Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          nEiEEFb3bcc/+34ji0VMwu55wpI8mYiCWNangnSLY8E=
Subject key identifier:   11:60:D5:5E:F2:3E:87:09:0C:7F:B8:04:E7:B5:4F:6A:AA:EC:74:34
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       0196ABE8508F5F35A6B9B1F2B1A58EB50E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          0418
Signing time:             Wed 07 May 2025 18:00:50 +0000
Manifest this update:     Wed 07 May 2025 18:00:50 +0000
Manifest next update:     Thu 08 May 2025 18:00:50 +0000
Files and hashes:         1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
                          2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: fpoawmbXga7DVKwVEvu/y0Bnewu2DBnSNWyJkPw2ZRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:e8:50:8f:5f:35:a6:b9:b1:f2:b1:a5:8e:b5:0e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: May  7 18:00:50 2025 GMT
            Not After : May  8 18:00:50 2025 GMT
        Subject: CN=1160d55ef23e87090c7fb804e7b54f6aaaec7434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:33:8f:4d:cd:1e:88:6f:7d:59:34:88:cb:
                    a0:62:98:73:25:a5:97:be:34:b6:26:07:ac:02:45:
                    f2:e3:b2:2d:cb:99:b4:45:5c:73:98:e2:20:b5:19:
                    de:70:2c:37:08:e1:11:bd:89:12:94:a7:62:03:59:
                    a3:46:62:6a:cd:91:e5:b8:16:10:0f:7f:e2:bc:08:
                    55:08:87:37:30:7b:20:52:c2:6f:4d:83:62:96:37:
                    62:5f:7e:1f:11:66:35:eb:ca:7b:51:3b:57:c6:4a:
                    df:7e:27:1b:7d:88:8c:92:f9:34:d6:93:cf:d5:4b:
                    6b:47:d5:d8:53:ec:19:2e:67:75:f1:34:c6:ae:6a:
                    ee:6d:56:aa:65:10:13:e5:37:c4:3c:d2:e3:c1:f6:
                    42:b2:2e:78:53:0d:51:1e:7e:02:0a:e6:d8:d6:b4:
                    c8:c3:2e:05:fb:dd:7e:8c:7d:77:8a:ab:7e:f3:ae:
                    5e:6b:5a:18:5c:2a:ac:3a:8f:2d:af:4c:d7:a2:e7:
                    b5:9a:44:9d:cd:2d:5b:03:a8:f3:de:c2:69:a0:23:
                    4a:e2:2c:ba:9f:12:be:95:ef:98:1b:d9:3f:b5:95:
                    66:4a:66:5b:51:af:cb:89:38:2b:6e:3a:03:76:98:
                    23:00:5c:bb:7e:f1:01:76:93:70:13:fd:a7:12:c7:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:60:D5:5E:F2:3E:87:09:0C:7F:B8:04:E7:B5:4F:6A:AA:EC:74:34
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:e5:19:2b:0a:23:9c:e3:e9:99:93:68:86:39:32:11:03:
         0d:ec:53:03:16:c4:59:9b:b4:45:d8:94:95:5d:22:34:62:c5:
         4d:3c:ef:bb:f1:e5:ba:91:d8:98:ed:bb:7f:dc:b1:9e:02:de:
         95:64:62:01:6f:19:2a:bb:2c:83:48:2d:ed:6e:6a:32:4a:03:
         40:c5:ab:97:73:66:92:9d:87:98:93:94:e6:aa:03:45:05:76:
         41:4b:82:75:6a:6e:47:3b:c0:fe:38:17:97:4d:e5:af:c9:3b:
         b3:55:e3:4c:9a:3b:8e:14:00:d5:d3:50:b0:7b:de:df:aa:38:
         c4:da:74:d1:f8:9f:d0:2b:95:dd:96:c5:cf:01:3e:e6:ae:c8:
         a5:c4:0b:76:a9:00:4a:df:78:0e:56:b1:00:b1:29:6d:43:37:
         3a:2e:02:97:ed:28:c5:c3:48:45:71:f6:dd:e7:8e:bd:b8:55:
         88:43:d3:4f:f1:d1:a5:43:0b:69:dd:ca:0a:b6:35:ce:33:bf:
         70:9f:89:0d:8f:dc:20:7f:a0:9f:2b:7a:d1:2c:53:3c:2d:40:
         6f:41:0c:9b:79:61:d0:0c:ca:5d:bc:8b:e4:62:c8:f6:0d:6e:
         21:56:69:bd:70:31:dd:1f:42:e4:91:eb:bb:b6:6d:65:94:88:
         ef:9e:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:07:40 2025 by rpki-client