Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
File:                     Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft (raw, json)
Hash identifier:          tLrzw1ALgnoPvClhcOOJ6/eRtudgkw580WrtZeMAhRA=
Subject key identifier:   E7:B6:0E:A3:BB:20:B0:44:A8:C7:2B:38:93:D4:17:4C:4E:74:CD:FC
Authority key identifier: 62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4
Certificate issuer:       /CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
Certificate serial:       0196AFFBFD136AF923C3D44A62ACEE377709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
Manifest number:          1106
Signing time:             Thu 08 May 2025 13:00:49 +0000
Manifest this update:     Thu 08 May 2025 13:00:49 +0000
Manifest next update:     Fri 09 May 2025 13:00:49 +0000
Files and hashes:         1: Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl (hash: iZn8/FJZ1H5FlCJ6KkTsxs9Rnq/GplsAF63xErdkYkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:fb:fd:13:6a:f9:23:c3:d4:4a:62:ac:ee:37:77:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624a7f2507fcadbecd3d2b6298e70f5d4bfe04b4
        Validity
            Not Before: May  8 13:00:49 2025 GMT
            Not After : May  9 13:00:49 2025 GMT
        Subject: CN=e7b60ea3bb20b044a8c72b3893d4174c4e74cdfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:be:50:cc:a9:a7:20:76:eb:eb:c3:cb:35:
                    8a:15:be:62:4e:ba:0e:55:ac:1f:88:d4:fb:49:39:
                    81:a9:f4:05:e5:56:7d:67:d3:11:4a:78:09:f1:dd:
                    09:30:21:01:f3:79:3c:a6:13:68:a0:4b:0f:ef:01:
                    2f:61:8a:66:f2:47:55:64:f9:71:73:0b:a0:09:8e:
                    83:30:1c:c5:3c:b3:53:d5:3b:0b:38:59:8a:1a:f3:
                    e9:11:07:33:a7:ff:a6:aa:e3:e5:c9:5e:1e:e6:9a:
                    ba:c0:f3:69:8f:92:78:5c:46:13:9f:40:35:6a:f9:
                    f7:31:9f:de:8b:26:28:7f:62:01:1f:fe:28:04:05:
                    ba:e6:8e:44:72:63:fe:20:94:1a:c5:f4:a6:48:85:
                    d8:99:6a:3a:17:33:57:19:a5:c4:82:32:66:20:09:
                    12:81:95:b7:eb:c0:41:bd:4b:03:3d:bb:40:ca:59:
                    ed:9e:e5:cb:5b:7b:c6:ff:05:eb:33:b4:04:65:87:
                    3c:c6:da:2c:c7:8c:26:98:ae:f2:3c:e1:52:c3:d4:
                    4a:ad:ec:34:f5:39:83:c0:13:5d:37:2f:46:0e:32:
                    ad:c5:1e:c9:ed:fd:d5:af:62:0f:b1:fd:57:7c:01:
                    55:9a:cf:6f:57:4f:32:44:54:71:ed:5f:09:eb:7d:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:0E:A3:BB:20:B0:44:A8:C7:2B:38:93:D4:17:4C:4E:74:CD:FC
            X509v3 Authority Key Identifier:
