Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File:                     yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier:          8xclIbgE6kuERYtZjf1d/LmIHGhsHLum0FB2lmqgZYY=
Subject key identifier:   A8:D8:F9:98:21:72:74:1B:72:05:F1:74:C2:80:54:56:97:2C:5D:8E
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer:       /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial:       0196D4AD8E9075987A5D856D0E3B871AD14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number:          153B
Signing time:             Thu 15 May 2025 16:01:06 +0000
Manifest this update:     Thu 15 May 2025 16:01:06 +0000
Manifest next update:     Fri 16 May 2025 16:01:06 +0000
Files and hashes:         1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: zoaFenDs6NsRIzOQwfLNrCqjXEq/x5+qjW8eHkDmSoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:ad:8e:90:75:98:7a:5d:85:6d:0e:3b:87:1a:d1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9187af710f6285e13553071328b9d994852c471
        Validity
            Not Before: May 15 16:01:06 2025 GMT
            Not After : May 16 16:01:06 2025 GMT
        Subject: CN=a8d8f9982172741b7205f174c2805456972c5d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:e3:0e:d5:a1:c7:f6:e4:ee:ec:dd:16:a8:
                    8e:16:36:4c:a2:f2:75:5d:09:dc:0e:e0:e2:56:e2:
                    6f:a6:e0:e3:85:41:f5:3b:c7:fd:aa:4a:a0:b2:81:
                    8c:be:3f:bc:63:f1:fd:27:2b:a0:6a:8c:0f:1e:ee:
                    c0:ba:a9:1d:a1:2b:e0:55:33:4a:cc:9a:ad:68:6c:
                    b1:ee:e0:89:fd:a0:ff:89:c0:31:55:90:0b:ca:59:
                    78:e9:ce:9b:3e:b3:5c:6e:a6:04:c0:e6:85:9a:ce:
                    ce:da:5c:ec:5b:c3:00:10:b6:c4:e6:13:65:66:22:
                    1b:b7:c1:4d:a6:71:9b:2d:b7:e4:ae:17:0d:a8:66:
                    d0:e8:de:56:be:ad:5d:52:2c:cd:2d:0b:e1:a8:29:
                    5e:23:ef:da:c1:11:ea:84:4b:d8:7d:de:71:30:44:
                    08:7b:a8:7d:93:1b:a3:4b:71:e4:5a:57:0b:10:13:
                    25:f4:3a:19:b3:17:c6:dc:6b:23:76:0c:08:0e:c9:
                    f2:5b:93:01:64:6e:76:f4:37:26:7c:0c:38:3e:67:
                    50:a8:36:99:61:11:23:a2:86:60:e4:5a:18:ed:65:
                    eb:86:0f:bb:43:16:71:20:c3:4c:0f:b1:7f:36:88:
                    5a:1c:8a:9b:e6:f2:2b:d8:b9:72:2e:97:b4:1c:49:
                    2f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:F9:98:21:72:74:1B:72:05:F1:74:C2:80:54:56:97:2C:5D:8E
            X509v3 Authority Key Identifier:
                keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0f:61:14:8a:7d:12:9a:7c:d3:af:48:ad:7d:d2:6d:0e:ea:
         f4:b0:00:28:33:48:2c:bf:b0:e1:85:a3:9b:ee:1d:d5:a5:93:
         cc:4e:1a:0a:f0:25:59:e5:d6:fb:45:82:1f:5b:af:53:3f:b2:
         bb:97:81:00:0c:62:1e:25:79:ee:d8:1a:7f:41:c3:2e:90:4e:
         f0:ee:b6:02:65:3f:a3:46:7d:7d:99:d5:0d:9d:b7:b0:b8:b6:
         bc:7b:13:5e:8e:1a:41:86:82:a0:06:bb:f8:8b:c3:f9:83:2b:
         5d:df:7c:b0:d7:35:a8:b8:b4:de:b0:13:7c:e7:e4:62:1f:73:
         bd:26:9c:c7:f1:c4:25:73:a8:7a:45:cc:59:72:92:ec:1e:6c:
         b7:fe:d7:04:73:d7:05:f4:1b:22:bf:e7:72:0c:03:0f:f3:b8:
         12:69:0a:f4:ea:ed:98:ec:22:3b:d4:96:31:0f:a7:c0:76:fe:
         ed:09:84:42:f7:b7:70:4a:8d:0f:ca:81:74:c2:8f:0a:95:13:
         f3:ac:1d:31:ee:05:2e:1e:44:98:b1:0c:63:9d:b5:46:ad:03:
         95:a5:30:97:2d:75:95:67:75:2b:e5:30:13:ba:b7:75:27:b0:
         91:84:e5:4a:53:b5:dd:52:c6:53:fa:07:3f:ab:67:f6:5e:8f:
         f7:a9:1d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:15:37 2025 by rpki-client