Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File:                     IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier:          9ERzDFae0NhpSnwwS1mGUVPQ5gzS+XTCyiQvktN3rr4=
Subject key identifier:   EE:F7:DB:A4:78:11:62:12:14:49:02:E1:BC:EF:95:01:6B:0A:08:52
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer:       /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial:       0197B70EEF1CBA739B1C8FD0C34E74701C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number:          0FB0
Signing time:             Sat 28 Jun 2025 15:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:38 +0000
Files and hashes:         1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
                          2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: fnoy4QeSjhXlgEIUzd+S6kakNevkFJj2UFpByLHgp0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ef:1c:ba:73:9b:1c:8f:d0:c3:4e:74:70:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
        Validity
            Not Before: Jun 28 15:01:38 2025 GMT
            Not After : Jun 29 15:01:38 2025 GMT
        Subject: CN=eef7dba478116212144902e1bcef95016b0a0852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:38:4b:9c:e7:a3:20:1f:58:25:2e:49:d8:
                    27:df:6e:09:48:92:be:5b:01:44:95:a8:21:e9:03:
                    27:42:44:67:c1:4b:d3:00:a3:0b:7f:0e:e8:85:25:
                    77:4e:17:d4:77:7c:d7:87:e5:be:27:be:98:72:e8:
                    ac:19:dc:6f:1c:3c:19:c1:53:4a:ac:32:01:1d:d1:
                    82:ab:e3:61:1c:a5:81:60:25:56:c1:b5:77:cd:d3:
                    5b:1f:9a:b3:3e:87:d2:54:09:32:08:c3:57:00:8f:
                    85:74:9b:c8:91:9b:23:ab:ac:e6:76:30:f6:87:cc:
                    37:e2:ee:8d:06:39:c6:53:b2:4d:0f:f1:66:2a:46:
                    57:8f:bb:d5:62:35:05:42:6c:df:16:77:44:ee:1c:
                    ba:49:7f:5c:9c:21:7e:13:4d:04:9e:00:b8:6b:e9:
                    32:09:bc:2a:01:81:0b:32:43:05:e5:4a:d3:2a:60:
                    a5:2f:9f:e4:15:08:9c:68:cd:8c:e5:27:f8:7a:96:
                    c6:1f:ce:37:63:b0:4c:fc:70:8f:39:5e:f3:61:05:
                    db:17:7d:a8:20:63:3d:b3:5c:b0:32:b0:8c:e4:ed:
                    a3:93:4c:78:a0:b5:5f:cf:b7:0d:c2:59:29:04:86:
                    88:fc:ef:25:6a:33:d1:b4:aa:bc:fe:a3:61:52:07:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F7:DB:A4:78:11:62:12:14:49:02:E1:BC:EF:95:01:6B:0A:08:52
            X509v3 Authority Key Identifier:
                keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:43:1b:d8:72:4e:39:e2:94:ed:15:8b:0e:52:cc:86:e0:
         23:e8:8a:b9:47:da:da:a2:41:79:c5:bf:92:01:35:fd:4f:d2:
         1d:18:21:ab:1c:c1:0b:0e:1b:b0:37:9b:66:f3:f5:19:52:3e:
         27:95:5f:49:82:72:ae:fc:2a:c4:78:ec:ac:ae:04:50:45:07:
         4d:b8:a0:25:34:88:33:1d:4e:c4:18:3c:5d:3f:b5:bc:ca:63:
         c4:00:a5:fc:13:26:d9:33:30:8d:3f:50:ea:37:1a:6c:5c:19:
         5e:01:7c:80:a3:c3:4f:7d:3a:00:e2:02:4c:9d:b5:4e:74:9d:
         e7:20:41:cc:28:4b:30:7c:53:9a:81:64:84:4a:29:96:0b:3b:
         d0:6d:64:36:f9:e0:53:05:c2:84:fd:0b:56:81:54:2d:33:bb:
         03:b3:f3:ea:7b:20:63:e6:31:62:d1:f5:5a:1b:f6:c9:ee:93:
         02:5d:fa:f9:2c:a5:bd:39:e6:04:6e:92:cb:cb:fe:4e:73:73:
         51:03:9b:09:2b:46:a1:76:6d:9d:11:a7:04:73:c6:46:f1:78:
         d3:5c:c1:81:20:fb:00:dd:9b:6f:31:fb:16:45:42:35:a6:54:
         09:84:85:6a:c5:bc:97:26:7a:4f:bb:7e:b6:37:15:dd:48:5a:
         b3:55:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:04 2025 by rpki-client