Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File:                     YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier:          ia2W1T5LoTnQslelIPIdhnh90ve/K54IxHeQGQ5cbBo=
Subject key identifier:   20:31:6C:94:AF:73:05:A1:28:CB:26:8C:DD:E1:0E:15:26:00:36:6E
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer:       /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial:       0196B06983A260DC8AB87B9160ECC61CE157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number:          06A6
Signing time:             Thu 08 May 2025 15:00:27 +0000
Manifest this update:     Thu 08 May 2025 15:00:27 +0000
Manifest next update:     Fri 09 May 2025 15:00:27 +0000
Files and hashes:         1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: /3zMiB3Scbw4PgR7Rh9caYUPEF/utBKzIIvsAJ9xfTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:83:a2:60:dc:8a:b8:7b:91:60:ec:c6:1c:e1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
        Validity
            Not Before: May  8 15:00:27 2025 GMT
            Not After : May  9 15:00:27 2025 GMT
        Subject: CN=20316c94af7305a128cb268cdde10e152600366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:cf:1f:64:e2:de:50:6e:ec:9a:d7:93:e9:
                    92:a9:a4:8d:32:83:d9:f3:19:7e:56:a2:45:07:b3:
                    8e:d0:fd:6b:c7:01:5d:01:02:2a:f1:20:ef:c6:fc:
                    a8:24:93:c7:56:98:81:ca:bb:5b:9b:c5:80:c3:04:
                    64:2d:21:84:2d:29:4e:59:b4:a1:4f:e7:0e:f2:f8:
                    f5:76:82:3b:e2:0f:9f:36:1a:e0:c1:fa:e8:4b:69:
                    d6:da:d8:1d:a5:0f:c6:a7:76:f4:01:88:1d:3b:c3:
                    d1:15:94:33:03:40:c2:5e:66:e1:52:ea:4e:67:df:
                    52:ec:1b:77:ca:7f:71:2a:76:16:2c:65:76:8e:96:
                    33:1a:34:60:b8:9f:57:53:9a:0c:7a:e2:8a:bf:7c:
                    46:3e:12:49:a2:0b:48:d0:0b:e5:d5:60:92:db:f8:
                    5c:f9:d1:c7:61:82:87:ad:ab:19:14:86:b9:a3:76:
                    cc:51:46:8a:0b:e3:a1:84:8a:22:02:24:55:94:a0:
                    f2:56:fd:47:19:ff:0e:bb:cc:b0:f0:7b:bf:00:07:
                    74:f5:da:c9:bd:3c:b6:a2:c0:42:fd:1b:16:04:c0:
                    ff:78:8e:9f:f6:d2:c6:26:b0:53:c7:3c:dc:88:41:
                    2a:fe:3d:ed:e6:1e:04:db:48:f5:37:4d:8c:a1:c1:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:6C:94:AF:73:05:A1:28:CB:26:8C:DD:E1:0E:15:26:00:36:6E
            X509v3 Authority Key Identifier:
                keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:6c:3e:50:48:5e:14:cb:ed:40:e9:40:47:83:0d:b8:d6:
         6c:2d:4c:1a:96:cc:0e:ec:12:7c:f2:56:2d:e2:fd:40:6d:93:
         bf:89:91:3a:33:a0:2a:3b:28:74:d0:ea:b6:3f:b0:2e:74:d2:
         12:3e:0a:b1:37:d0:c5:9b:35:56:6e:c1:c3:ae:b9:cc:85:bf:
         2c:5a:22:cd:ec:33:be:ed:26:a4:66:2e:c8:04:95:6d:47:ea:
         ff:99:17:10:52:90:28:49:c9:9a:44:72:91:0b:4e:6f:e9:2a:
         16:fe:ca:57:ef:0b:c8:32:f2:d6:e9:c1:c1:55:e9:23:b3:95:
         63:5f:0c:86:96:ea:aa:b3:a4:b0:80:f3:37:42:08:ff:91:5b:
         f1:a8:2f:81:4b:c5:ac:77:ab:2a:03:67:f7:4e:79:3c:ad:56:
         f2:77:59:34:89:1b:53:87:7f:f1:67:ae:ae:27:9b:69:22:1a:
         70:02:26:f1:52:90:11:e9:34:7f:16:9b:dc:8b:05:1d:63:05:
         0d:1e:ef:a0:29:96:4e:2a:8a:4d:e3:7e:e0:af:9c:4d:b1:de:
         e3:21:fe:01:06:1a:b1:bc:79:7c:47:01:6f:a8:29:46:7e:42:
         fb:1a:5b:70:3e:36:b2:ef:cf:cd:8f:61:37:bb:b9:91:23:f6:
         d9:5d:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:37:09 2025 by rpki-client