Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File:                     IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier:          eQWggXfLvCcWYiz8Gc7UZwKphj05dEpL4DZYsX9bUjA=
Subject key identifier:   68:FE:0B:E9:0B:22:E7:61:31:D4:00:73:AE:B7:C8:47:A1:96:73:B4
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       0196C570C374CCC98A1B229ECE867659BF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number:          0C88
Signing time:             Mon 12 May 2025 17:00:23 +0000
Manifest this update:     Mon 12 May 2025 17:00:23 +0000
Manifest next update:     Tue 13 May 2025 17:00:23 +0000
Files and hashes:         1: 36LgSmoTYXDGLabuVqpVL_HY_bo.roa (hash: jlUxcS1bmgVem5MV0QJTckeBjIjhWcwd8IXi6NlQXXM=)
                          2: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
                          3: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: 5iXCzgc5YgJTtaiuAmQIvEMb5xhU3/dbB9/Pya2einQ=)
                          4: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
                          5: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
                          6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
                          7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:70:c3:74:cc:c9:8a:1b:22:9e:ce:86:76:59:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: May 12 17:00:23 2025 GMT
            Not After : May 13 17:00:23 2025 GMT
        Subject: CN=68fe0be90b22e76131d40073aeb7c847a19673b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:dc:c6:8d:3b:12:70:cc:82:3a:88:98:5a:
                    d0:f1:e9:50:a0:05:01:45:ac:76:ad:10:4e:52:27:
                    54:33:b3:62:69:3a:14:a3:40:92:53:42:8f:98:80:
                    3c:71:f3:a7:32:b5:55:46:b9:0d:13:a9:52:c9:57:
                    29:36:b5:08:c6:6c:36:77:72:00:4a:cc:7f:6e:64:
                    ac:59:b1:1e:f7:5f:26:9a:ae:d1:70:d2:d6:35:5d:
                    3a:e1:33:35:99:9e:d6:6b:99:e1:55:21:55:49:93:
                    a8:bf:fe:ee:7a:52:35:61:01:82:b9:02:56:69:c5:
                    f7:d8:de:24:22:97:63:4a:22:6c:76:f4:ee:de:e6:
                    8b:7d:85:3c:d1:d9:b8:40:b3:69:63:11:01:d4:aa:
                    a1:44:a6:8e:83:be:63:c1:9a:84:92:bc:94:b4:7d:
                    be:bd:1b:d6:11:02:0e:a6:83:94:09:8c:8a:17:de:
                    4a:05:f4:20:20:c6:2f:19:31:bc:ff:66:08:e6:60:
                    3a:68:5e:a4:e0:0e:f9:c7:3c:38:e9:5d:0d:20:cb:
                    9d:ed:c8:3f:62:13:8f:ba:3b:70:5a:76:f7:2a:14:
                    e4:11:30:d1:3f:5a:57:fe:dc:14:58:c0:37:81:d4:
                    a3:eb:05:34:34:5a:82:ca:47:78:03:f7:e4:ee:42:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FE:0B:E9:0B:22:E7:61:31:D4:00:73:AE:B7:C8:47:A1:96:73:B4
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:cb:f5:33:13:19:49:e4:26:05:44:5b:cb:81:fb:86:96:
         42:a6:a7:94:05:6c:ce:b0:10:5b:7a:8b:c3:3f:42:35:76:a7:
         dd:d8:c4:7c:36:c2:47:26:24:f3:a8:cc:c1:88:58:09:90:56:
         ba:dd:3c:ff:16:28:fd:cc:08:3b:b6:59:78:64:44:69:68:e1:
         21:f2:66:6b:29:54:bc:a0:b5:6b:f8:dd:3f:9c:8e:5a:9c:94:
         4f:46:d7:d6:fc:b1:91:3e:c5:fc:c8:f5:c6:65:07:a6:36:6e:
         9b:c0:04:40:41:54:3a:e9:76:a4:d1:32:ea:80:b9:c5:c6:32:
         05:85:ff:a2:fc:f8:39:2c:e4:68:63:af:ca:c4:79:8b:fb:b3:
         b1:b0:67:a3:5c:27:20:99:82:05:89:00:32:b1:1b:25:f5:38:
         24:f5:52:ac:36:05:ae:36:80:bb:d5:e2:80:7c:d5:14:15:17:
         e1:2f:65:45:5c:bd:13:91:0e:06:e4:ce:7f:5e:75:8c:86:f2:
         6b:22:4f:1b:40:09:15:25:e6:e1:9d:96:8f:6c:69:32:0f:61:
         1d:bd:98:6d:68:81:d7:d4:7f:f2:af:63:25:2c:32:bc:17:d6:
         42:97:84:f4:2d:4d:a2:ec:16:59:40:72:01:bb:37:bc:ad:58:
         2e:83:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:44:23 2025 by rpki-client