Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
File:                     YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json)
Hash identifier:          Gj+PSQf1PVq8Xrpxx9dwliYWZjGbCbae1gHV/lvazd0=
Subject key identifier:   73:12:07:14:C3:F4:79:A0:1F:FB:D6:28:37:72:71:3D:05:3A:D5:4A
Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23
Certificate issuer:       /CN=60e2c8f75f385acb4b94a68d899351ba347a3323
Certificate serial:       0198D660EA481E2AE772E543A4EBDBCB1566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
Manifest number:          1559
Signing time:             Sat 23 Aug 2025 10:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:12 +0000
Files and hashes:         1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: P5/fmC23Ardeqzsxvg9fV0aXJ3e+DCljMMNwoIOlqw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:ea:48:1e:2a:e7:72:e5:43:a4:eb:db:cb:15:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323
        Validity
            Not Before: Aug 23 10:02:12 2025 GMT
            Not After : Aug 24 10:02:12 2025 GMT
        Subject: CN=73120714c3f479a01ffbd6283772713d053ad54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:2b:2b:40:ed:f9:da:82:75:49:98:be:a8:
                    87:7d:58:bf:4e:47:16:25:66:04:43:19:53:9d:7b:
                    b5:5e:4a:69:64:74:0d:04:1f:a1:75:16:7e:dd:81:
                    bd:74:bb:01:4c:86:6c:c9:5e:cc:fb:8f:f0:ce:95:
                    b1:4a:1b:ed:59:21:33:55:05:5a:6d:0c:28:94:2e:
                    0e:8f:25:e5:c1:3c:3a:33:a5:30:2c:e3:60:b7:e5:
                    84:55:af:08:1f:a7:f5:36:c6:d9:9a:94:65:64:07:
                    79:10:a3:0f:94:bb:19:64:89:eb:27:67:c5:bd:d3:
                    a7:62:06:59:85:b6:59:a7:d2:5f:d0:7d:81:cb:05:
                    58:c9:c4:21:cd:37:0c:e0:90:bc:c3:c5:90:f4:73:
                    5a:34:26:bc:2a:ce:23:dd:8c:fe:67:51:85:c6:90:
                    d2:b2:36:db:8e:3b:2d:dd:05:3a:2b:d0:3c:e2:83:
                    0a:d3:e8:de:ed:6d:29:32:60:ca:a6:20:dd:f5:e1:
                    02:40:76:f4:c9:d3:3e:4c:e2:a3:67:3f:70:bc:50:
                    19:e6:e4:52:7c:69:2d:50:7d:3b:15:80:89:69:d9:
                    02:df:d3:a5:47:04:4f:2c:5f:d3:30:91:1d:b5:37:
                    53:3c:30:d8:30:bd:2a:5e:3f:7b:43:41:56:53:7a:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:07:14:C3:F4:79:A0:1F:FB:D6:28:37:72:71:3D:05:3A:D5:4A
            X509v3 Authority Key Identifier:
                keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fe:43:eb:35:21:ed:70:03:e3:20:fd:ed:a2:a2:20:83:86:
         bc:22:c6:2b:e8:87:b0:2c:59:42:3e:b2:3e:68:6b:8c:5a:fc:
         7a:da:05:0f:92:e1:fb:bc:19:5b:2f:95:fe:ba:68:03:ff:b3:
         5e:b3:09:2d:e0:ef:6b:cc:8b:f9:3d:c8:e9:48:84:97:82:60:
         60:67:bc:a9:79:a3:ea:2a:85:91:86:d9:35:4d:b0:4c:ea:33:
         fe:de:2b:36:d9:74:4b:27:e5:8b:67:39:52:69:e3:7c:68:51:
         ab:fd:21:4a:53:1c:58:17:16:bd:fd:44:0d:ea:a6:56:bc:2d:
         9b:4f:07:b9:5b:ab:c8:44:2d:7b:19:e5:06:a8:6b:9f:47:f8:
         35:8b:a9:e7:bd:b7:9b:b9:eb:5a:da:b5:f9:6b:7f:e9:24:44:
         9f:5f:a0:a8:a7:ad:16:9e:03:63:da:2d:39:81:c8:73:46:a6:
         3c:ac:0a:93:93:c6:ad:a7:a6:c5:41:a6:92:da:cf:2c:ef:ed:
         8e:ef:62:d7:18:db:ab:d8:35:27:4c:2b:46:e5:9b:d8:03:44:
         1e:d1:94:7b:9a:ec:08:ca:10:05:96:3c:ce:19:a4:1b:1d:0a:
         77:e0:a4:d2:12:f3:cc:58:99:42:05:8d:65:b4:08:02:8e:41:
         80:fb:c1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYOpIHirncuVDpOvbyxVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTJjOGY3NWYzODVhY2I0Yjk0YTY4ZDg5OTM1MWJhMzQ3
YTMzMjMwHhcNMjUwODIzMTAwMjEyWhcNMjUwODI0MTAwMjEyWjAzMTEwLwYDVQQD
Eyg3MzEyMDcxNGMzZjQ3OWEwMWZmYmQ2MjgzNzcyNzEzZDA1M2FkNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBcrK0Dt+dqCdUmYvqiHfVi/TkcW
JWYEQxlTnXu1XkppZHQNBB+hdRZ+3YG9dLsBTIZsyV7M+4/wzpWxShvtWSEzVQVa
bQwolC4OjyXlwTw6M6UwLONgt+WEVa8IH6f1NsbZmpRlZAd5EKMPlLsZZInrJ2fF
vdOnYgZZhbZZp9Jf0H2BywVYycQhzTcM4JC8w8WQ9HNaNCa8Ks4j3Yz+Z1GFxpDS
sjbbjjst3QU6K9A84oMK0+je7W0pMmDKpiDd9eECQHb0ydM+TOKjZz9wvFAZ5uRS
fGktUH07FYCJadkC39OlRwRPLF/TMJEdtTdTPDDYML0qXj97Q0FWU3qGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMSBxTD9HmgH/vWKDdycT0FOtVKMB8GA1UdIwQY
MBaAFGDiyPdfOFrLS5SmjYmTUbo0ejMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4Mzkt
NGExNjdiMTU5Yzg4LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4MzktNGExNjdiMTU5Yzg4
LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkP5D6zUh
7XAD4yD97aKiIIOGvCLGK+iHsCxZQj6yPmhrjFr8etoFD5Lh+7wZWy+V/rpoA/+z
XrMJLeDva8yL+T3I6UiEl4JgYGe8qXmj6iqFkYbZNU2wTOoz/t4rNtl0Syfli2c5
UmnjfGhRq/0hSlMcWBcWvf1EDeqmVrwtm08HuVuryEQtexnlBqhrn0f4NYup5723
m7nrWtq1+Wt/6SREn1+gqKetFp4DY9otOYHIc0amPKwKk5PGraemxUGmktrPLO/t
ju9i1xjbq9g1J0wrRuWb2ANEHtGUe5rsCMoQBZY8zhmkGx0Kd+Ck0hLzzFiZQgWN
ZbQIAo5BgPvB+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:14 2025 by rpki-client