Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File:                     iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier:          GWhNMyJ6t3RfeKsa4BASnJLhC2AV1bWgpWWj07r3QZs=
Subject key identifier:   29:32:87:65:85:B8:54:A7:4A:1A:C9:A4:4D:DF:4D:B6:4E:6E:FA:97
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer:       /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial:       0196BF6FAF4B56D6127E5FED248EA2AB37BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number:          1536
Signing time:             Sun 11 May 2025 13:01:29 +0000
Manifest this update:     Sun 11 May 2025 13:01:29 +0000
Manifest next update:     Mon 12 May 2025 13:01:29 +0000
Files and hashes:         1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=)
                          2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: V8VfDMiDI4Si0n9ApbfyAXtAFFbu531WW9mU+hVZvIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:af:4b:56:d6:12:7e:5f:ed:24:8e:a2:ab:37:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
        Validity
            Not Before: May 11 13:01:29 2025 GMT
            Not After : May 12 13:01:29 2025 GMT
        Subject: CN=2932876585b854a74a1ac9a44ddf4db64e6efa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:af:9d:7b:5c:55:0b:a6:39:df:82:f9:57:
                    87:7a:ff:56:5b:06:10:98:5c:81:75:0a:10:38:07:
                    aa:b5:e9:25:58:1e:02:93:52:94:fb:4b:06:3c:4f:
                    be:f5:26:e5:d0:34:0d:d4:4f:cd:09:cc:1e:9a:fa:
                    d9:bf:80:b3:a2:2e:9d:e2:c4:25:a2:a9:2e:e3:c3:
                    03:69:05:86:4e:23:7d:49:0d:84:ba:25:27:18:f0:
                    99:e5:79:89:fd:d8:a0:65:83:75:ad:e8:3b:0f:43:
                    e4:2f:11:df:42:50:48:88:ed:d6:5d:ce:ba:b9:89:
                    fa:f4:bb:71:26:61:e1:6b:80:d9:a2:f5:10:ab:0e:
                    d4:b0:c3:7a:31:7c:79:d6:ff:dd:db:43:da:13:b7:
                    a4:75:9f:b7:a5:bd:00:6a:1f:2f:aa:be:2d:ad:21:
                    67:f1:5b:50:6d:96:50:6d:b2:26:f4:86:6f:a2:91:
                    a9:38:92:b6:72:c2:49:4c:cd:99:27:6e:69:a2:a4:
                    1a:c8:87:4c:1f:81:4d:6c:0a:6a:8a:ed:e3:71:4f:
                    e9:58:ec:7b:63:bf:4d:73:d2:a9:f3:b8:a3:62:02:
                    66:7b:23:8c:88:fc:58:28:3f:18:64:45:41:be:d4:
                    aa:60:ce:d6:9b:af:67:c9:e1:d9:09:ba:eb:49:4e:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:87:65:85:B8:54:A7:4A:1A:C9:A4:4D:DF:4D:B6:4E:6E:FA:97
            X509v3 Authority Key Identifier:
                keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:20:cc:21:1b:b6:60:e2:50:97:36:aa:39:99:83:cd:60:
         36:69:ec:ee:6c:2e:90:95:26:f2:f8:6d:92:9a:5a:7b:bc:ba:
         e8:17:47:02:cc:0f:c5:65:09:5d:29:8a:52:60:a9:2e:9d:3a:
         8d:f4:d0:f9:69:4d:fc:4c:4a:99:7b:0d:e4:92:6c:b0:0a:42:
         c2:fa:41:a2:21:0a:69:b9:d5:32:28:81:2f:8e:e3:16:87:a1:
         bf:52:b8:19:ff:71:58:6b:5b:7e:37:8e:4e:25:19:f8:2a:77:
         fc:96:22:c6:fa:bf:74:5b:48:6e:cf:76:6a:8f:f6:e2:19:7f:
         cc:83:e1:7d:06:28:16:c7:29:6f:0a:14:8f:97:9a:41:51:9f:
         f2:15:1a:da:c9:6f:78:05:5b:ba:41:9b:29:25:ed:9e:a2:ed:
         0b:d2:44:59:a0:64:15:40:42:ca:e4:f7:7b:d9:3d:b4:6b:55:
         a3:13:11:64:33:60:72:ba:a4:9b:3c:0c:e7:85:9f:bb:79:ec:
         10:43:e8:12:e7:af:32:e3:2a:a5:7d:17:b5:2c:df:76:30:4c:
         2a:42:8c:d5:11:cd:89:f5:6d:d9:13:14:f5:31:a5:6e:15:c9:
         95:eb:e6:d8:bc:1a:2e:6c:25:83:af:51:da:d7:09:a8:20:b3:
         aa:1f:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:58:16 2025 by rpki-client