Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File:                     iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier:          7fGwXULnew4aVAL2az1kFkcZNVkfoNwKvOFTixJa8xs=
Subject key identifier:   DE:63:7F:24:64:11:E4:C1:5E:88:0B:39:FC:A6:16:E4:26:51:5F:1C
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer:       /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial:       0196B8239A1E0ABD3F1377A7BBEB0EA62241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 03:01:02 +0000
Manifest this update:     Sat 10 May 2025 03:01:02 +0000
Manifest next update:     Sun 11 May 2025 03:01:02 +0000
Files and hashes:         1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
                          2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: EC6xr9lkkyZ419nY3vYBwY6fXw+RoKNrr4C6q/Vk3g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:9a:1e:0a:bd:3f:13:77:a7:bb:eb:0e:a6:22:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
        Validity
            Not Before: May 10 03:01:02 2025 GMT
            Not After : May 11 03:01:02 2025 GMT
        Subject: CN=de637f246411e4c15e880b39fca616e426515f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:e4:ab:5b:f7:c8:2b:24:3e:44:21:c1:51:
                    2e:18:f0:d0:1a:9a:a8:8e:73:a8:39:51:f3:c0:9c:
                    18:9e:e9:56:0e:01:e2:91:2b:bb:f1:6f:61:b3:bb:
                    ac:03:ac:65:ed:27:16:72:8b:12:88:f0:8f:db:43:
                    6a:e7:59:02:af:b0:bb:0a:b2:0d:0d:53:3d:7e:8f:
                    3d:ee:77:11:46:16:3d:63:c3:02:31:fd:5e:b5:12:
                    7b:be:69:e9:7e:b3:8e:8e:49:49:81:e8:8b:93:6f:
                    93:8b:37:ae:c4:32:44:71:79:70:c6:36:9f:60:7d:
                    0d:6e:05:79:46:3b:cb:b4:1e:0d:a8:3a:c9:4a:72:
                    b2:3a:3f:0d:99:ef:1a:5a:d5:2f:08:a0:02:c0:71:
                    3e:ee:e8:35:84:f2:07:54:f4:06:cd:09:ab:1f:01:
                    e7:37:92:71:93:55:5a:09:99:6e:48:8b:ef:9f:09:
                    fa:13:4d:f8:a5:4b:6b:04:2b:f0:64:f0:2a:b3:12:
                    15:71:56:8b:a5:81:36:3f:7a:7d:30:76:ba:4f:46:
                    45:58:ec:15:56:28:56:3f:8f:52:f9:f0:f7:6a:17:
                    e7:91:5d:45:3b:3c:7e:47:4c:ff:80:01:d8:15:cf:
                    d9:d4:9a:5a:c7:1b:36:9f:22:ec:79:69:b7:99:7e:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:63:7F:24:64:11:E4:C1:5E:88:0B:39:FC:A6:16:E4:26:51:5F:1C
            X509v3 Authority Key Identifier:
                keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:da:6a:98:b3:5a:58:bb:e7:e9:43:4d:31:1b:fd:b7:15:50:
         a7:d0:16:24:79:ed:56:97:13:10:ce:16:8b:fa:de:83:75:b1:
         15:c5:34:c0:47:7e:a3:9a:f2:1b:cf:bc:af:b9:71:26:c9:07:
         45:de:ea:49:52:57:17:14:ec:13:4c:72:1f:99:59:9c:37:c2:
         06:f3:bb:8b:ce:01:c3:4e:7a:a8:2e:c0:ec:2d:9c:ed:cd:42:
         89:68:b0:c6:cc:04:a8:c4:62:42:56:9a:1f:1c:ba:25:c6:51:
         d0:f6:53:95:0a:63:5e:6a:41:a3:01:8b:08:c8:72:0c:86:49:
         c7:96:90:67:c9:62:08:63:4e:70:51:63:97:d8:a6:08:70:15:
         24:5b:33:ab:f9:07:26:77:eb:d5:94:68:c2:b4:47:87:bd:79:
         93:d3:bc:5c:8b:c5:58:5a:26:ee:c4:2b:f9:81:bf:1c:20:95:
         70:dc:d4:51:5a:3a:63:fe:c9:c2:43:bb:6b:ea:08:f0:73:6b:
         94:44:6a:96:fa:4a:27:f6:60:76:81:18:1e:1e:84:23:ee:36:
         4f:f6:66:00:dd:cf:bb:56:7e:04:01:3d:e8:a4:06:2d:53:9f:
         f0:fe:64:65:be:92:61:ea:75:e5:e4:de:5b:e3:d2:d7:9a:ec:
         80:21:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:01:48 2025 by rpki-client