Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File:                     IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier:          33NUVxhNwPgWa9k/AZBkVBWfjRtzsqCdEROvP3bo3uk=
Subject key identifier:   C7:58:2D:16:3A:43:EA:D2:42:01:DA:3B:0A:84:E6:87:4E:EA:16:3E
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer:       /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial:       0196D32C607DDF8F65E90187B7DCCB7A752C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number:          1540
Signing time:             Thu 15 May 2025 09:00:22 +0000
Manifest this update:     Thu 15 May 2025 09:00:22 +0000
Manifest next update:     Fri 16 May 2025 09:00:22 +0000
Files and hashes:         1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: H/zargZXGR5dtT+eaT8AC4tHBQOitJY7BkkdgNuOaZM=)
                          2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:2c:60:7d:df:8f:65:e9:01:87:b7:dc:cb:7a:75:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
        Validity
            Not Before: May 15 09:00:22 2025 GMT
            Not After : May 16 09:00:22 2025 GMT
        Subject: CN=c7582d163a43ead24201da3b0a84e6874eea163e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cb:df:89:b8:e6:50:5e:79:b1:da:20:35:1b:
                    94:a3:95:6b:04:b4:8f:fd:ad:b6:b9:ab:34:9d:b7:
                    d8:57:68:c6:69:93:27:4f:45:f3:74:71:23:b6:57:
                    cf:e3:a1:aa:2d:e7:2a:3f:ea:f6:c4:4b:49:90:6c:
                    f5:41:f6:3b:b4:54:ab:99:dc:fe:43:da:aa:3c:7a:
                    a4:f1:9e:e0:37:0c:41:4b:ab:a7:3e:9b:7f:ef:b8:
                    c3:f3:4f:04:86:98:cd:1a:7c:af:cd:92:a0:1f:ee:
                    cd:00:af:f4:6b:d7:1e:5f:8d:1e:d1:47:5d:33:b4:
                    c9:f1:44:3e:4c:f0:f0:6a:75:c3:64:2b:33:20:33:
                    8d:a2:83:f1:05:07:94:a7:19:b6:25:ae:2c:f2:16:
                    0f:00:11:aa:ef:37:13:2c:35:81:2f:4f:c3:cf:25:
                    f3:a0:db:51:52:bb:fa:12:25:0a:78:3e:79:a1:1a:
                    3e:93:6b:4a:13:bd:f2:9f:c2:e6:eb:d4:93:c1:a6:
                    4d:5e:bd:29:28:72:2e:92:4f:3f:e9:ae:c5:06:76:
                    d6:f7:ed:9c:d2:4b:d6:05:97:4f:ee:2c:d3:7e:b2:
                    63:d1:9c:16:5a:90:3e:4f:bf:25:6d:b0:e6:0d:3e:
                    ab:e0:ac:b4:d8:47:02:2e:c0:20:e1:0a:89:06:10:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:2D:16:3A:43:EA:D2:42:01:DA:3B:0A:84:E6:87:4E:EA:16:3E
            X509v3 Authority Key Identifier:
                keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8b:26:dc:da:5a:3d:c2:3c:e3:5d:42:54:54:78:46:02:5d:
         19:a9:3b:dc:1a:d3:14:54:8c:a1:30:b1:74:eb:0c:45:c5:a1:
         c7:0c:2a:2c:30:d7:2a:f3:90:08:b5:80:a1:de:d1:40:b1:03:
         0b:e1:27:f5:03:e0:cf:44:3b:27:2d:63:c7:2e:84:17:36:58:
         2a:90:57:c2:2f:15:c3:3c:83:ed:04:27:66:3f:00:a2:b0:6d:
         c7:8f:05:d9:2c:cd:04:48:2d:c4:c9:8e:52:95:79:52:72:50:
         00:af:28:9b:19:4b:97:85:78:a1:c0:46:3d:10:f5:69:5e:b9:
         6e:9e:67:fb:ff:26:cc:e3:40:36:a8:56:81:3b:49:4e:09:01:
         60:fe:e2:fb:3e:eb:b9:a3:07:e1:a5:dc:7b:4c:2e:7a:07:0c:
         df:22:9a:74:95:a0:b1:69:26:af:c5:ad:48:27:3e:54:e7:b7:
         69:fe:22:e4:1b:b9:4c:bc:73:7d:fb:cb:29:a2:91:ef:72:5d:
         8e:8f:c3:e0:c5:f1:43:8a:10:38:72:40:13:29:52:3a:53:75:
         70:5e:64:5c:48:24:f7:ac:fe:03:df:62:8b:06:5a:ac:9b:01:
         73:12:45:48:e5:76:82:7c:48:76:d9:01:85:81:5d:3c:a9:f8:
         c9:38:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 10:42:19 2025 by rpki-client