Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File:                     ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier:          TpfAg8rApuxiTJfNR8h5ze5p0Tf2oYu2C6ySq/PuL7Q=
Subject key identifier:   2A:CF:B9:B4:77:95:C6:41:F9:98:C1:83:E3:79:98:47:F2:A9:21:C2
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer:       /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial:       0196BAECF81870ED4899F102CF7CE86566D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number:          06B4
Signing time:             Sat 10 May 2025 16:00:14 +0000
Manifest this update:     Sat 10 May 2025 16:00:14 +0000
Manifest next update:     Sun 11 May 2025 16:00:14 +0000
Files and hashes:         1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
                          2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: o/gHiOwLxPJDPtvdBOVyAtNoMUp8ogFnB7T2gn12r9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ec:f8:18:70:ed:48:99:f1:02:cf:7c:e8:65:66:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
        Validity
            Not Before: May 10 16:00:14 2025 GMT
            Not After : May 11 16:00:14 2025 GMT
        Subject: CN=2acfb9b47795c641f998c183e3799847f2a921c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:8b:1d:14:a5:eb:5e:b7:b3:5a:3e:58:13:
                    b5:1b:38:4b:0a:08:5f:84:bd:46:6a:9f:bc:89:fa:
                    a2:0a:e1:ec:7c:71:cd:0b:44:8b:23:db:36:87:7e:
                    ad:cd:13:14:79:d2:32:5f:2f:5d:ed:b8:0d:2d:ef:
                    3f:e4:01:62:1d:e9:ee:fd:be:c1:86:2b:22:f4:5b:
                    29:77:3e:63:9c:7a:3f:f7:06:fe:60:1c:ee:00:e7:
                    23:b6:14:59:bd:ba:5f:db:a6:2b:ad:cf:ce:70:8a:
                    72:18:31:56:99:f1:8a:56:0e:39:d1:1c:72:f8:d9:
                    ca:d7:f9:99:54:f6:f8:30:bb:3c:a4:aa:17:7f:5d:
                    89:f0:a9:9e:e8:17:69:2a:80:55:4b:2d:39:1a:7c:
                    5f:d1:db:bf:08:7f:79:34:d2:dc:96:b6:3c:eb:7c:
                    55:7f:1d:fb:e0:52:5c:d3:7e:96:9e:4f:83:1e:01:
                    47:6c:76:ef:68:e5:48:8e:df:d3:ee:0c:8c:6c:91:
                    7b:95:5d:b9:9b:a0:2d:99:18:99:5c:4a:5e:62:3d:
                    1e:64:9f:3b:07:65:4f:4f:5d:fd:2e:c2:6d:6d:99:
                    b8:33:31:7d:2d:9a:0a:ff:a5:d1:e8:41:63:37:5f:
                    a2:92:5d:dd:2a:ba:75:57:ca:0f:e9:67:7b:ae:14:
                    f7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CF:B9:B4:77:95:C6:41:F9:98:C1:83:E3:79:98:47:F2:A9:21:C2
            X509v3 Authority Key Identifier:
                keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:11:87:b1:07:1e:df:47:35:d2:da:09:1f:a1:66:b8:c1:6b:
         19:4f:56:49:82:32:ec:a4:86:b8:7d:2a:12:bc:77:c5:cd:7b:
         d7:6a:46:5f:74:81:9b:ad:02:37:b0:00:61:c8:7f:5d:6b:eb:
         b1:24:5c:7e:83:98:6c:61:4a:bf:d6:4c:ca:a6:3d:36:df:fb:
         ef:1e:8e:5c:bc:82:7e:42:e7:51:eb:d3:87:dd:9f:f9:9d:32:
         6c:10:f6:91:3b:3a:7b:a6:03:62:69:61:f8:51:9c:ce:11:af:
         1d:a7:88:74:fa:3f:d0:ba:9c:14:08:58:be:80:fb:85:46:2c:
         30:68:7e:62:d2:00:8e:7e:aa:7b:cb:74:6d:1b:b8:77:85:05:
         d8:15:ef:45:f6:f5:ea:79:f7:74:7e:6c:46:4e:05:b5:fd:51:
         74:92:f4:78:f4:c4:cd:d7:41:d3:78:2d:36:6c:e3:c1:e5:1d:
         22:4b:78:a8:8b:52:d7:2d:c8:72:81:17:08:7c:cf:aa:c8:c8:
         14:2e:4d:b2:9f:29:10:d4:b6:d5:86:06:b7:2f:ff:c5:da:78:
         d2:a9:40:df:a6:d1:fa:c2:59:8b:ba:5c:8f:08:20:34:21:98:
         bb:d5:45:84:bb:ec:b6:2a:c6:89:d3:27:f8:e3:7e:20:e2:68:
         9c:c7:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:27:27 2025 by rpki-client