Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File:                     iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier:          yG1+Me62xtYwW7luktEcyFckKJEUj99emV0gDh8jNis=
Subject key identifier:   C4:B0:36:21:C3:90:5F:8C:52:7B:33:03:2A:4D:93:57:C7:3F:D7:09
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer:       /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial:       0196BC36CA44C3E41EC8ECCA3DCB24323A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number:          B5
Signing time:             Sat 10 May 2025 22:00:29 +0000
Manifest this update:     Sat 10 May 2025 22:00:29 +0000
Manifest next update:     Sun 11 May 2025 22:00:29 +0000
Files and hashes:         1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: j1/C0HpxpNCVT+7CLDvuH0uh2N+f05/A1vD9ccY4TtY=)
                          2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:36:ca:44:c3:e4:1e:c8:ec:ca:3d:cb:24:32:3a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
        Validity
            Not Before: May 10 22:00:29 2025 GMT
            Not After : May 11 22:00:29 2025 GMT
        Subject: CN=c4b03621c3905f8c527b33032a4d9357c73fd709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f6:cf:25:81:cd:6a:8f:e0:7c:73:cc:6b:e0:
                    92:b0:ae:f2:18:96:74:2c:a1:aa:09:7d:17:36:e0:
                    eb:78:c6:cf:6e:90:e4:8b:a6:8c:ae:e1:93:03:ca:
                    5f:ae:e2:0a:74:f9:f5:b4:d2:99:11:14:e2:c1:e2:
                    fd:b3:85:b5:ba:39:97:ad:b3:f4:41:88:15:6c:9b:
                    52:b2:96:b5:7c:28:f1:5c:99:42:31:44:d4:07:95:
                    bd:07:e8:0a:f5:3a:db:e0:45:0a:95:af:3e:7b:15:
                    c3:ba:6a:1f:66:0b:04:cd:bb:ee:b8:24:87:4a:ba:
                    ae:46:04:bc:76:fb:3b:84:6f:59:6b:05:0b:9b:ae:
                    62:53:63:bc:d3:45:25:d7:4a:98:5b:f1:30:a3:37:
                    c9:1e:b0:15:04:ac:7a:49:4c:a5:8c:34:c8:3d:c2:
                    3c:d1:6e:a2:ed:d9:9e:82:75:ef:25:34:ee:12:00:
                    e8:6d:df:bf:c5:d6:a1:42:69:1a:6e:e9:d0:25:1e:
                    11:51:9e:7f:c5:1c:19:07:51:05:43:6a:95:de:45:
                    6f:bc:c8:2c:e7:fe:9d:ef:71:dc:18:ae:e0:ec:1a:
                    0c:9a:7e:12:cd:a6:5a:85:f7:52:ed:42:c6:20:0d:
                    e4:0e:93:6e:cb:53:b7:83:ff:82:03:16:b7:e2:14:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B0:36:21:C3:90:5F:8C:52:7B:33:03:2A:4D:93:57:C7:3F:D7:09
            X509v3 Authority Key Identifier:
                keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ac:d6:b0:7f:36:04:8e:da:95:30:a7:60:50:17:3a:0a:eb:
         6f:4e:b1:60:20:fb:90:27:e8:76:75:a6:e4:b7:83:25:95:62:
         89:25:08:ee:71:bd:63:ec:a5:d0:66:47:a3:fe:d3:16:9e:9a:
         04:55:f2:dc:4e:a3:45:be:9a:df:f3:26:6a:4f:e3:80:ce:b3:
         f6:f1:ce:bd:97:ef:2b:92:0c:8d:0f:4a:b1:b8:b0:61:a3:1b:
         f9:48:21:4e:0f:c1:97:89:61:65:24:99:ad:d0:d0:c9:af:09:
         f1:1f:e0:03:43:94:18:97:7a:7c:59:16:4c:56:a6:fc:12:54:
         99:34:18:a0:88:81:1f:15:95:95:f1:4b:95:e8:21:86:a0:3a:
         d0:ce:e9:27:a5:bb:de:fa:2e:0b:18:3e:c3:58:35:bc:6c:c1:
         15:2e:43:33:1f:ec:56:07:0f:ad:a2:4d:15:1b:5c:c4:1a:8b:
         24:00:1b:b5:63:bb:0f:c5:d0:87:59:33:0a:0b:26:7e:78:09:
         b8:37:7f:d8:8b:f4:5b:e9:9f:a5:69:d6:2a:24:1f:86:e2:29:
         59:b7:1a:a3:12:bc:b5:da:7d:28:a0:9b:0f:60:29:74:80:54:
         48:8a:f9:dc:b9:e5:9e:ee:d7:42:5c:82:fd:44:56:2b:6e:58:
         41:9f:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:16:35 2025 by rpki-client