Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File:                     IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier:          YwOBX8RZGOojVN4i7SS6zkWmcPp4wHteFqnC43pFbGc=
Subject key identifier:   BA:44:93:C5:BA:F3:F3:D6:DE:87:54:D2:09:EF:67:2E:91:D0:0C:B3
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer:       /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial:       0197B93428786F2A1EF8F60550345C873704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number:          0537
Signing time:             Sun 29 Jun 2025 01:01:32 +0000
Manifest this update:     Sun 29 Jun 2025 01:01:32 +0000
Manifest next update:     Mon 30 Jun 2025 01:01:32 +0000
Files and hashes:         1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: xyPwmbGbvpbL0SSrgTuir3ii4JtVEIQYUm+xcVDHdLs=)
                          2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:34:28:78:6f:2a:1e:f8:f6:05:50:34:5c:87:37:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
        Validity
            Not Before: Jun 29 01:01:32 2025 GMT
            Not After : Jun 30 01:01:32 2025 GMT
        Subject: CN=ba4493c5baf3f3d6de8754d209ef672e91d00cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:49:52:8c:7c:6d:ca:33:08:47:50:2e:cc:
                    82:c8:ea:5f:c2:c9:d1:81:15:80:1e:b5:86:ec:7e:
                    b7:70:81:e4:06:b9:38:f6:f1:f4:f2:77:ba:0a:c3:
                    34:95:5f:bd:c7:aa:7b:c6:8c:99:b8:b5:ce:2c:9b:
                    a6:83:45:53:fd:20:0b:06:f4:61:51:cd:72:2c:95:
                    10:9f:78:46:88:0e:4e:32:0b:06:f3:2b:6d:a7:80:
                    f9:ce:62:20:07:7d:d0:62:c1:3c:ff:06:90:75:c1:
                    55:68:78:0c:e8:cf:4f:f5:56:95:ca:5f:38:db:51:
                    c3:9f:f2:57:b1:91:f7:50:dd:a4:87:2c:3b:90:45:
                    38:2d:d4:91:d1:fd:4c:71:84:d5:0c:21:f2:d4:a7:
                    0f:82:2f:87:46:1a:ff:35:fd:ee:05:7a:a9:3d:12:
                    1f:89:90:30:0e:67:c6:ed:dd:e3:2f:67:3e:a9:92:
                    37:0b:00:da:6b:77:85:d6:ed:93:f3:0a:d5:0c:c4:
                    92:cc:f0:95:af:92:75:d4:a4:9b:86:a1:bd:7c:43:
                    57:85:0d:4d:b6:2a:39:31:9d:76:f2:f7:80:d3:d9:
                    cc:d9:57:20:b5:e4:c4:80:c3:3a:ac:dc:75:1d:6b:
                    a8:bf:d5:e1:f9:3f:02:d4:8f:c2:84:f6:f9:fc:15:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:93:C5:BA:F3:F3:D6:DE:87:54:D2:09:EF:67:2E:91:D0:0C:B3
            X509v3 Authority Key Identifier:
                keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:96:81:71:d9:38:e5:3e:d8:09:f8:c8:f9:d7:00:67:04:16:
         e3:80:ef:bc:93:1f:90:a5:fd:6c:30:03:22:18:c2:6d:c4:de:
         18:91:65:ba:cd:c9:5b:7a:5c:26:65:1b:0c:5c:7f:d0:bd:e8:
         80:bb:bc:29:84:0b:be:d6:1b:c5:c4:5f:66:4b:5c:98:45:54:
         d3:24:3a:52:d7:00:e1:04:2a:9c:9c:17:c0:c9:b3:26:7d:99:
         22:9c:ce:01:26:ae:9a:77:47:f6:4a:b0:5f:5e:1d:d1:90:78:
         3b:7e:66:74:c1:d4:73:4e:72:46:5a:66:42:17:90:6d:6d:99:
         7b:7b:27:fd:a6:3f:ba:ac:3f:f3:18:b6:05:eb:c8:69:88:13:
         d3:3a:65:3e:a1:d1:4e:42:62:55:5a:a1:ce:80:19:4a:49:fc:
         ea:42:ab:01:c0:46:8e:0d:61:6f:86:58:2e:04:3c:d9:1a:be:
         e5:77:f9:3a:ca:a2:2e:73:84:80:a4:3f:78:91:cf:ef:88:29:
         92:bc:54:b4:6f:d3:46:03:4e:14:61:96:b9:08:aa:f3:62:25:
         5a:ae:1f:88:83:49:a4:db:53:bb:1f:1b:3e:0b:55:ce:66:07:
         dc:18:cc:c2:84:29:a5:4d:ca:57:bf:08:e4:92:ee:29:c3:c8:
         48:e8:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:03 2025 by rpki-client