Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File:                     IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier:          luBJueBMtZvgeeYO9rDP85O9nDA0VCtUyy8cdK8rLZY=
Subject key identifier:   DA:B0:83:09:15:C0:CF:D4:B9:F8:8C:F9:7D:B4:F0:EB:D4:1F:0B:3D
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer:       /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial:       0196BFA5B2D85E430E3D043CA179C0DEC530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number:          0469
Signing time:             Sun 11 May 2025 14:00:29 +0000
Manifest this update:     Sun 11 May 2025 14:00:29 +0000
Manifest next update:     Mon 12 May 2025 14:00:29 +0000
Files and hashes:         1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: cZl5aSeunn71yj1EHKtOGfzOwWi8ob5yF4b4ZuiCuH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:a5:b2:d8:5e:43:0e:3d:04:3c:a1:79:c0:de:c5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
        Validity
            Not Before: May 11 14:00:29 2025 GMT
            Not After : May 12 14:00:29 2025 GMT
        Subject: CN=dab0830915c0cfd4b9f88cf97db4f0ebd41f0b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:1d:c3:6c:d4:f9:a7:5f:16:5a:02:30:e4:
                    a8:9b:83:9e:3d:c6:e6:be:30:81:a5:46:e6:0f:3c:
                    81:ce:95:72:07:c4:ed:b5:bb:0d:c4:cb:52:bb:c4:
                    ae:8e:57:94:24:dc:b3:c0:6d:9f:7f:c9:d2:95:54:
                    81:26:c2:60:bb:61:89:9e:10:bd:3a:90:74:75:bc:
                    7c:09:4c:72:5f:40:54:04:de:1b:94:dd:17:16:49:
                    6f:60:c9:d0:42:ca:3d:20:e8:73:24:a2:2e:83:2d:
                    16:5a:4f:79:25:31:4c:f5:c7:9c:b9:36:a7:56:29:
                    31:9d:2c:71:b3:cf:22:72:03:b0:24:2a:66:ad:27:
                    69:44:79:59:17:8e:2a:b3:80:df:35:74:78:49:42:
                    a8:53:e6:e2:dc:d0:e7:07:02:ef:12:08:c5:9e:b8:
                    17:4e:e1:b3:46:22:6e:02:b4:80:ac:53:36:a1:1a:
                    ba:c4:5a:40:c4:71:53:46:57:5e:b1:7a:38:fb:bb:
                    d0:bd:2e:2c:18:34:d7:0d:a4:ed:9b:a0:3a:d8:11:
                    f8:20:15:9e:01:59:aa:82:ea:10:d5:e8:38:24:46:
                    63:fd:14:08:01:84:2a:59:0e:2f:4a:ee:d8:9e:d3:
                    6b:72:c1:a0:ce:74:cb:6d:87:fd:3c:62:aa:cf:d1:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:83:09:15:C0:CF:D4:B9:F8:8C:F9:7D:B4:F0:EB:D4:1F:0B:3D
            X509v3 Authority Key Identifier:
                keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:2f:9a:9a:d1:e0:fb:bc:cb:37:c8:20:30:af:3f:06:84:
         b0:85:f4:da:84:73:6f:e2:39:88:f9:a0:46:73:50:e7:b0:83:
         53:8f:8a:5b:ff:73:11:d8:dd:15:f9:ed:fe:b7:ab:ff:c6:f9:
         8a:bd:7a:3a:c3:fc:7f:cc:73:8d:eb:ee:fe:3d:0d:05:2f:16:
         f9:b1:bf:87:64:46:7f:78:05:90:c2:75:5d:db:1d:1e:ca:44:
         3e:16:ac:83:90:d7:db:d0:a4:55:57:30:b4:95:3b:43:b1:bd:
         f8:1d:a8:f7:93:df:48:71:ce:bb:c3:5a:7c:ee:f3:87:3c:16:
         41:2c:20:59:55:7a:50:f6:52:31:3c:ec:9c:8c:09:b2:01:45:
         ac:96:56:d9:13:33:07:02:01:23:8b:1e:99:4a:35:9c:92:b6:
         af:04:81:3c:30:6d:a9:27:40:bd:1f:1f:19:66:f2:79:53:d1:
         18:80:1b:5d:87:7e:a2:0a:bf:8c:16:09:bb:c9:af:9c:0d:ce:
         df:c3:2c:4b:c7:ed:d9:ec:4e:f9:06:27:38:b5:c3:13:3b:3b:
         db:b5:7a:7e:06:b0:96:cc:d9:88:42:b0:fc:d9:97:d3:fe:d0:
         f8:8b:0c:3c:ba:86:fe:2f:b0:07:73:bb:27:c6:6d:61:e7:89:
         8a:17:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:14:56 2025 by rpki-client