Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
File:                     iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft (raw, json)
Hash identifier:          Hot2jJ0A/HsN50epQrDyKNrSgvfOyU2hPsn7xMwMs48=
Subject key identifier:   C3:73:99:38:51:2F:AF:0A:D8:65:C9:D5:A0:1B:2C:FD:1F:42:B8:A8
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Certificate issuer:       /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial:       0196A68AE115CE0ECEA52C014D5C209AA110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
Manifest number:          0FB5
Signing time:             Tue 06 May 2025 17:00:41 +0000
Manifest this update:     Tue 06 May 2025 17:00:41 +0000
Manifest next update:     Wed 07 May 2025 17:00:41 +0000
Files and hashes:         1: 1g597y06foQbOFcS_h93SwkhNOQ.roa (hash: TZdC67NT8fkd1drCN7n7TEHOt/q1UG1cqUfoMBev2T4=)
                          2: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl (hash: e7OR0skaRTDmtrOLc5C+IjF9/ZDEKyVImQ/FBmVrAtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:8a:e1:15:ce:0e:ce:a5:2c:01:4d:5c:20:9a:a1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
        Validity
            Not Before: May  6 17:00:41 2025 GMT
            Not After : May  7 17:00:41 2025 GMT
        Subject: CN=c3739938512faf0ad865c9d5a01b2cfd1f42b8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:10:e2:8f:e7:c0:85:c4:f6:ab:f6:f6:23:
                    5f:71:70:f0:8c:6d:ef:98:6e:e6:25:fd:14:37:da:
                    a2:7c:3e:8b:01:0d:52:7e:d5:d7:5a:4c:7a:26:05:
                    4b:2d:e0:47:a6:c8:1a:5b:ab:e6:28:7a:aa:ed:5e:
                    37:f4:5d:4f:4f:a8:a2:2e:dd:6f:71:a9:8f:e7:0f:
                    b0:8f:05:ae:36:9e:fb:9e:4f:e5:ea:d4:54:d3:6d:
                    f1:53:fa:f7:f2:d7:f1:f6:68:04:9d:10:29:d5:2c:
                    7d:07:d3:ce:09:12:15:9c:57:7c:b1:e5:12:6b:d1:
                    5f:18:5b:0b:94:c5:7a:eb:db:89:e3:92:33:c7:00:
                    4d:17:ac:6e:44:11:64:8d:a0:ae:a7:27:11:56:fd:
                    e8:6a:ae:a9:4d:53:b3:e5:df:31:f9:57:fd:64:f5:
                    45:19:8d:95:4c:85:6a:a9:4c:df:3b:fb:d0:8d:bd:
                    35:5a:50:08:74:08:de:88:dd:bf:a9:af:e3:e8:ea:
                    5f:7a:03:5a:1f:04:0f:31:cc:35:f7:ad:02:00:40:
                    f2:b4:c7:da:bf:13:26:6b:ca:c7:8e:94:1d:13:cf:
                    0e:3b:73:2a:e7:fb:4e:8c:f6:c6:a3:67:93:25:17:
                    ff:4b:7c:09:b1:a0:da:ba:d7:68:2b:b9:e8:04:3d:
                    8d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:99:38:51:2F:AF:0A:D8:65:C9:D5:A0:1B:2C:FD:1F:42:B8:A8
            X509v3 Authority Key Identifier:
                keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cd:24:31:fe:f0:17:13:24:f6:10:b8:5a:46:e3:a6:ab:10:
         63:6f:33:8c:e9:34:ba:b1:ba:7d:05:a0:42:e7:2a:0b:3e:5e:
         e4:5f:b3:30:61:07:26:7a:7c:7e:0b:b3:b5:3d:a5:f8:05:d2:
         61:c1:4a:d5:39:da:9b:b4:f7:ad:e6:ed:70:65:13:d5:02:9a:
         87:f6:91:8f:c1:eb:73:d5:69:51:15:d4:3c:2f:cc:c7:da:af:
         80:8b:08:45:7e:b4:4c:4a:2a:a0:87:31:e1:a7:cc:52:33:19:
         d9:0e:e1:05:b3:bd:f3:ed:15:9d:1e:25:72:71:bf:95:80:74:
         2e:51:1f:4f:07:d0:f7:11:9c:40:ad:60:6e:61:56:b5:0e:ce:
         e2:d2:bf:cd:c0:ba:3a:82:c5:d7:41:69:43:94:a6:15:fb:51:
         49:2a:0a:6f:b9:f5:b2:2a:83:c9:93:37:93:83:bb:d2:66:8a:
         49:8a:11:bc:b1:ca:6d:c2:c3:28:c8:25:40:6e:d6:ba:28:c2:
         f1:d5:e6:d8:90:bf:81:2b:7a:c0:4a:ed:24:5d:65:f9:c4:20:
         28:e4:bf:56:4f:62:90:5c:be:bf:33:3c:16:a9:26:6c:31:b9:
         3a:f4:6a:ec:18:87:0b:ec:b1:ad:92:6f:ff:63:68:44:01:03:
         39:79:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:48:59 2025 by rpki-client