Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
File:                     iLLLBJMgYFaclyBofe2JHDTrttU.mft (raw, json)
Hash identifier:          DjiHLAYv1M06cTeRglNOfqaGdL84obza4cw8d6ifURU=
Subject key identifier:   15:EB:54:60:4E:F7:D3:FE:9A:98:AB:74:C9:5E:E7:C1:83:94:83:66
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Certificate issuer:       /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial:       0196AC8C9A86A6152182B4DE72170C329B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
Manifest number:          045F
Signing time:             Wed 07 May 2025 21:00:17 +0000
Manifest this update:     Wed 07 May 2025 21:00:17 +0000
Manifest next update:     Thu 08 May 2025 21:00:17 +0000
Files and hashes:         1: iLLLBJMgYFaclyBofe2JHDTrttU.crl (hash: nh5i+7fH4Ybf9RYrW2okJuJ1PmNOQMezNep15lpVs2o=)
                          2: r8ye77zqIb8BIbvCeWpbvAUL4Aw.roa (hash: wjEomxk07ox6hhu7Ke9tXLk+PxIAdxXrhUQiAqx1wcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:8c:9a:86:a6:15:21:82:b4:de:72:17:0c:32:9b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
        Validity
            Not Before: May  7 21:00:17 2025 GMT
            Not After : May  8 21:00:17 2025 GMT
        Subject: CN=15eb54604ef7d3fe9a98ab74c95ee7c183948366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:2d:c7:b9:9d:64:6b:5a:78:ef:a5:98:9a:
                    ee:48:71:f5:ab:3a:d7:4f:ea:18:12:ca:67:a8:65:
                    c7:a8:b4:ec:9e:4d:a6:57:23:e5:4b:11:b3:17:1f:
                    11:45:ba:41:85:99:08:ce:2b:00:4f:c8:f3:90:b2:
                    6c:dd:30:11:a0:58:e0:e9:d1:de:72:92:de:f8:0c:
                    0e:90:68:aa:32:94:18:23:a2:87:56:f6:d1:cb:2d:
                    c9:1f:cc:ee:29:1f:f8:10:95:c5:9b:cf:0a:d6:f7:
                    45:bd:ed:3a:69:4a:d4:78:74:5c:ed:d9:76:2d:4d:
                    ab:3d:f2:8a:ac:d5:67:d4:73:22:a4:dd:62:dc:a7:
                    f7:57:2a:44:0e:34:37:09:a3:dc:0a:87:eb:4a:30:
                    41:4c:15:b5:fe:3f:39:7e:4e:c7:16:0b:9f:04:7d:
                    dd:79:ec:1e:16:04:9c:e3:6f:47:95:60:23:19:98:
                    97:60:ae:59:6e:85:87:b6:b1:fc:35:87:9d:1f:42:
                    84:eb:d2:a6:4a:aa:ab:01:1e:81:c9:c2:b4:e0:ce:
                    cc:d4:81:c2:bf:66:ff:23:59:1d:dc:ac:41:47:50:
                    00:47:07:7f:80:7b:a0:df:5b:9e:e3:94:38:74:1a:
                    05:57:7c:35:fe:34:e2:70:43:0f:4d:15:b4:c7:b7:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:54:60:4E:F7:D3:FE:9A:98:AB:74:C9:5E:E7:C1:83:94:83:66
            X509v3 Authority Key Identifier:
                keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cc:a5:84:fd:5a:9c:54:70:be:ce:4d:81:ba:bf:aa:8c:a5:
         cc:9c:f6:93:43:14:f1:6e:b7:96:e3:96:66:aa:04:ca:fa:f6:
         d6:ce:d0:b5:ef:94:61:a5:2c:00:23:6d:e9:67:41:bd:28:49:
         1d:db:9b:f8:fc:ee:fe:63:1d:b8:4b:92:67:df:71:55:a5:5d:
         45:30:23:af:c1:31:f7:35:08:ba:90:f4:ad:2d:aa:1f:17:e1:
         06:1f:f8:3e:01:27:aa:cb:61:e3:44:ea:78:a3:0e:b3:86:9b:
         69:c8:c3:cf:f4:4f:ca:10:c0:95:ce:90:9e:e4:ae:36:62:9e:
         8b:e7:3c:2b:c3:36:56:89:0a:cd:a9:eb:62:a2:87:71:af:f8:
         90:e2:26:2d:a2:ae:8d:3f:00:eb:92:d0:0e:c1:46:c6:99:17:
         6c:d6:22:36:87:00:d7:7c:64:08:97:7f:c7:cb:59:20:ec:23:
         f6:11:2e:03:e0:d8:09:c8:fe:50:b2:22:d1:8a:30:81:6a:eb:
         ae:73:a1:6d:83:2d:a9:89:f4:ee:85:d6:e5:93:9d:dd:2f:9e:
         ca:48:d4:77:b9:9c:0d:f0:23:dd:cf:76:81:bc:fe:44:7e:19:
         35:4c:36:e8:71:7f:3e:e4:ea:ce:9e:08:18:d5:7a:ee:eb:81:
         25:2f:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:30:22 2025 by rpki-client