Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
File:                     IVGBuCd2l4rS27aVKNzpsgmOsH4.mft (raw, json)
Hash identifier:          i/IPnvo8Pog681y4oFVTiu0GobtI/AVf7JFEDsQxeuY=
Subject key identifier:   D9:CE:28:98:1B:F5:38:45:7A:D6:6C:89:2D:F7:FF:69:61:F2:C1:88
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Certificate issuer:       /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial:       019769CEC5AC2E7D26ADABE90DD4090AAF20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
Manifest number:          104E
Signing time:             Fri 13 Jun 2025 15:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:47 +0000
Files and hashes:         1: IVGBuCd2l4rS27aVKNzpsgmOsH4.crl (hash: EHrWvaWoAppQr7kQOul7Pt88HvZDSCoIcV6TLcGf6B4=)
                          2: eer-d-fcLvelLG4V4pmzSNp8bYo.roa (hash: 57pdrUijyw7X3aaJAIz94z/NxRDOdVIhHh5nf8aYnHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:c5:ac:2e:7d:26:ad:ab:e9:0d:d4:09:0a:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
        Validity
            Not Before: Jun 13 15:00:47 2025 GMT
            Not After : Jun 14 15:00:47 2025 GMT
        Subject: CN=d9ce28981bf538457ad66c892df7ff6961f2c188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:86:5a:23:a0:6f:75:b0:ad:0c:2b:ef:50:
                    8e:69:80:61:1b:6e:87:62:cb:9b:8d:1c:c5:21:5b:
                    53:38:19:71:75:4c:7c:9c:48:80:44:7d:36:34:0d:
                    fc:5f:6d:3e:05:09:64:dd:cb:a5:77:ff:9e:ac:de:
                    1b:50:f4:e7:e1:87:60:f0:13:a3:3c:1d:56:9d:56:
                    e2:0b:b5:d2:52:5a:87:7c:cf:23:50:c2:0f:c0:bc:
                    e2:ac:43:ac:8a:a8:ae:b4:d6:5e:25:b2:c0:d4:98:
                    0f:5b:9a:e8:d8:d9:4e:fb:24:cf:19:a2:0d:26:8a:
                    a9:a2:51:47:83:d3:55:1a:70:33:26:56:f2:cf:c1:
                    79:89:4d:a6:68:fa:9d:4d:1f:50:65:af:fd:fd:3a:
                    0d:2a:6a:d0:87:30:b0:35:54:9d:9a:ff:fe:3c:26:
                    17:4c:5b:db:5d:f5:9b:67:10:06:52:ee:83:96:db:
                    96:d7:28:ce:e1:e7:48:e1:c1:b6:69:87:33:8a:95:
                    ed:fd:f2:95:21:12:d6:07:cf:9c:07:4a:a7:de:3f:
                    36:c5:df:c1:51:57:47:ef:cd:4d:95:0c:1b:4b:f8:
                    d1:78:61:e5:af:6b:89:fd:d6:af:c4:62:65:c1:04:
                    cd:ab:01:65:4e:cf:ac:e9:34:23:6a:cf:6e:5f:6f:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CE:28:98:1B:F5:38:45:7A:D6:6C:89:2D:F7:FF:69:61:F2:C1:88
            X509v3 Authority Key Identifier:
                keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fe:62:8a:0f:23:b2:49:b7:9a:b0:a6:a5:0e:51:4a:49:05:
         86:0f:83:89:9b:37:7a:74:41:65:64:43:e7:9f:d3:85:e2:7a:
         5c:47:3c:d7:c8:a6:77:4a:ac:b5:c0:69:37:eb:69:fb:d5:8b:
         1c:f4:19:87:ba:8a:87:51:b5:a9:80:e8:71:80:5e:08:1c:7a:
         6b:21:c2:c0:87:4b:6f:c4:4e:b7:7f:5f:09:7a:3c:01:c2:5a:
         4e:28:b6:1a:0e:4e:68:9b:33:4d:77:6b:41:73:dc:d5:3d:fb:
         d6:2e:03:ee:e9:0a:22:2b:59:8a:c2:8c:1e:7c:57:57:b4:e5:
         20:9d:bb:aa:6e:46:cc:9b:1b:2f:98:a0:ed:70:28:48:9e:7a:
         dd:10:3d:53:9f:5d:58:f4:cf:14:25:eb:06:54:05:cf:f1:21:
         24:df:17:e8:df:64:bb:d6:a1:7d:92:e4:e4:5a:f1:bf:97:78:
         2f:3d:52:8b:ba:b3:22:5d:97:f1:97:fc:6a:c2:1a:46:9b:c7:
         2a:0b:b3:0e:2a:fd:56:65:28:bf:84:f2:bd:1b:71:44:38:a2:
         5b:e2:5c:a1:51:8c:f4:a5:15:d0:11:d2:07:c0:22:cc:dc:48:
         ae:72:7e:ef:80:4c:a7:17:a6:f0:e4:04:2c:be:ff:46:8c:e7:
         b7:e4:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:42:01 2025 by rpki-client