Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          N0su2BIBmjwuov39hFVO7XS86/Rk1OimKI+D1ryva28=
Subject key identifier:   A8:0D:0D:CE:8D:0F:16:4B:C9:97:0A:7A:FC:6F:F0:C1:1F:82:74:AE
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       01969DF5BC1A447ABAFAAB91EF4D91CCB8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          14B6
Signing time:             Mon 05 May 2025 01:00:49 +0000
Manifest this update:     Mon 05 May 2025 01:00:49 +0000
Manifest next update:     Tue 06 May 2025 01:00:49 +0000
Files and hashes:         1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: KQWXhJHQTR6SP1GnpJB8WK2DlS5a74Uwp3rLKv10rk8=)
                          2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:bc:1a:44:7a:ba:fa:ab:91:ef:4d:91:cc:b8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : May  6 01:00:49 2025 GMT
        Subject: CN=a80d0dce8d0f164bc9970a7afc6ff0c11f8274ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:9a:13:55:3a:d3:e4:5e:5f:b1:c5:f6:1a:
                    a5:76:67:a5:e9:24:79:ee:ec:02:73:5e:2a:ba:49:
                    02:27:4d:17:85:9e:fb:76:ed:35:26:34:aa:a8:0a:
                    93:9e:e4:90:14:cf:b1:f0:ac:ed:ab:74:75:bb:30:
                    01:e5:db:16:92:44:e8:15:e7:5d:bf:f6:36:57:b7:
                    87:c9:b0:c5:34:f2:9f:0b:ed:46:15:6f:97:96:c4:
                    fa:3f:ea:25:75:5c:98:00:14:de:9a:3b:8e:be:a0:
                    86:c3:fa:53:4b:2c:36:6e:57:b7:a9:d8:6c:74:72:
                    6d:28:c3:e3:93:d4:ad:27:b7:e8:5d:ef:a6:ad:d1:
                    d5:74:bd:87:8c:fc:d5:81:03:1a:69:5a:81:e1:01:
                    a6:a7:ed:43:81:94:75:d9:07:86:8f:e7:a3:5b:57:
                    f8:84:d5:f2:5b:c5:72:a1:94:1a:93:a5:59:8d:2c:
                    a3:16:a0:11:35:c2:af:f0:b7:8b:2d:c6:ac:7e:98:
                    a8:e6:46:14:63:3f:13:ce:dc:7f:a8:cf:4a:0c:5f:
                    61:ba:5b:b4:c2:57:f4:f2:73:9d:6d:31:ac:73:45:
                    2a:c5:6c:2c:dc:3b:57:e4:d5:09:d7:4d:04:98:b0:
                    b9:5a:32:ac:b5:37:2f:56:b6:3f:09:67:8a:ec:0c:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0D:0D:CE:8D:0F:16:4B:C9:97:0A:7A:FC:6F:F0:C1:1F:82:74:AE
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:81:79:90:8e:e3:a7:06:a8:be:c3:5b:5e:d1:c5:27:b5:e5:
         a2:87:91:ee:f8:8d:05:b8:f4:78:67:20:9c:7a:ea:ab:f6:38:
         e2:ca:22:a0:1d:64:a3:ae:52:c5:da:c9:85:e0:bf:5b:3c:63:
         6b:7e:62:82:5a:d9:1f:0d:ad:9e:c5:8a:31:51:e4:f9:a6:4b:
         9d:35:76:2b:b6:c8:c7:76:b6:e2:6e:60:9e:bc:03:c8:1c:74:
         c4:9a:d6:f1:1d:58:55:be:a0:27:58:a8:31:ec:e9:76:65:f8:
         aa:ff:46:06:4d:05:22:e6:2b:f0:34:dd:8c:98:18:52:e0:5d:
         e6:bf:8a:67:fd:81:55:bc:95:35:bd:dc:a3:e8:5f:16:a2:3a:
         7d:0a:13:e6:15:93:47:f6:55:1e:c4:d8:4d:03:1a:82:ba:b1:
         2c:1d:99:3c:23:83:d3:0a:00:bb:d8:c6:88:99:13:c2:59:ce:
         53:79:cd:fc:16:41:1a:b9:5e:72:ce:55:cd:00:0e:d0:9e:a2:
         f9:74:0e:d0:91:34:58:d3:af:43:a9:d5:04:f8:83:3c:fa:4f:
         8c:90:67:93:27:b1:f1:29:4e:4d:b1:54:dd:17:cf:f2:12:d8:
         31:6f:91:59:bc:74:da:ee:aa:f9:5f:bc:61:23:77:6c:b1:4a:
         cc:84:9e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:40:20 2025 by rpki-client