Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File:                     ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier:          14DLWNXmz0y4kffwP1XClxQzY8kfZu9mxUrA9DkL1Mg=
Subject key identifier:   9C:94:A7:D0:7C:67:C6:39:00:F6:31:EF:A1:0A:8A:7D:D6:B3:28:D7
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer:       /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial:       0196AE7BEE9A30B0443B722E478D3629944B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 06:01:19 +0000
Manifest this update:     Thu 08 May 2025 06:01:19 +0000
Manifest next update:     Fri 09 May 2025 06:01:19 +0000
Files and hashes:         1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: KWUEQ4tXee2ytylM1/P59zenWcPI7A7tzZ2L96oBwYw=)
                          2: cznyJUVo486opCfwPRwYW5a-bCI.roa (hash: yeo9giLM4O/29X7azlP3H7yqqKlzXfDMEa/1/AZBMhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 06:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:7b:ee:9a:30:b0:44:3b:72:2e:47:8d:36:29:94:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
        Validity
            Not Before: May  8 06:01:19 2025 GMT
            Not After : May  9 06:01:19 2025 GMT
        Subject: CN=9c94a7d07c67c63900f631efa10a8a7dd6b328d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:5e:d2:b4:ef:c6:dc:29:91:b1:cb:33:76:
                    13:ea:78:9a:86:2e:fe:5a:9c:f0:ff:96:34:6b:0e:
                    8f:0c:d5:e5:69:33:f7:87:99:00:c2:28:0d:78:57:
                    44:bf:61:05:e2:6a:f9:c8:4a:19:55:c8:92:e3:d0:
                    11:2d:d4:92:76:bc:f9:31:dd:d6:c3:57:bb:9f:ee:
                    9c:97:7b:4a:41:74:53:90:79:a2:88:3f:6b:28:a4:
                    df:fa:da:aa:3f:f0:e9:f3:ed:dd:7a:d8:9c:63:e0:
                    d3:1e:ab:56:44:1f:29:af:2f:3f:6b:ff:0d:93:59:
                    8b:bb:62:0e:fe:58:08:d6:1d:ea:48:92:02:e6:cd:
                    81:bd:8e:79:36:75:9d:43:03:71:f1:38:62:b8:dd:
                    4f:b3:d1:f6:37:bf:b1:a6:ca:1e:58:91:83:42:85:
                    41:b8:d1:af:21:13:00:85:52:d1:72:1f:c9:77:cf:
                    8f:0b:f6:f3:29:df:2b:29:7e:08:b0:2d:5d:29:21:
                    2f:d9:1c:08:24:14:64:b8:53:23:e9:2c:3c:16:c4:
                    89:78:95:15:75:64:da:3c:64:fb:14:be:e4:c0:22:
                    b5:3a:ff:f0:50:d0:a2:0e:9d:75:2d:de:ab:d9:9e:
                    e5:1a:32:67:8f:bd:3c:5b:36:6f:20:3b:68:ba:b9:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:94:A7:D0:7C:67:C6:39:00:F6:31:EF:A1:0A:8A:7D:D6:B3:28:D7
            X509v3 Authority Key Identifier:
                keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:2b:f0:9f:5c:7b:f6:57:cb:23:f7:a7:e2:e1:68:d7:9f:
         02:ac:5f:45:17:8f:3d:d3:4a:d6:53:ea:3e:88:c7:e8:0e:4e:
         b5:34:40:fb:06:73:40:eb:ec:23:8d:24:3f:5a:74:fd:e6:6e:
         2a:b7:17:32:78:aa:5b:e1:5e:07:61:79:82:50:67:75:86:74:
         78:37:aa:68:9d:14:46:60:de:5e:f2:2d:43:ad:f6:97:d4:67:
         78:ff:8d:18:76:5b:5f:4f:7f:37:cc:9c:71:13:66:08:fd:67:
         10:1c:34:b8:14:18:7e:ac:77:75:21:f3:8d:c0:33:d5:48:2c:
         6d:44:e4:68:2a:0b:48:39:cf:05:4e:0b:df:10:56:53:6f:9a:
         db:bd:0b:4d:b6:8c:04:2c:49:4e:30:fb:b1:71:7c:d2:6d:39:
         8e:fc:bb:2b:79:5e:49:94:f3:17:88:c0:03:dc:f3:c8:2b:a4:
         a1:db:07:8d:e4:43:c5:a6:0e:50:70:4e:54:83:1e:43:09:d6:
         60:eb:2e:fc:e0:9b:6e:f4:e9:94:e5:52:2b:0d:0f:d8:32:cf:
         92:60:fa:f3:2d:1d:91:84:97:70:06:c0:60:a4:01:37:f7:ef:
         97:70:06:e7:e0:5e:d3:ac:fa:ec:e0:7a:4d:38:fb:28:56:3c:
         0c:41:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:44:04 2025 by rpki-client