Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
File:                     igdMx79SSrk70PDkG7V56Ri7E-0.mft (raw, json)
Hash identifier:          9H+v3PVRFi/TUnZ40MVjk0U9TVZXGB3QEjL6pWtiao4=
Subject key identifier:   98:95:35:F7:0F:DA:7F:17:31:D7:7F:91:77:78:72:F7:38:69:70:9A
Authority key identifier: 8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED
Certificate issuer:       /CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
Certificate serial:       0198820C34E880B31C1A0658B5EFA5063ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
Manifest number:          09B6
Signing time:             Thu 07 Aug 2025 01:01:34 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:34 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:34 +0000
Files and hashes:         1: igdMx79SSrk70PDkG7V56Ri7E-0.crl (hash: /sH1h6mjYTPwW3Z2pDrwtvquxYnQPVwz+V9MXlJ+xDY=)
                          2: vwh9MsbifZwK4ZCw9QX_9ijhE3M.roa (hash: d/jVp4Q/QFkMnzuF3P+YINiEbVVQhtUmrKzmHa4mKvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:34:e8:80:b3:1c:1a:06:58:b5:ef:a5:06:3a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a074cc7bf524ab93bd0f0e41bb579e918bb13ed
        Validity
            Not Before: Aug  7 01:01:34 2025 GMT
            Not After : Aug  8 01:01:34 2025 GMT
        Subject: CN=989535f70fda7f1731d77f91777872f73869709a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1f:f0:46:3e:f2:55:f0:37:50:a1:ef:25:37:
                    b4:45:fb:db:5d:44:a8:4f:42:a3:d3:d9:a0:d6:84:
                    25:b6:08:dd:5f:33:eb:11:31:70:c5:ce:05:dc:cb:
                    eb:69:d1:fd:6d:dd:df:de:68:41:8e:79:da:24:61:
                    aa:4a:45:e6:4b:56:18:27:0d:77:9b:9d:aa:65:b1:
                    84:5a:b8:09:e1:3d:39:e2:87:ca:99:0c:b9:fa:b7:
                    9b:9c:fd:40:c2:ea:f1:4a:12:db:00:c5:eb:99:30:
                    db:b1:76:bc:4d:e5:f5:53:5b:43:10:d6:0c:04:0d:
                    c9:56:a5:62:18:b5:6c:41:97:c9:80:8a:4e:d1:d2:
                    53:23:9a:21:29:e5:70:e5:5c:e2:16:c7:34:93:50:
                    69:7d:89:92:5b:a4:f6:23:13:6a:d0:b3:89:ba:93:
                    98:0a:48:c8:6e:8b:5e:d1:84:79:e7:a8:fd:f3:64:
                    38:68:a5:4b:a9:2b:fe:b8:b6:5a:2c:5b:9b:18:0d:
                    15:3e:ce:d4:2d:7d:28:6f:d3:a8:8b:e8:cb:c1:4d:
                    a4:38:6e:81:f4:35:2e:58:c7:9b:64:20:77:4e:dd:
                    b7:2e:bc:27:60:6b:2c:ec:76:67:27:c3:f9:9a:29:
                    1c:98:83:bc:7f:bc:08:af:31:31:dd:c4:05:00:45:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:95:35:F7:0F:DA:7F:17:31:D7:7F:91:77:78:72:F7:38:69:70:9A
            X509v3 Authority Key Identifier:
                keyid:8A:07:4C:C7:BF:52:4A:B9:3B:D0:F0:E4:1B:B5:79:E9:18:BB:13:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igdMx79SSrk70PDkG7V56Ri7E-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/022afc-25d9-4dbc-9bf6-9ed7e3632bd0/1/igdMx79SSrk70PDkG7V56Ri7E-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:37:c3:ee:6f:3d:75:da:92:90:63:0c:28:13:1c:e3:65:
         8b:85:4b:57:d2:7b:4c:54:5e:28:ae:81:ec:c9:cb:25:c7:9f:
         e3:8e:20:71:da:e5:57:72:03:36:04:e7:71:00:7c:15:69:87:
         1b:c5:08:a0:ec:26:9e:77:c5:1c:2f:d2:c3:63:d6:6c:3e:9f:
         19:40:19:1e:18:a6:77:f2:07:f4:5b:b7:22:5b:7b:ef:eb:66:
         50:d2:98:5f:25:d2:fb:32:3d:bf:dd:22:a9:61:b6:87:9a:be:
         5f:f9:49:2f:52:cc:06:72:ba:ac:75:50:2c:63:28:52:93:94:
         d8:ce:a8:18:02:6f:12:2e:17:27:fd:b7:63:17:56:b6:39:6a:
         2a:34:db:72:6f:ae:fc:28:63:f3:7d:9c:54:0e:3a:13:30:15:
         fa:7c:0f:ef:df:c0:8b:54:c5:7f:29:bb:d6:78:3f:d8:e9:d2:
         3f:48:06:87:4d:62:09:ee:b8:a3:b5:04:15:05:aa:d0:34:0f:
         55:b0:7d:cb:f9:f2:bd:f8:1f:be:80:d7:df:8a:5d:67:92:e7:
         8c:25:7d:bc:51:66:9e:5c:c2:38:f2:2f:16:ca:8d:ad:26:9c:
         34:7a:b7:9c:3f:a6:52:07:a2:33:56:f7:94:bd:bb:4e:9a:74:
         53:ae:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:19:20 2025 by rpki-client