Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          0cfcn5mv8LYFDhiuB5EZRfBA4VZtoGgyxMnZlfb7kI0=
Subject key identifier:   32:F4:72:B2:3B:41:73:FE:60:B6:ED:D0:8D:80:04:0A:74:B5:1C:61
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       01976C61E93548847A961AB464D3F616F6A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          10E2
Signing time:             Sat 14 Jun 2025 03:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:45 +0000
Files and hashes:         1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=)
                          2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: S7molFyBN8UeY7/U2TmRU/0CbEyS2ZW+/XmfiCucTi0=)
                          3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=)
                          4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:e9:35:48:84:7a:96:1a:b4:64:d3:f6:16:f6:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Jun 14 03:00:45 2025 GMT
            Not After : Jun 15 03:00:45 2025 GMT
        Subject: CN=32f472b23b4173fe60b6edd08d80040a74b51c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:ed:93:16:8a:b6:ec:a8:58:f1:37:eb:22:
                    ad:13:57:a9:bd:e2:07:73:50:64:52:53:02:84:44:
                    fc:a7:4c:c5:cb:d0:ae:a5:ff:82:7d:d9:fc:51:a8:
                    97:0d:92:78:ef:bd:bc:5b:bd:73:6d:09:a3:84:9f:
                    7b:b4:f3:fb:90:b6:07:8e:c9:63:c6:c0:71:8c:3a:
                    1f:54:f3:77:a2:5e:76:01:9c:71:ea:91:16:b6:cc:
                    21:0a:95:2c:54:09:8d:e4:86:72:35:be:54:ef:6a:
                    9b:a1:64:31:47:99:0e:2c:4e:a2:83:a6:ab:56:c2:
                    dc:39:3c:9c:32:25:9f:84:16:3f:36:b8:4e:6c:b3:
                    7c:d9:5c:30:30:f0:8d:bd:31:d7:f3:ba:ba:cf:58:
                    a6:e8:b4:62:fd:59:5e:b0:be:9e:85:ec:1b:ce:fb:
                    7b:3a:7e:cb:57:3d:91:95:f8:8e:2f:a8:3e:18:53:
                    6d:d3:50:a1:20:c4:b9:36:53:05:4f:8c:e4:4e:dd:
                    cb:2f:3d:94:74:62:74:e4:46:72:22:45:17:bb:35:
                    44:a7:f5:b4:35:23:e3:f2:bc:dc:e2:c0:9b:df:f7:
                    54:a2:6f:78:85:04:81:cb:bd:03:e8:e1:94:8c:74:
                    36:79:58:4c:2d:7a:62:4b:20:f3:f7:12:52:5a:b2:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F4:72:B2:3B:41:73:FE:60:B6:ED:D0:8D:80:04:0A:74:B5:1C:61
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:db:5b:1b:e9:87:5a:8d:82:c5:b0:55:1f:73:e0:66:54:be:
         b3:55:ea:95:13:53:99:3e:8a:50:d9:38:8e:2d:11:e1:91:8e:
         15:c6:b2:6c:a1:aa:de:c9:ed:f5:e6:44:d2:06:4d:06:58:13:
         49:bd:6c:a5:68:37:e5:27:fb:a9:61:cf:fe:4a:a6:ac:6e:62:
         33:71:31:12:ff:c3:af:50:23:d8:78:85:75:62:9e:a2:49:d2:
         89:68:d9:98:ca:a4:79:c5:a6:11:00:af:53:75:f6:08:53:47:
         a6:ce:32:f8:ca:ab:f0:84:89:65:a1:7a:9f:12:41:7d:5d:30:
         3d:f2:ba:8a:a4:4f:f8:66:90:eb:2e:3c:2f:0b:93:b2:3d:19:
         53:48:ae:a3:7c:86:6c:f7:98:18:ef:60:3f:8c:58:52:dd:d1:
         e7:12:4b:26:fe:87:74:fc:17:03:2c:79:fa:9f:f7:b0:b0:04:
         b9:52:b4:2e:11:6d:62:ae:da:a2:eb:a9:b8:cc:7f:77:89:ef:
         1b:6d:e1:6b:55:6e:ae:51:b6:38:43:12:24:80:89:da:6d:a6:
         49:60:b1:a8:5e:a5:6d:ab:bd:3c:25:d2:86:a5:3d:68:58:4a:
         75:48:6d:0b:4b:11:39:47:bb:47:a1:42:d0:66:df:58:d2:0d:
         0b:c9:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:33 2025 by rpki-client