Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File:                     IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier:          VnE4VuBDMgP0xetSK3dKRrXcV0I3MCcjV2VTLMg7AOA=
Subject key identifier:   C5:9A:31:82:BE:E9:D7:A0:35:2E:C2:AB:EE:C4:2E:FB:60:19:C2:C9
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer:       /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial:       0196B747A3FA7480A9E18DB953B587EFC1FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number:          044A
Signing time:             Fri 09 May 2025 23:00:47 +0000
Manifest this update:     Fri 09 May 2025 23:00:47 +0000
Manifest next update:     Sat 10 May 2025 23:00:47 +0000
Files and hashes:         1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: vgntR5pW5C+r5S33S1XB0+Xb4CV38CItn9Xu7sIawIM=)
                          2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
                          3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:a3:fa:74:80:a9:e1:8d:b9:53:b5:87:ef:c1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
        Validity
            Not Before: May  9 23:00:47 2025 GMT
            Not After : May 10 23:00:47 2025 GMT
        Subject: CN=c59a3182bee9d7a0352ec2abeec42efb6019c2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:f2:b0:68:01:c9:98:22:85:92:84:75:41:
                    1d:48:29:f8:15:b5:95:8b:4d:99:d1:3b:5f:1f:17:
                    ab:c4:75:f8:ab:f7:ca:cc:62:df:29:8c:b7:bf:18:
                    04:5a:f7:e0:7b:da:d0:41:ea:fe:4d:ce:5c:cf:78:
                    0a:b7:e8:5f:fb:69:c0:1b:36:a3:c1:54:4d:73:2f:
                    44:21:22:6e:e3:6a:7f:36:ff:e5:04:28:79:1d:db:
                    f4:66:c5:a7:ce:b1:53:f2:d9:db:d7:93:3b:97:1e:
                    af:2b:a2:95:52:4a:11:ee:78:a8:3f:e0:9e:8c:ce:
                    ef:1f:e0:26:97:6f:f3:1d:b2:3b:2c:fc:49:8c:b5:
                    fe:54:82:7d:aa:33:4a:36:f9:ff:3d:f2:bd:a0:09:
                    5c:7e:03:2a:6d:24:d6:5e:8a:d2:ed:4e:de:21:e4:
                    f3:43:18:31:34:cc:83:83:3b:fe:40:f8:75:09:1e:
                    46:c2:1b:83:77:ca:9b:d8:84:ae:f3:4e:7c:0f:2c:
                    df:48:bb:b6:4a:66:c1:42:8c:98:ba:5e:38:93:ca:
                    66:72:9c:85:ad:8c:a3:83:ff:8f:7b:a4:f0:54:e2:
                    dc:d3:6a:39:50:2d:a4:ca:cb:7d:ff:cc:be:bb:e7:
                    68:be:cb:8a:05:2a:cb:56:c1:80:02:91:e1:71:fa:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:31:82:BE:E9:D7:A0:35:2E:C2:AB:EE:C4:2E:FB:60:19:C2:C9
            X509v3 Authority Key Identifier:
                keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:b2:7e:21:69:78:0e:d1:75:5c:3f:8c:bf:5d:90:e4:64:
         48:b8:bd:3d:b1:ac:06:aa:d3:a7:e4:19:ba:02:b8:18:8b:c9:
         77:9a:54:ea:26:af:76:71:75:49:6f:60:66:c1:01:9d:0d:02:
         c7:85:73:db:53:f9:aa:45:09:b7:37:74:fd:e5:0e:46:bb:99:
         57:b4:09:db:73:6d:7d:86:e3:e1:ad:96:8b:4f:e7:9d:89:68:
         20:1c:3a:1a:2d:9c:50:82:fc:b0:f3:f1:27:00:38:5a:b7:2a:
         9e:ae:26:95:84:88:c5:42:66:91:de:c8:ea:01:49:4c:5e:dd:
         33:74:76:e5:de:ba:b3:a0:70:ef:ea:0e:65:63:d2:bd:ce:cc:
         ec:57:25:ef:7e:e7:45:7d:85:71:5a:b5:90:94:af:0c:db:71:
         91:06:d9:f7:8f:c5:47:21:9c:d3:39:31:ea:30:56:57:95:6e:
         56:c8:00:9a:8b:99:1c:3b:29:84:91:d8:42:d4:6d:a9:78:52:
         41:3e:ad:cc:1b:ae:fd:cd:72:16:5e:b7:4a:ab:60:4a:c3:f3:
         7b:c2:6e:1e:66:d4:80:83:b5:39:bc:9b:5d:52:a8:16:5a:99:
         9e:44:eb:eb:2e:63:59:ec:c4:b6:9a:c4:61:d3:f7:e6:11:d7:
         00:1f:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:21:45 2025 by rpki-client