Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          eVwyw6yy8kyFfbtzNZLzjt3NKrO2N+p4PCH5aC+NoVw=
Subject key identifier:   EF:CD:B9:53:61:66:0F:44:06:4B:59:FA:81:45:F0:37:8C:57:34:07
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       0196C2025ABF188AED1D09A619076E117F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          08CE
Signing time:             Mon 12 May 2025 01:00:56 +0000
Manifest this update:     Mon 12 May 2025 01:00:56 +0000
Manifest next update:     Tue 13 May 2025 01:00:56 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: Z4LHTHZoDoVN/FImgBaL/OePEQoNmVO2UCAdkO6Rfvk=)
                          2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:5a:bf:18:8a:ed:1d:09:a6:19:07:6e:11:7f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: May 12 01:00:56 2025 GMT
            Not After : May 13 01:00:56 2025 GMT
        Subject: CN=efcdb95361660f44064b59fa8145f0378c573407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:7f:67:9e:c1:44:5a:3f:89:df:71:ef:a4:
                    b1:57:22:7d:35:f8:dc:be:09:b3:cc:d4:d8:74:ef:
                    90:9d:1e:f0:94:e1:f2:92:53:d5:b0:08:34:c4:e2:
                    d1:93:cb:0b:da:c0:d0:96:4f:59:e2:8a:2b:c1:7d:
                    84:a1:a2:d8:53:6e:7a:77:cc:19:66:05:d2:b7:a4:
                    fe:be:3e:2a:ea:32:f7:b6:01:10:fd:c0:79:b9:a4:
                    86:a1:97:fb:c0:94:fd:83:c1:1b:a4:57:37:51:6e:
                    12:be:4f:5f:ed:f8:4e:ff:39:95:00:b8:43:f5:ca:
                    20:ec:c3:86:75:8e:a0:e8:e2:54:f7:c1:d2:b4:bd:
                    ab:39:71:9d:8e:56:39:37:ed:dd:43:99:8e:dd:4e:
                    5c:81:ae:ff:9f:8b:b7:28:de:56:83:06:b1:46:81:
                    a1:a4:bd:7f:7e:4a:fd:e4:fc:af:e5:23:2f:94:66:
                    24:25:87:2a:00:44:c5:eb:e1:c6:07:b6:ee:a9:b1:
                    41:5d:2a:ff:c0:13:87:24:06:bc:04:33:2c:fd:5f:
                    d5:a0:13:83:19:a0:bc:56:7c:01:43:46:be:89:ae:
                    72:85:cc:2c:78:0c:0f:8e:80:be:99:e6:75:63:0a:
                    26:47:f8:f8:5c:3b:8a:bd:35:b4:c0:19:a7:12:d8:
                    d2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CD:B9:53:61:66:0F:44:06:4B:59:FA:81:45:F0:37:8C:57:34:07
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:30:48:73:9a:23:fb:cd:46:1a:15:e8:1b:e0:0f:58:a9:0e:
         03:fe:1f:fc:71:3f:6e:6e:c2:00:f0:aa:44:d3:33:47:90:4d:
         a8:19:d0:15:a7:56:24:e6:5e:6a:bb:a6:a1:0e:e6:74:b7:8f:
         e1:d2:8a:8b:5b:e0:58:c3:0d:40:03:d9:bc:e7:7d:74:d0:10:
         22:d6:38:9a:b5:53:13:10:f1:d8:79:93:3c:f3:ab:cf:6e:10:
         fd:d9:ab:40:a8:92:c3:6e:72:21:08:13:be:36:cf:77:fe:7a:
         4b:21:f9:88:fa:2b:ec:57:7a:31:a5:62:a9:f8:78:05:9e:53:
         2a:4c:2d:ba:8b:bd:34:ec:90:9b:53:75:02:b0:ed:c7:67:c7:
         91:80:4e:76:41:f9:3f:a8:2d:c7:16:9a:2a:39:52:4b:f7:c1:
         24:1c:22:e5:69:8b:87:4f:11:8c:06:fa:32:59:9a:5a:ee:d2:
         06:8e:d0:46:74:49:bb:02:3f:06:79:26:0c:1a:a9:59:ec:49:
         00:ea:0f:4f:51:18:54:55:98:62:c8:6d:e7:f1:94:4a:cc:2f:
         4a:2b:79:e3:41:a7:52:73:c4:48:7e:a4:6a:09:58:eb:1e:9a:
         f6:85:7e:c5:c6:cb:4c:40:db:93:87:c2:1f:3d:9a:8f:4b:4b:
         6e:2b:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:37 2025 by rpki-client