Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File:                     IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier:          JkfS82Bex+NySAmdSShyk3mpT9ElBd96Gp1SgLFpH44=
Subject key identifier:   1A:2C:AC:38:0C:4C:B0:23:0B:71:09:EB:3B:DE:95:12:20:E1:45:53
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       0196C6F145F0820C00F39219F14B4F4FA2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number:          08EE
Signing time:             Tue 13 May 2025 00:00:22 +0000
Manifest this update:     Tue 13 May 2025 00:00:22 +0000
Manifest next update:     Wed 14 May 2025 00:00:22 +0000
Files and hashes:         1: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: VoiQIHPSHoJoId9zzydwiDJcjL5n7ruzdJy5oSbta6c=)
                          2: U9FgNuO_WVlbI20UhIUyI7NG_LE.roa (hash: BGOqRAx/QBvRa7zIMAAuvcSBrTI6cGoaM4mGtdpxDLU=)
                          3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
                          4: XIWD4tmKPBUNLGHuM83XfdqSQLo.roa (hash: 1D5W9f26KTQarHJTs0xIKCgYO2HEyTRn2m31rQHLa2g=)
                          5: dUOQVFKkqXcofaQY7c6c16-DmdA.roa (hash: KWspMWEnDlPl4b4PCtdlEsvsuj9RREZsSwrJoJ7d9Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:f1:45:f0:82:0c:00:f3:92:19:f1:4b:4f:4f:a2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: May 13 00:00:22 2025 GMT
            Not After : May 14 00:00:22 2025 GMT
        Subject: CN=1a2cac380c4cb0230b7109eb3bde951220e14553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:42:13:f8:0f:98:92:00:42:88:e1:81:e0:
                    11:83:50:da:d3:13:c0:23:ab:f8:16:1c:d6:24:2f:
                    6b:38:52:83:21:1b:b0:bb:67:68:74:74:af:c3:04:
                    71:6c:ea:1f:5d:81:18:f4:97:da:ae:b9:0b:09:57:
                    01:93:0f:d9:66:7e:af:bd:3a:a8:ad:0a:dd:5d:d7:
                    da:0b:3f:8e:66:7c:16:3d:56:1a:2a:ac:f7:95:71:
                    00:39:71:38:ba:de:8c:78:59:7d:d3:91:d9:11:3d:
                    ac:c2:8a:33:a9:23:af:46:db:7d:d8:78:16:21:2b:
                    91:32:98:07:90:f1:aa:f0:64:ce:6b:19:29:85:88:
                    6f:ca:64:fd:5a:b7:f1:64:23:03:76:46:67:5f:98:
                    7b:6b:01:5a:42:b0:81:30:01:a3:30:c9:98:9e:12:
                    7d:1d:a6:df:a2:6a:85:6e:11:1f:91:56:64:b9:d9:
                    45:f7:0c:0b:7a:8b:bc:d2:5d:68:44:4b:1b:ea:9f:
                    07:36:b0:a3:97:6d:7f:e8:60:5a:0d:76:81:8f:f1:
                    ed:f5:d7:65:7c:23:71:7e:ef:03:42:bb:64:9f:4f:
                    ab:9c:98:e7:66:e5:7b:af:41:f8:91:db:76:8d:e3:
                    88:1d:ff:f2:32:f1:91:55:dd:d3:9e:f5:af:65:df:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2C:AC:38:0C:4C:B0:23:0B:71:09:EB:3B:DE:95:12:20:E1:45:53
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:55:e7:9f:60:bb:b1:50:9d:83:bb:e9:02:3b:dc:57:13:49:
         d1:c6:4f:53:3f:fa:dd:a6:40:d2:a2:40:4a:8b:05:bb:bd:bf:
         44:b7:49:f8:21:31:02:2d:d3:3d:a9:cd:d7:61:a5:50:fe:33:
         f3:22:bf:df:66:e9:89:5c:75:b0:14:a4:02:71:57:c1:0d:e0:
         3d:29:29:00:43:07:c6:3b:a9:80:42:0d:70:ea:8c:5f:7b:16:
         4b:43:83:c0:7f:08:a2:18:20:44:8c:b7:f5:a6:83:c9:c2:fa:
         03:50:3f:fd:9c:de:ec:41:ac:22:b6:89:9c:5e:d5:ce:1d:ab:
         35:c2:9a:fd:68:10:1c:58:5f:6c:57:80:a6:c7:c9:0c:54:bb:
         a2:52:18:e2:f9:2f:9d:d2:c2:a0:db:62:c8:04:94:1d:df:4e:
         d6:d1:a1:85:52:d1:4a:92:3f:72:91:2e:f7:db:df:60:a0:67:
         28:97:70:39:b3:38:8b:c8:fb:92:60:bd:88:85:b1:fb:25:cd:
         d1:5e:78:a9:9e:35:f0:8e:30:20:97:94:1c:a4:52:f3:13:59:
         01:a0:4b:0d:28:56:d6:78:e9:1b:ee:47:a0:d1:39:dd:a1:7c:
         36:49:7b:3d:a0:c3:99:ee:d8:74:f0:c4:f3:36:70:17:3a:f5:
         e7:6b:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:33:57 2025 by rpki-client