2a:3c:ae:45:28:
                    ce:ab:47:9e:b5:cb:02:24:05:b7:14:5f:9a:38:82:
                    85:b7:42:f4:2d:ab:9a:a5:f5:c9:34:f9:59:3e:8c:
                    4a:39:ae:7f:7e:90:af:f4:90:59:60:92:35:c2:70:
                    d8:ee:93:86:2b:54:75:2c:de:b0:52:fd:06:a2:d8:
                    ba:14:49:10:c2:c5:a6:54:f7:42:02:d3:be:58:8c:
                    fd:7a:de:19:0e:b8:9c:d3:06:21:56:cb:8b:a9:1b:
                    d5:1b:14:a9:80:de:1f:e1:8f:e4:f0:d6:76:99:5f:
                    f2:39:c9:c7:1a:9f:45:ab:66:68:09:ff:10:41:b4:
                    d9:13:df:df:f8:7f:05:71:81:67:05:af:39:b1:32:
                    72:fe:de:c1:e8:1f:ec:95:da:67:3c:a3:a9:e7:7b:
                    20:84:4f:55:f9:c0:a5:da:46:c2:ba:ef:c6:31:b6:
                    67:3c:ac:68:e4:dc:4e:59:62:9f:61:a3:e2:7e:29:
                    40:ba:95:22:30:c4:d7:54:a6:45:fa:f6:a4:d4:d6:
                    9b:e3:ff:79:6d:b8:d3:bb:72:cc:83:d3:8d:2d:f6:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:81:38:A3:59:16:BF:FC:DD:2F:2E:D6:92:52:DC:E9:E3:D5:FD
            X509v3 Authority Key Identifier:
                keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:bc:42:af:63:fa:0f:6b:19:76:c8:4e:87:17:22:04:ae:
         79:e5:b8:42:58:75:58:a3:a4:43:cf:e0:55:a1:2b:d1:23:22:
         6b:d8:f9:77:d5:5a:1b:ca:84:5a:06:ee:88:a5:51:b6:40:b2:
         1f:d3:59:2b:14:95:4e:6e:1d:65:72:99:d6:5a:29:5f:17:55:
         0b:74:8c:28:70:98:f8:16:e7:78:29:1d:b7:22:c6:87:8c:6d:
         b3:2a:94:2a:be:7f:80:b7:d2:d4:28:a1:9a:58:05:ca:0b:a5:
         25:33:1d:64:cf:63:76:6d:7f:eb:0b:fd:5d:7f:6f:05:7b:9e:
         02:60:b1:3f:77:a7:55:2e:98:a5:c0:cc:b3:45:fb:bf:56:1d:
         24:e4:f2:83:da:d6:93:c7:1e:4a:cb:46:76:53:56:5c:a9:69:
         67:a9:b3:e0:36:93:4a:72:58:01:75:9d:e6:76:3c:1b:20:e9:
         6c:5b:c5:0a:e3:e3:97:14:83:4a:da:86:9c:fd:17:2d:59:5c:
         26:97:78:4a:b4:3d:19:c6:02:17:c7:5f:19:47:e3:9d:f0:8b:
         1f:d3:63:e5:10:2a:22:03:43:46:dd:aa:ca:ff:14:e5:52:62:
         df:56:62:75:bd:32:7d:50:ae:7f:16:6d:cc:25:0d:b3:f9:87:
         c7:32:a6:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pXgd+G9G7zUbG+JhuyriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyN2IzMDViYTFiYWJlZjRiZmVjNjg1ODFlNDAzOWQ0MWI1
ZjcxZjIwHhcNMjUwNTExMTQwMDE0WhcNMjUwNTEyMTQwMDE0WjAzMTEwLwYDVQQD
EyhmZTQ5ODEzOGEzNTkxNmJmZmNkZDJmMmVkNjkyNTJkY2U5ZTNkNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD9bV2yIxVpUbFz3Nc0eiShToajH
Kn8HzcX2u38Q0+KQ+yTmtXl8KjyuRSjOq0eetcsCJAW3FF+aOIKFt0L0LauapfXJ
NPlZPoxKOa5/fpCv9JBZYJI1wnDY7pOGK1R1LN6wUv0Goti6FEkQwsWmVPdCAtO+
WIz9et4ZDric0wYhVsuLqRvVGxSpgN4f4Y/k8NZ2mV/yOcnHGp9Fq2ZoCf8QQbTZ
E9/f+H8FcYFnBa85sTJy/t7B6B/sldpnPKOp53sghE9V+cCl2kbCuu/GMbZnPKxo
5NxOWWKfYaPifilAupUiMMTXVKZF+vak1Nab4/95bbjTu3LMg9ONLfb+eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5JgTijWRa//N0vLtaSUtzp49X9MB8GA1UdIwQY
MBaAFGJ7MFuhur70v+xoWB5AOdQbX3HyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUt
YmVlN2ExODM5NzEwLzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wNjAyZDQtNTVhNS00ZjQ5LThjZmUtYmVlN2ExODM5NzEw
LzEvWW5zd1c2RzZ2dlNfN0doWUhrQTUxQnRmY2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgu8Qq9j
+g9rGXbITocXIgSueeW4Qlh1WKOkQ8/gVaEr0SMia9j5d9VaG8qEWgbuiKVRtkCy
H9NZKxSVTm4dZXKZ1lopXxdVC3SMKHCY+BbneCkdtyLGh4xtsyqUKr5/gLfS1Cih
mlgFygulJTMdZM9jdm1/6wv9XX9vBXueAmCxP3enVS6YpcDMs0X7v1YdJOTyg9rW
k8ceSstGdlNWXKlpZ6mz4DaTSnJYAXWd5nY8GyDpbFvFCuPjlxSDStqGnP0XLVlc
Jpd4SrQ9GcYCF8dfGUfjnfCLH9Nj5RAqIgNDRt2qyv8U5VJi31Zidb0yfVCufxZt
zCUNs/mHxzKmLA==
-----END CERTIFICATE-----
Generated at Sun May 11 20:08:24 2025 by rpki-client