Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
File:                     R600-MIKUHPoYIIcjAm_dXmibQs.mft (raw, json)
Hash identifier:          V4eP6ifS2liNqGAPkEq3Dpa1lpU6UZN3hAHQEc2Lqc8=
Subject key identifier:   EF:1B:C6:DC:DD:3A:4D:5A:6E:3D:64:78:C9:B5:26:8A:08:64:2E:05
Authority key identifier: 47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B
Certificate issuer:       /CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
Certificate serial:       0196BF0111FB6BCF7C3FCBCFC170E4DC7847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
Manifest number:          14A1
Signing time:             Sun 11 May 2025 11:00:40 +0000
Manifest this update:     Sun 11 May 2025 11:00:40 +0000
Manifest next update:     Mon 12 May 2025 11:00:40 +0000
Files and hashes:         1: R600-MIKUHPoYIIcjAm_dXmibQs.crl (hash: R5zMjls4hf5iW0UpQDZ2ylc9UP6mH37rqhrgFL5lFAQ=)
                          2: jbn0uNt62cbm-5uAutTNS6KIeT0.roa (hash: JjRHfVTqZW3BM/UoOGJBXI5IB1+oYeNHfz6C/Sa7drI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:01:11:fb:6b:cf:7c:3f:cb:cf:c1:70:e4:dc:78:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad34f8c20a5073e860821c8c09bf7579a26d0b
        Validity
            Not Before: May 11 11:00:40 2025 GMT
            Not After : May 12 11:00:40 2025 GMT
        Subject: CN=ef1bc6dcdd3a4d5a6e3d6478c9b5268a08642e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:a8:8f:07:5a:9f:ed:cf:25:3f:a0:c2:68:
                    1f:0f:93:69:37:cf:cc:12:78:87:9d:f9:19:41:25:
                    f4:66:2c:ce:b6:3d:e4:3f:6a:55:19:25:3e:ec:66:
                    14:e2:3a:90:84:06:46:5b:bd:34:95:43:d6:1f:07:
                    1e:b5:27:39:01:52:5b:45:43:1b:e3:7d:0d:ab:40:
                    c9:0e:5b:11:6a:04:80:ff:4a:cb:d5:b3:b1:be:56:
                    30:2c:80:50:7b:90:e0:c5:58:05:9e:fa:fa:32:fc:
                    67:58:99:c1:12:4c:ae:4a:f2:16:f6:8b:98:a1:f7:
                    a2:a1:28:3c:0f:e5:bd:e9:4d:3a:7b:78:81:31:20:
                    0e:c9:d2:e5:a7:7b:e1:1b:34:d7:1d:66:43:81:64:
                    d6:9f:ee:74:85:80:7a:dd:8b:d2:9a:5c:1c:7e:60:
                    a8:36:19:84:0f:1f:d7:b2:31:84:2c:a8:8f:bf:27:
                    e3:06:e4:6c:48:c8:16:09:ff:f2:56:82:e6:24:cd:
                    98:07:e4:a7:41:97:1e:5c:b2:22:e1:ac:ca:59:1d:
                    0e:2b:b5:4d:26:9a:93:b0:4c:9c:b8:72:a2:b2:88:
                    1b:6b:50:47:18:d2:47:fa:b8:81:4c:e9:46:be:01:
                    1f:38:c8:9a:49:b8:ab:1a:27:b9:52:f5:ab:73:46:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1B:C6:DC:DD:3A:4D:5A:6E:3D:64:78:C9:B5:26:8A:08:64:2E:05
            X509v3 Authority Key Identifier:
                keyid:47:AD:34:F8:C2:0A:50:73:E8:60:82:1C:8C:09:BF:75:79:A2:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R600-MIKUHPoYIIcjAm_dXmibQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/107db4-9fd7-4fcd-8d19-25413c260e45/1/R600-MIKUHPoYIIcjAm_dXmibQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:76:8a:3b:fc:93:60:8e:3e:b6:7f:ef:1e:8e:03:a7:b2:
         9e:64:64:48:3e:08:8a:c2:8a:07:16:45:21:c8:57:eb:72:3e:
         c8:3c:e6:6b:9d:c8:07:84:ae:01:ff:22:7f:03:22:1c:2b:0d:
         d0:21:d7:a0:e9:03:f4:58:8a:44:60:3d:86:67:be:24:43:53:
         99:1c:bb:4d:01:0c:f5:b1:dc:a5:d4:20:f7:4a:0b:c3:67:09:
         f5:3d:a1:7f:de:d4:0d:80:f3:19:f6:bb:11:1f:9c:9f:62:97:
         7c:5c:6f:c1:63:aa:a2:95:ae:39:7a:84:7e:eb:e1:5f:97:37:
         3f:84:72:4c:0c:d0:3e:ac:6b:ac:84:11:ee:b2:95:02:74:9b:
         29:0e:7a:22:f1:68:d6:d1:ca:a7:79:55:03:0a:9a:33:cf:8e:
         66:14:31:fd:05:6a:f7:58:a4:38:48:30:7d:4d:ae:39:f9:03:
         e6:30:33:71:20:0a:58:f9:12:3b:f8:bb:04:a8:eb:0c:f2:fa:
         92:20:80:d1:56:eb:21:53:46:da:83:86:45:3a:32:cc:2a:eb:
         42:cd:a6:91:ed:8c:ee:80:12:fe:cc:bc:4c:8e:35:15:e3:23:
         c3:e1:6d:8f:26:d0:f6:3a:79:14:d3:52:3d:4c:c7:e9:70:6f:
         0e:93:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:19:27 2025 by rpki-client