                keyid:62:4A:7F:25:07:FC:AD:BE:CD:3D:2B:62:98:E7:0F:5D:4B:FE:04:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ykp_JQf8rb7NPStimOcPXUv-BLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/270e1a-089a-4090-8a9b-c822c838dfe9/1/Ykp_JQf8rb7NPStimOcPXUv-BLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:8a:c5:a3:93:c4:39:03:0e:f3:cb:e3:76:5f:38:18:1e:a9:
         31:62:4e:b8:52:69:9b:c5:3f:b1:b7:b7:7a:29:0d:fc:c9:6a:
         3c:5f:be:68:2f:df:71:b2:41:0d:4d:67:ff:29:f7:d6:9c:f9:
         41:6b:ca:39:78:66:87:ab:98:e1:50:5c:69:fc:36:f5:8e:79:
         ce:59:73:11:f8:4a:3e:66:42:a6:39:cb:e7:12:28:20:8d:c4:
         1e:0f:e0:94:29:c6:c8:8d:60:22:77:d7:bf:0c:d2:51:c4:21:
         ad:3d:9e:67:e3:61:b8:b1:2a:89:e0:6f:80:3c:e5:bd:e8:5b:
         81:2e:ba:f2:55:6b:b4:b0:1a:80:79:c2:b5:a9:bd:e1:70:bb:
         a0:76:53:b7:d4:71:41:09:26:ce:dd:e4:d1:b1:c5:80:17:c7:
         6f:34:6c:99:da:61:e7:3b:48:ec:f7:95:22:05:da:9d:b4:20:
         b8:f4:b5:4c:f5:96:ef:a2:43:ae:4e:c6:98:df:18:e3:18:64:
         93:36:ed:d6:5d:5c:d0:29:c9:88:00:fd:27:61:2f:db:76:c5:
         e2:9a:05:3f:5e:8d:1d:d2:1e:b9:3d:d0:59:8a:3f:c5:63:55:
         3f:e6:7d:09:05:5b:b7:f2:48:59:10:79:6f:4a:5b:82:7f:6f:
         9c:1e:34:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav+/0Tavkjw9RKYqzuN3cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGE3ZjI1MDdmY2FkYmVjZDNkMmI2Mjk4ZTcwZjVkNGJm
ZTA0YjQwHhcNMjUwNTA4MTMwMDQ5WhcNMjUwNTA5MTMwMDQ5WjAzMTEwLwYDVQQD
EyhlN2I2MGVhM2JiMjBiMDQ0YThjNzJiMzg5M2Q0MTc0YzRlNzRjZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zq+UMyppyB26+vDyzWKFb5iTroO
VawfiNT7STmBqfQF5VZ9Z9MRSngJ8d0JMCEB83k8phNooEsP7wEvYYpm8kdVZPlx
cwugCY6DMBzFPLNT1TsLOFmKGvPpEQczp/+mquPlyV4e5pq6wPNpj5J4XEYTn0A1
avn3MZ/eiyYof2IBH/4oBAW65o5EcmP+IJQaxfSmSIXYmWo6FzNXGaXEgjJmIAkS
gZW368BBvUsDPbtAylntnuXLW3vG/wXrM7QEZYc8xtosx4wmmK7yPOFSw9RKrew0
9TmDwBNdNy9GDjKtxR7J7f3Vr2IPsf1XfAFVms9vV08yRFRx7V8J632YqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe2DqO7ILBEqMcrOJPUF0xOdM38MB8GA1UdIwQY
MBaAFGJKfyUH/K2+zT0rYpjnD11L/gS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWIt
YzgyMmM4MzhkZmU5LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yNzBlMWEtMDg5YS00MDkwLThhOWItYzgyMmM4MzhkZmU5
LzEvWWtwX0pRZjhyYjdOUFN0aW1PY1BYVXYtQkxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1orFo5PE
OQMO88vjdl84GB6pMWJOuFJpm8U/sbe3eikN/MlqPF++aC/fcbJBDU1n/yn31pz5
QWvKOXhmh6uY4VBcafw29Y55zllzEfhKPmZCpjnL5xIoII3EHg/glCnGyI1gInfX
vwzSUcQhrT2eZ+NhuLEqieBvgDzlvehbgS668lVrtLAagHnCtam94XC7oHZTt9Rx
QQkmzt3k0bHFgBfHbzRsmdph5ztI7PeVIgXanbQguPS1TPWW76JDrk7GmN8Y4xhk
kzbt1l1c0CnJiAD9J2Ev23bF4poFP16NHdIeuT3QWYo/xWNVP+Z9CQVbt/JIWRB5
b0pbgn9vnB40kg==
-----END CERTIFICATE-----
Generated at Thu May 8 19:04:01 2025 by rpki-client