Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File:                     IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier:          5JiqXUMouTB2lXxq5yKhzXv+zo2OugHwEcyIjnLwzl4=
Subject key identifier:   6B:C9:33:EA:E9:96:E3:E6:2C:64:1E:17:E2:05:62:09:DA:2A:50:38
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer:       /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial:       0196C193DB75008F2EBC8CDDE9CEA95A426B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number:          0F9D
Signing time:             Sun 11 May 2025 23:00:14 +0000
Manifest this update:     Sun 11 May 2025 23:00:14 +0000
Manifest next update:     Mon 12 May 2025 23:00:14 +0000
Files and hashes:         1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: GfeMmMmKko2kIwc1ArWqTImtQ4kKo1UhcEd0At+sZMc=)
                          2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:93:db:75:00:8f:2e:bc:8c:dd:e9:ce:a9:5a:42:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
        Validity
            Not Before: May 11 23:00:14 2025 GMT
            Not After : May 12 23:00:14 2025 GMT
        Subject: CN=6bc933eae996e3e62c641e17e2056209da2a5038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:57:81:b6:30:6b:f2:98:82:16:51:a5:13:
                    5f:bb:34:2c:4b:e6:4d:e6:fc:fc:ff:a1:fc:14:27:
                    a0:57:9e:c7:5f:95:8c:09:54:6d:78:83:5e:bc:af:
                    bd:0a:bc:b2:57:6d:c4:3c:26:19:4a:0f:f5:ee:2f:
                    41:82:12:ae:80:28:e0:5e:0e:57:32:a2:c8:b6:1a:
                    30:97:00:24:59:99:9f:e5:a5:5d:79:00:e6:9b:51:
                    38:1d:2e:e3:4b:04:33:7e:4e:17:57:55:19:cf:49:
                    d8:0f:ec:ea:3b:54:53:5d:14:49:f0:26:b8:c7:45:
                    3c:81:5a:e4:8b:64:97:24:cb:df:3b:a7:3e:29:e3:
                    01:7d:00:f6:2a:fa:1b:99:e3:09:43:d3:b8:d7:d7:
                    95:0e:4c:d9:74:09:6e:b1:02:39:97:9d:58:25:e9:
                    db:33:40:13:09:52:5d:c2:8f:34:cc:29:a5:fc:dc:
                    0c:35:a6:3e:2f:63:00:c4:ce:2f:d4:7f:86:73:f0:
                    6e:a8:e4:5a:de:0e:6e:1d:39:7d:cb:f6:58:39:ac:
                    b2:16:d6:b1:a5:c2:3c:d8:07:61:f9:b8:c9:ca:7f:
                    e7:7e:7b:77:b1:0c:08:72:6a:ab:e9:12:29:5f:7a:
                    04:9e:d6:ee:0a:be:cf:10:df:ad:18:01:65:90:15:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:33:EA:E9:96:E3:E6:2C:64:1E:17:E2:05:62:09:DA:2A:50:38
            X509v3 Authority Key Identifier:
                keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:6f:49:44:2a:8a:06:d7:c7:42:8c:83:36:ed:2e:c3:41:
         3f:79:81:b4:f8:aa:22:f3:92:9f:a3:48:84:03:76:c7:18:80:
         24:28:6e:d2:14:f2:e7:cf:3e:ae:6a:76:b2:b5:ad:62:5f:db:
         18:fb:75:2d:ab:87:72:ac:1d:b1:6b:28:38:4a:7e:48:ca:e8:
         35:fb:9e:fe:fb:e9:6b:e3:ca:ab:9c:fe:9d:8f:cf:c9:45:63:
         e1:44:64:5c:ab:a3:45:1a:a9:cb:bb:f8:06:c5:83:dd:c6:af:
         8e:95:87:1b:a4:65:7e:c7:68:ca:64:e4:fd:f5:43:10:3a:7f:
         0d:9b:32:a3:4a:49:cf:f2:d4:52:13:70:c2:79:5f:60:6a:90:
         6f:be:cc:d8:4b:29:e9:88:20:66:dd:67:57:8b:b7:69:2f:59:
         59:d7:57:a5:44:ae:2e:5b:28:8b:16:82:1e:b4:77:97:40:99:
         e3:ef:c9:b7:17:e8:d7:e9:4f:a4:ed:c1:71:8c:7b:e1:ac:4a:
         f3:02:04:e1:2f:e8:de:57:2d:6c:b9:e9:09:af:6a:ab:5a:9e:
         9f:bf:52:45:63:af:e4:ab:96:eb:73:28:1f:43:f8:ad:83:b0:
         90:89:35:9d:f6:e9:cf:2e:4e:1f:cf:b0:cc:d0:c0:3d:8e:00:
         43:06:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:27:22 2025 by rpki-client