Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File:                     IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier:          nPL/6vwKZmPtCV9TjkV1l/6ab6UoPGpN47e9mcEQC/k=
Subject key identifier:   52:27:03:A0:91:57:B4:03:D1:57:2D:FC:41:23:B4:6A:0D:ED:63:88
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer:       /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial:       01976D3E4B84F9D74A84DF39CB08EE1F02D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number:          127E
Signing time:             Sat 14 Jun 2025 07:01:28 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:28 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:28 +0000
Files and hashes:         1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
                          2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: w8sWCtXg8wNVXT4T0BPlqJv8Lomjl3PPzURDg+1MACk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:4b:84:f9:d7:4a:84:df:39:cb:08:ee:1f:02:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
        Validity
            Not Before: Jun 14 07:01:28 2025 GMT
            Not After : Jun 15 07:01:28 2025 GMT
        Subject: CN=522703a09157b403d1572dfc4123b46a0ded6388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:ba:2f:e2:cc:83:b4:83:4c:36:ea:85:da:
                    36:42:ea:4a:ee:88:c5:57:71:25:69:27:1f:39:09:
                    07:aa:79:ce:77:99:77:c2:9b:97:7c:80:24:c8:af:
                    aa:b8:aa:ed:b7:ef:ef:fb:3a:81:e3:20:0b:d6:dd:
                    ed:25:85:2c:9f:2a:f0:cd:bf:92:6e:52:d4:cc:63:
                    fa:95:39:46:d0:fc:96:44:91:07:ac:78:ae:da:af:
                    b4:fa:bc:ab:d2:01:d3:a3:c2:df:53:d6:d8:3c:8f:
                    f2:1a:a4:38:76:42:b6:8f:cc:01:8e:7a:7a:25:97:
                    ae:71:ce:bc:15:40:43:99:f6:f0:af:c4:1d:52:81:
                    6c:6d:25:b6:5e:e8:3c:7f:80:52:1a:4f:73:28:21:
                    31:79:a7:b0:37:4d:d4:05:4b:84:71:12:7e:2a:94:
                    c8:fb:94:da:74:88:dd:2d:5e:2e:86:ac:63:09:a7:
                    7e:bf:b2:1c:82:98:62:a9:1d:6c:a5:18:6d:1c:36:
                    5c:4e:68:b8:05:e6:d6:9e:22:c8:5a:aa:e3:d0:65:
                    4a:63:d5:8f:0a:b8:eb:9e:62:b7:0e:ff:33:d1:e5:
                    75:61:bc:c0:a9:0f:3d:54:fa:17:5d:ad:79:42:bc:
                    6b:93:8d:08:f9:a0:69:7b:3b:7c:d1:84:55:45:d7:
                    1a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:03:A0:91:57:B4:03:D1:57:2D:FC:41:23:B4:6A:0D:ED:63:88
            X509v3 Authority Key Identifier:
                keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b9:05:ff:ac:9e:35:71:6d:e6:c5:3b:d0:43:50:ed:d1:6c:
         16:b2:48:5a:10:3b:70:87:47:a3:f2:12:1c:49:c7:2f:ad:f0:
         dd:d7:3d:b1:ad:0f:42:92:dc:e5:eb:b0:fb:df:f2:0c:93:de:
         1a:af:b7:77:e2:3e:1a:5b:73:d3:32:5e:c9:fd:5f:eb:c8:bc:
         32:53:a1:4d:8a:51:7d:7d:10:2f:1d:f9:01:79:68:56:3f:22:
         24:dc:e2:94:0a:0a:4f:d2:19:bb:e0:14:d3:24:46:e5:a4:98:
         4f:15:7e:89:42:fe:7d:2c:44:d2:e7:94:07:cd:20:13:12:8f:
         d3:20:4b:79:46:c6:b8:72:ce:29:21:9d:56:a2:ba:4b:78:73:
         8f:91:8f:d8:74:4d:a8:aa:6c:6e:8c:4e:67:37:94:2f:f1:e4:
         3f:c5:d7:10:02:56:da:9e:7e:25:76:a0:c7:43:fe:67:1c:21:
         c6:9c:c9:9a:d9:b4:84:32:6b:ed:70:0d:b4:3d:e4:bc:fa:1b:
         b5:be:da:88:a4:dd:9e:e0:5a:dc:c8:e6:8e:ac:9b:47:18:dc:
         1f:d2:1f:11:95:f4:0b:7a:19:69:7e:36:a3:c1:42:a7:69:6f:
         c3:c0:7b:b6:b7:7d:c9:a0:f3:97:66:54:b1:8c:40:23:44:86:
         13:7c:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:18 2025 by rpki-client