Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          UVPIl3bYzTo4SlzcukLtFMJDET69yzuZHQkNiujHqfg=
Subject key identifier:   FC:CD:FF:EE:F1:02:B1:F1:56:F1:B8:BA:93:B4:62:97:EC:4C:35:5A
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       0196A6C17D508A6E00E5D3AAA97CDF2B4FE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          0496
Signing time:             Tue 06 May 2025 18:00:20 +0000
Manifest this update:     Tue 06 May 2025 18:00:20 +0000
Manifest next update:     Wed 07 May 2025 18:00:20 +0000
Files and hashes:         1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
                          2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: beFz+SRjcvSyacU8l3tVtbkItOthjGkeKewgqr8LpGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:7d:50:8a:6e:00:e5:d3:aa:a9:7c:df:2b:4f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: May  6 18:00:20 2025 GMT
            Not After : May  7 18:00:20 2025 GMT
        Subject: CN=fccdffeef102b1f156f1b8ba93b46297ec4c355a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:93:06:56:34:9b:dc:56:37:a8:a3:f8:aa:
                    af:70:13:ec:95:ab:e6:f4:61:3a:17:e3:d9:bc:ad:
                    f1:72:9d:69:59:34:2a:7e:69:44:8d:3c:cd:81:66:
                    6b:78:e5:4d:ac:4e:b5:95:a9:9a:29:36:4c:d9:d6:
                    cf:99:e7:a7:dd:e1:a3:d7:8a:c3:1f:89:bb:47:03:
                    50:a6:a1:a4:d9:77:1f:8c:59:79:5c:00:07:78:dc:
                    ab:57:34:38:52:e6:5b:d7:e9:76:99:2a:94:2d:b3:
                    15:cf:6f:fb:d4:e3:82:4e:24:49:a5:0b:8f:6d:2f:
                    f2:e2:fc:b3:0a:ec:cd:72:bd:5b:8e:21:a9:ea:54:
                    d6:5f:aa:e1:66:f6:79:8d:25:bd:a3:e7:d1:31:ad:
                    41:57:7b:a0:d5:18:fe:07:b0:4d:d9:fd:ae:46:38:
                    d7:02:9d:c0:a1:e3:f1:14:73:dc:e4:de:b8:a0:eb:
                    4f:01:ff:70:a9:c7:18:ac:71:93:eb:13:6d:27:2c:
                    cf:09:88:f7:4f:16:bd:82:e5:17:21:73:b2:28:5f:
                    6c:4e:9b:ca:4d:9d:df:8b:25:1d:2e:f3:ad:10:e9:
                    a4:c8:ff:c7:46:da:40:de:2e:8a:b2:8d:f5:ea:2d:
                    a7:5b:57:45:90:3d:ab:50:40:ca:69:7b:7a:11:20:
                    50:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CD:FF:EE:F1:02:B1:F1:56:F1:B8:BA:93:B4:62:97:EC:4C:35:5A
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:e2:44:31:f2:1f:d7:14:7c:b1:3c:b4:8a:77:8e:74:de:
         6a:b4:c1:cd:79:a8:e7:b2:7e:44:b3:0c:ed:c7:2d:8c:4f:a9:
         d3:47:97:ae:58:f2:a4:53:35:9f:89:46:fe:ee:98:8a:9c:a2:
         b9:52:55:00:78:9e:f7:31:32:1b:02:b7:26:1d:72:51:35:94:
         90:c8:41:e8:73:47:4f:f6:1a:ae:b6:d4:fa:18:53:dc:27:25:
         1a:94:01:b7:50:36:be:6c:26:51:0a:df:28:80:52:2f:f8:5d:
         5d:fe:1b:08:e3:7f:c5:d4:68:4d:49:3d:63:a3:27:42:57:59:
         5f:2f:05:6a:30:c5:dc:0b:96:db:06:b1:96:5c:87:a3:af:b7:
         d8:13:00:86:51:ed:92:e4:b7:03:76:5f:f4:62:1d:53:36:07:
         25:34:9a:85:6c:d9:f9:4f:1f:d6:17:b0:98:41:78:20:55:ec:
         2e:72:8e:63:ef:75:74:f2:ae:08:ed:ea:b2:59:6a:e1:e4:61:
         a4:d2:67:91:bc:f4:b7:4f:29:83:22:a5:8a:59:99:ea:9a:db:
         fd:cd:17:92:86:d2:1e:52:50:f5:34:34:c0:48:e5:75:da:48:
         33:93:70:df:52:f4:07:3a:28:9e:3d:f9:30:94:2c:58:bb:c3:
         26:8e:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:02:27 2025 by rpki-client