Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
File:                     0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft (raw, json)
Hash identifier:          jiD8ZskTyVK6tuSxWUM2suRSW77yRvlYo4p3WIvclPw=
Subject key identifier:   F8:A7:DB:26:4B:E5:8A:0A:59:32:DE:7B:45:F4:A9:26:3F:F3:C0:76
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Certificate issuer:       /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial:       0196C15CFE6CEBA1778301DBC554E55D7C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
Manifest number:          0FE6
Signing time:             Sun 11 May 2025 22:00:19 +0000
Manifest this update:     Sun 11 May 2025 22:00:19 +0000
Manifest next update:     Mon 12 May 2025 22:00:19 +0000
Files and hashes:         1: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl (hash: 00zDBZR5G5rfXtcjZzoTcX0sYNurPFdkxDyhvqm5iMA=)
                          2: rfxK95wCJYlz8bBxZevQEHg20gE.roa (hash: 8l01FF6TVdT6B24/91ZO6lRY0qxUT4iiEOhJmZiX1rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5c:fe:6c:eb:a1:77:83:01:db:c5:54:e5:5d:7c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
        Validity
            Not Before: May 11 22:00:19 2025 GMT
            Not After : May 12 22:00:19 2025 GMT
        Subject: CN=f8a7db264be58a0a5932de7b45f4a9263ff3c076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:83:1b:6e:06:bf:3a:77:9e:6e:66:c5:1b:
                    a1:ac:da:62:c8:61:b8:fd:27:84:34:59:94:8c:7d:
                    eb:d8:ba:ef:32:53:cb:66:70:9a:71:a3:ce:4d:99:
                    20:88:b4:97:be:62:5d:e5:48:c9:97:ce:a7:de:e3:
                    d6:82:38:61:57:90:ae:4c:8e:66:f9:ff:e1:2e:62:
                    ec:30:85:34:3b:0b:c8:90:12:79:dc:50:51:fd:83:
                    53:e4:5e:d2:8f:9f:26:f0:5e:bb:08:78:da:d8:ea:
                    86:5f:50:9d:07:66:9e:04:03:64:a1:13:b8:5a:d0:
                    04:e7:c4:d1:3b:5d:da:18:11:f1:31:d0:e7:39:e9:
                    f5:1d:80:a1:13:0f:a0:a4:1b:c9:3a:bc:ed:3c:f5:
                    90:e6:f6:7e:88:07:75:f4:b8:88:6e:38:7c:54:a6:
                    78:9c:ae:7e:c0:7f:f5:2c:06:67:74:3d:6a:f2:96:
                    a6:b4:9a:4e:12:96:46:be:60:11:3b:39:bd:df:f1:
                    e4:9b:59:61:56:32:79:16:34:f7:d0:fe:b2:82:6e:
                    d8:25:d4:85:2a:44:6c:ac:83:4a:11:19:fa:c5:01:
                    64:5d:1f:56:21:58:1c:16:7e:80:fd:81:0c:8d:b8:
                    c1:64:ce:c7:64:92:73:c6:2c:75:f6:61:05:98:0e:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A7:DB:26:4B:E5:8A:0A:59:32:DE:7B:45:F4:A9:26:3F:F3:C0:76
            X509v3 Authority Key Identifier:
                keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:69:c8:ed:e7:ca:b4:1b:36:57:91:ad:a0:5b:2c:08:b1:27:
         03:49:06:e8:09:c0:e4:bb:e2:40:32:0c:5e:b7:6c:8f:c9:e4:
         df:a4:a9:13:e1:ac:06:97:75:1d:ae:29:be:49:12:01:4e:c1:
         b2:30:8f:4a:42:94:6f:d2:df:14:50:35:2c:61:51:09:bc:ab:
         9a:e4:9b:64:84:c6:21:76:1f:d2:2e:6d:d6:41:27:14:fb:56:
         3f:25:55:da:ef:16:16:a7:e7:64:35:60:6c:b5:dd:a9:eb:eb:
         81:92:01:54:d4:71:ea:c7:9e:09:5d:78:ea:6a:f3:61:c3:c1:
         58:09:28:6f:b5:ef:08:09:30:fa:ed:db:bb:8f:5c:1a:73:38:
         84:76:0c:ec:6b:8f:da:5f:27:d0:3b:c3:be:29:84:9f:6e:99:
         04:8f:12:ab:e8:e3:6d:86:49:66:75:0c:c2:08:f9:8a:f9:65:
         15:6c:32:7d:62:ef:75:38:c8:96:69:b0:31:27:a3:3a:19:9a:
         46:80:70:24:81:32:a9:ef:47:6f:a3:3e:03:22:58:bc:a0:11:
         ac:b3:0c:77:0f:2c:ce:60:b8:74:84:c7:a2:f9:31:7d:53:36:
         c4:8d:83:bc:b7:88:39:6f:da:19:5a:59:a3:77:f1:42:be:7f:
         7f:16:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:59:00 2025 by rpki-client