Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File:                     iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier:          nZXCGgtNj+OHmX38F9+ebKTSFfeN3nkezZmyXYIkqfg=
Subject key identifier:   A0:2E:77:14:2D:73:95:25:59:A7:34:56:45:62:1A:A8:E5:91:48:92
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer:       /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial:       0196C0818F116A3D18F1675C5E00940470C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number:          015C
Signing time:             Sun 11 May 2025 18:00:38 +0000
Manifest this update:     Sun 11 May 2025 18:00:38 +0000
Manifest next update:     Mon 12 May 2025 18:00:38 +0000
Files and hashes:         1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
                          2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: 6uJd9wGEf+c3tCXtIc8W5Y+g4hAJuBAzPL1qNdw/smY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 18:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:81:8f:11:6a:3d:18:f1:67:5c:5e:00:94:04:70:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
        Validity
            Not Before: May 11 18:00:38 2025 GMT
            Not After : May 12 18:00:38 2025 GMT
        Subject: CN=a02e77142d73952559a7345645621aa8e5914892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:3d:56:45:87:a8:44:0d:d3:d0:ca:0e:9c:
                    f1:71:c9:bd:69:8f:75:a1:37:7b:a8:18:94:0f:77:
                    7f:d5:61:79:f9:73:cb:e5:65:ab:36:3d:3a:2f:2a:
                    62:9a:82:ec:90:7c:ee:ec:b2:20:f3:e3:3a:01:ca:
                    af:a9:f8:54:bf:99:d5:3d:38:d0:4c:3c:a2:18:8f:
                    b8:7f:10:3c:77:62:dc:0c:44:85:57:4d:de:36:40:
                    de:d0:e4:fa:69:e9:41:81:5f:df:a8:4c:49:dc:55:
                    db:f6:6a:96:b9:ba:c3:85:20:6b:cc:84:89:d8:04:
                    ac:fc:f9:d5:85:72:c5:60:69:db:97:a2:2c:8f:5c:
                    9d:0c:a3:d2:46:64:45:55:1d:1d:7b:ec:d4:6a:6c:
                    f5:ee:05:cc:97:6f:11:27:09:c5:00:1d:5a:cc:fc:
                    c7:ba:0d:97:17:3e:e6:58:e3:8c:ae:97:9c:08:d3:
                    17:6e:cb:59:6c:d0:5d:f7:80:2c:20:b3:e6:aa:16:
                    f4:fa:b4:6d:fe:bf:15:fb:2b:df:1f:1c:93:62:5a:
                    1b:b0:16:fa:66:c8:e7:ef:23:8d:95:b3:94:70:08:
                    5e:2a:68:03:76:3d:c1:ab:bf:8b:26:50:13:5e:4c:
                    7f:66:33:69:a1:c9:af:7c:9d:62:e7:0c:3d:be:e8:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2E:77:14:2D:73:95:25:59:A7:34:56:45:62:1A:A8:E5:91:48:92
            X509v3 Authority Key Identifier:
                keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:07:f3:d2:c9:32:31:4a:02:21:81:fc:e2:36:97:05:cd:
         e5:73:8b:3f:a3:5a:61:43:ac:f9:13:7d:8b:0e:46:33:50:bb:
         fd:3a:d5:3e:e5:78:39:eb:9c:ec:55:82:71:62:58:fc:13:e4:
         2f:95:94:aa:f2:a2:b0:66:24:58:2f:36:6b:7f:92:3e:01:9c:
         9d:6a:51:d5:a5:a7:27:13:8a:5e:de:3b:21:f7:7b:bf:70:3b:
         3d:06:b2:09:f3:b2:72:7e:88:ec:b5:c0:fe:bb:09:eb:30:50:
         e3:65:cb:47:a1:13:d8:72:d4:a6:45:30:f7:56:9f:31:c7:55:
         63:74:02:d7:02:2b:49:a9:95:ff:73:3e:4e:f9:ab:aa:62:75:
         59:9d:ee:39:86:62:87:16:c5:64:ca:5c:c1:3b:c5:23:2f:6c:
         42:2f:70:54:41:db:49:ab:1f:6f:2d:ac:9e:49:4f:2c:e8:07:
         6a:03:30:e6:c8:6a:70:04:3a:5a:11:4d:e5:08:18:14:d1:df:
         83:96:87:ba:a5:a6:de:4e:c9:4b:09:d2:75:a7:fe:4f:c2:ce:
         e1:2b:8f:83:1a:a3:b1:72:a0:8f:fd:79:f5:fb:a0:1d:06:fe:
         a9:da:d6:2a:15:30:42:55:1c:14:70:64:06:03:92:54:29:69:
         64:c9:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:27:05 2025 by rpki-client