Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          U74QGVDAkRy8atlXxE3W8SUk3R/eO3wdk+78ppTBVrI=
Subject key identifier:   5F:45:11:E7:80:5E:96:43:CA:C2:1D:4E:F9:94:CA:63:26:F9:F4:93
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       0196BFDCA11B50197C0ACBC4864ADE6BBC05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          0433
Signing time:             Sun 11 May 2025 15:00:29 +0000
Manifest this update:     Sun 11 May 2025 15:00:29 +0000
Manifest next update:     Mon 12 May 2025 15:00:29 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: WHw8YS+RaLM2fw4mTGJ9zjZr9hl/13dEE/aRrDt9iig=)
                          2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:a1:1b:50:19:7c:0a:cb:c4:86:4a:de:6b:bc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: May 11 15:00:29 2025 GMT
            Not After : May 12 15:00:29 2025 GMT
        Subject: CN=5f4511e7805e9643cac21d4ef994ca6326f9f493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:6b:b8:8c:3d:33:89:76:85:df:34:3b:c2:
                    52:f3:45:77:59:33:6e:69:fe:2e:20:d7:bf:02:1a:
                    39:9b:3f:c9:e6:82:93:59:02:e0:3a:c2:13:71:f8:
                    4c:8b:39:f1:9e:ab:36:b1:c0:c4:4a:a0:0e:69:21:
                    83:a6:df:f7:a1:6c:de:7e:45:d3:57:da:29:b2:b1:
                    71:66:e9:29:68:b7:bd:41:34:98:06:62:a9:ad:ad:
                    fa:47:4d:29:f1:5f:b2:10:01:e8:ad:30:1e:09:a6:
                    00:4e:6e:fa:6d:fc:fd:bd:b0:ea:f0:fe:c3:bb:47:
                    62:f4:a4:d8:60:a1:1a:ba:a7:09:0a:40:98:10:28:
                    f8:c5:56:95:87:ff:b6:15:0a:2f:15:8b:3c:5e:e6:
                    37:7d:d6:45:7a:a9:96:27:8a:de:69:ac:2b:7e:d0:
                    17:f5:e2:ec:22:7c:d5:28:32:03:a0:b4:f4:e4:85:
                    97:ee:76:74:f5:a5:78:88:b4:2a:ce:7b:c8:4f:24:
                    55:db:97:5d:78:46:93:77:d6:8a:63:cb:2a:00:d8:
                    5b:62:03:f2:24:61:f8:16:5d:9a:d0:0d:f2:ab:62:
                    be:48:42:42:10:e4:8d:45:59:2d:e9:e9:23:8b:29:
                    9c:84:0f:6f:bc:10:e9:a3:ae:9f:b5:67:75:6e:2a:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:11:E7:80:5E:96:43:CA:C2:1D:4E:F9:94:CA:63:26:F9:F4:93
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:4f:e2:7c:8c:f1:f7:1c:c9:7e:13:ae:1d:61:e9:92:8f:
         52:27:fc:cd:72:46:d6:f6:2d:55:a4:2b:17:b3:b6:c7:82:b4:
         cc:a5:9b:40:0c:a8:11:58:bc:31:bd:48:d1:54:03:e2:47:6d:
         48:74:5a:fb:94:9c:10:47:d8:c8:41:4e:a5:75:a5:0f:ec:54:
         a0:e8:82:53:40:03:6c:d7:5e:a7:db:84:b7:d9:e8:1c:a2:31:
         b6:b2:e0:42:b1:ba:44:51:4b:ce:1f:30:6a:09:0e:24:d4:05:
         77:4c:40:72:8d:ea:94:03:67:24:74:0e:54:cb:df:3f:fe:6c:
         1a:da:30:f8:d2:ac:30:53:fe:74:b9:f1:65:c8:bc:8c:79:34:
         8e:ff:0e:e6:f7:ed:57:ab:6c:ff:96:f6:99:30:90:d9:98:88:
         7b:e4:30:47:d3:7e:f1:a5:d8:0c:9e:ed:45:0a:da:4f:cb:71:
         6a:25:8f:4c:0d:bb:3d:06:73:be:88:c6:e4:bd:f1:9d:5d:c7:
         e8:9f:cb:bd:cc:8f:f6:0a:84:6c:63:ec:10:f1:76:91:56:21:
         90:b0:f1:70:21:4b:2b:06:4a:e5:a7:3f:b7:00:60:08:66:ca:
         55:10:f6:01:2d:3a:f6:15:7b:b3:bf:da:a6:4c:69:10:6e:21:
         15:b4:6c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:35:47 2025 by rpki-client