Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
File:                     YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft (raw, json)
Hash identifier:          joGWAA6WhTJQKlnRIFGOYkOKrm3lHZXUAzn15FnxiZE=
Subject key identifier:   FB:66:96:65:B6:C4:55:82:35:97:C6:5F:03:08:54:89:AA:B8:87:57
Authority key identifier: 60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF
Certificate issuer:       /CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
Certificate serial:       0196BA48CAAD9FE2991CE614CCA6601F0105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 13:00:54 +0000
Manifest this update:     Sat 10 May 2025 13:00:54 +0000
Manifest next update:     Sun 11 May 2025 13:00:54 +0000
Files and hashes:         1: YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl (hash: uD4Lcvbanca1/450E71lb5jWzgRyku5GHuqN/Zy/TDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:ca:ad:9f:e2:99:1c:e6:14:cc:a6:60:1f:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606f0aec9fc91f4cc6049cf2d9542ebd82515aef
        Validity
            Not Before: May 10 13:00:54 2025 GMT
            Not After : May 11 13:00:54 2025 GMT
        Subject: CN=fb669665b6c455823597c65f03085489aab88757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:dd:87:f2:89:69:2d:5c:9e:44:58:7b:6c:
                    61:bc:8d:6f:57:23:14:91:5c:89:09:f3:8c:6c:c9:
                    44:24:7d:53:6d:ad:ca:b1:a4:2a:a8:fb:81:d7:b9:
                    f9:6b:aa:7d:d3:7f:93:ce:28:4e:8b:9c:20:f2:bf:
                    89:6d:7e:bf:ce:40:aa:57:a7:d3:47:2e:0e:b0:c1:
                    77:05:3e:eb:0e:85:2f:1d:9a:4a:d4:46:6b:e5:91:
                    b5:69:a2:b8:60:a7:af:7e:cd:c1:97:f6:6a:1e:ce:
                    61:1f:97:7f:ce:da:f2:e3:b2:f9:ae:8e:db:38:0c:
                    85:d4:23:e3:7a:e8:5e:32:1e:12:0d:27:1a:13:db:
                    8c:2f:f5:0b:63:88:26:34:69:c9:a9:70:58:f1:42:
                    3d:f2:cc:9f:07:31:9b:6d:ff:24:ff:0b:73:7e:69:
                    fb:d5:ac:56:65:b8:fc:16:3a:fe:9c:20:fa:1c:bc:
                    bb:41:60:e7:fa:79:9d:34:d6:ed:56:55:d7:5c:a3:
                    48:0a:ec:c1:42:a7:e8:e8:9a:8b:3e:3b:eb:18:d4:
                    b0:64:19:ed:77:d7:09:6c:36:e9:e3:e9:8e:7f:00:
                    58:6c:be:0e:6b:87:97:a5:6d:5f:2b:e4:13:16:97:
                    ca:f8:8b:12:12:72:4d:2f:ee:40:23:39:ea:23:af:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:96:65:B6:C4:55:82:35:97:C6:5F:03:08:54:89:AA:B8:87:57
            X509v3 Authority Key Identifier:
                keyid:60:6F:0A:EC:9F:C9:1F:4C:C6:04:9C:F2:D9:54:2E:BD:82:51:5A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG8K7J_JH0zGBJzy2VQuvYJRWu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e36c3d-6013-40b4-9570-d9947af2fca7/1/YG8K7J_JH0zGBJzy2VQuvYJRWu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:f0:50:6a:19:f4:d3:7b:34:b7:e6:bf:e6:b2:97:71:ab:57:
         d1:d9:99:37:05:a0:f8:66:e0:c0:2d:97:8b:a7:5a:85:48:7c:
         5e:34:d2:9d:fb:24:d7:06:7a:f4:87:97:77:d2:b1:4d:89:08:
         3e:1c:b0:9e:ed:13:f5:d5:f2:34:81:f3:76:e6:44:0d:fb:de:
         a5:81:e9:f4:7f:3a:61:c6:25:12:58:4d:be:3c:85:54:d9:66:
         a4:e4:03:17:f0:b2:f8:88:f3:13:f7:dc:dd:08:60:5e:07:7a:
         cb:9b:1d:cd:ca:f5:ec:95:f6:79:46:f9:68:b2:5b:8f:97:21:
         8d:c3:76:6a:5d:49:11:a6:3a:76:db:ce:2a:65:d0:41:5d:fb:
         58:4f:05:54:58:55:d1:a5:d9:8d:e4:08:36:d7:2f:ab:87:98:
         d8:8c:3b:a7:4f:e4:f5:48:0c:ed:c2:08:fa:d1:a3:0c:b6:48:
         2b:d9:52:b2:66:01:1d:df:41:fe:5b:53:94:19:23:bd:4c:32:
         98:2a:fa:96:c4:60:ca:d8:b9:7c:35:79:0a:38:88:c0:55:aa:
         1e:7f:2d:e3:45:d8:cc:ac:b8:fa:9c:d4:08:69:ce:cb:16:4b:
         18:ce:78:f0:e8:78:be:80:0a:a5:9a:a0:58:38:1a:d0:90:82:
         73:70:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:17:31 2025 by rpki-client