Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File:                     iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier:          f7uLtmfB/b/WEewLV8B/0UEAL7Po4X6PCOHIGZuAofU=
Subject key identifier:   E3:6F:0D:8F:67:2A:F0:2F:5D:03:C9:F0:D5:DC:B4:59:A0:C1:72:A3
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer:       /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial:       0196A6F8B5BFCDFA25CA57326FD3AA4A8C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number:          017C
Signing time:             Tue 06 May 2025 19:00:39 +0000
Manifest this update:     Tue 06 May 2025 19:00:39 +0000
Manifest next update:     Wed 07 May 2025 19:00:39 +0000
Files and hashes:         1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
                          2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: Jqc6Kz3GyABoFgbMicz4MSTLWQnQR9BY9l3TFHMlIEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:b5:bf:cd:fa:25:ca:57:32:6f:d3:aa:4a:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
        Validity
            Not Before: May  6 19:00:39 2025 GMT
            Not After : May  7 19:00:39 2025 GMT
        Subject: CN=e36f0d8f672af02f5d03c9f0d5dcb459a0c172a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:69:5c:40:d5:5b:dc:e8:61:34:b2:b0:35:
                    f1:63:74:f0:4a:ae:e3:d5:b9:31:5e:bd:2e:ba:f8:
                    48:4d:c4:89:15:59:ac:6a:eb:cc:64:dc:37:a5:52:
                    53:21:86:48:cc:a2:49:8d:30:f4:5c:ec:73:f8:f8:
                    8f:16:e7:2e:de:89:1f:6a:68:38:88:ba:c2:40:49:
                    35:f8:07:c6:15:d7:6a:8c:86:d7:64:19:ff:df:b2:
                    2e:38:38:e7:c4:2a:d5:e8:b3:c6:4f:6c:7c:4c:91:
                    d3:af:35:04:c2:39:fd:62:d4:3d:2b:b9:da:a0:c7:
                    26:9d:9d:78:23:53:5e:c8:1d:09:6c:0c:6a:16:e2:
                    77:b1:cb:e7:73:82:5a:13:2b:02:a0:34:95:ce:cb:
                    ee:29:dc:37:71:7d:7a:75:5a:1b:40:b9:d3:53:b6:
                    01:b8:e0:26:85:f7:b0:95:d7:16:21:5e:94:37:83:
                    b6:7b:01:fb:21:f2:25:7d:e5:da:14:a5:fc:00:ad:
                    a2:15:d2:dd:1c:a4:3a:5a:94:a1:47:40:3c:fa:c4:
                    ac:d5:2f:99:0f:cd:25:8d:66:7a:ed:e0:72:be:ea:
                    64:5a:e8:00:25:cd:61:e9:dc:02:f9:41:61:68:92:
                    b3:05:0f:2a:76:58:7f:5e:12:5c:31:3d:21:62:1e:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:0D:8F:67:2A:F0:2F:5D:03:C9:F0:D5:DC:B4:59:A0:C1:72:A3
            X509v3 Authority Key Identifier:
                keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:b3:37:93:79:28:03:ee:29:63:e6:8b:bb:07:89:09:ae:
         4c:a4:ac:1a:d3:31:6a:be:3c:55:96:a1:fe:6c:c6:7c:ec:06:
         9b:0c:9f:f0:f3:2d:8a:c9:b7:97:37:8e:e7:87:61:7f:19:11:
         fc:f4:d3:7b:46:2c:0a:5d:db:25:79:98:bb:c4:84:3b:86:6a:
         cc:5c:f8:7c:a6:21:8e:3b:7d:32:5f:0b:e5:90:d7:fb:b9:ab:
         28:6b:e2:ba:f6:1a:be:9c:0f:37:2e:31:8e:6d:e4:85:a3:41:
         fc:17:8a:e6:74:7c:67:40:69:95:57:ef:11:79:e3:8e:1b:1c:
         98:af:cd:e8:99:2f:de:02:cd:b6:7d:42:a3:aa:0a:d7:2d:e0:
         02:7d:5b:0b:5f:9d:5d:25:22:80:66:54:60:61:03:e8:f2:7a:
         89:3b:8e:91:f8:3f:02:d0:2f:24:f9:44:3b:31:05:ff:62:4d:
         92:60:ae:c4:0e:58:2e:8e:38:af:9c:83:fc:2a:88:6b:ba:c3:
         55:73:f1:be:ca:e7:cd:51:97:d3:0d:91:af:57:f3:a0:c2:01:
         7b:d2:94:22:38:0b:14:02:f4:a8:91:4b:ef:d8:ca:2f:3a:2c:
         fb:3e:ff:55:32:bb:28:c4:68:d4:a0:ee:9c:84:48:11:72:fb:
         d6:e3:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:34:30 2025 by rpki-client