Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File:                     I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier:          jefr46yx9e6eKusGcNGmSeDF+hgzAI3Y7ICctfsz37k=
Subject key identifier:   B8:3D:5E:1F:5D:1D:40:89:B0:8C:5B:98:00:68:B8:70:B4:5A:98:D0
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer:       /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial:       01967E341583557F0D414E0775AB3D5A1F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number:          020C
Signing time:             Mon 28 Apr 2025 21:01:04 +0000
Manifest this update:     Mon 28 Apr 2025 21:01:04 +0000
Manifest next update:     Tue 29 Apr 2025 21:01:04 +0000
Files and hashes:         1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: fk7hCf52mnl94cyxTOrZm5bmJAkP0GmJZtDsIH+uQ3Y=)
                          2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:34:15:83:55:7f:0d:41:4e:07:75:ab:3d:5a:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
        Validity
            Not Before: Apr 28 21:01:04 2025 GMT
            Not After : Apr 29 21:01:04 2025 GMT
        Subject: CN=b83d5e1f5d1d4089b08c5b980068b870b45a98d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:79:42:20:0c:8b:de:f3:64:04:6c:48:35:f7:
                    2a:f2:17:05:36:19:35:fa:5f:d8:23:52:f5:f6:27:
                    35:e4:d1:af:72:5b:6d:dd:67:0f:79:42:d0:01:6f:
                    23:88:c1:19:17:29:49:e5:75:6c:e4:76:f8:8f:ff:
                    ad:b3:59:ea:40:41:79:fa:ab:66:b0:15:b2:68:03:
                    e4:50:5f:61:26:f2:3f:a8:89:6a:b7:ea:6d:72:89:
                    51:fb:6d:84:ef:34:90:2d:e4:25:42:6e:c1:b6:72:
                    fb:05:60:74:03:aa:f3:73:c5:ac:f6:15:84:2b:a6:
                    6b:56:c6:82:36:f9:ad:74:6e:14:64:b7:75:d2:db:
                    50:a9:05:a7:c1:37:d7:11:75:32:25:53:85:36:53:
                    37:2d:69:45:93:a7:34:05:30:e6:94:c9:af:b0:b1:
                    03:4a:42:d0:ac:64:8f:2f:65:93:46:58:06:75:ea:
                    40:d2:cc:2b:0e:2c:e7:d7:58:65:96:fe:36:66:0d:
                    a8:60:79:3f:6d:82:0a:2e:86:da:12:8d:d0:b7:92:
                    c6:58:f4:79:ce:de:be:d1:66:88:ee:be:6e:ae:b2:
                    14:90:7f:1b:82:d8:1e:49:8d:74:d7:dc:bc:d8:b4:
                    9b:b8:00:f7:62:59:48:ad:87:75:c4:99:9a:d5:45:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:5E:1F:5D:1D:40:89:B0:8C:5B:98:00:68:B8:70:B4:5A:98:D0
            X509v3 Authority Key Identifier:
                keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:07:6c:95:5b:75:a9:57:b5:8d:c8:8e:32:62:1c:90:9d:
         8c:50:8d:74:f0:47:02:11:7d:1f:20:57:c5:fb:8d:cb:5c:c5:
         ca:6f:20:c5:27:b0:d0:45:f2:96:a6:45:5e:8d:10:7e:f2:83:
         44:12:26:97:7a:8b:9a:2a:31:65:da:44:07:94:48:16:71:7e:
         65:70:01:06:ff:6d:f5:fb:bd:93:e7:11:4d:8f:30:0f:f8:25:
         da:86:2a:f5:41:b9:91:ab:cc:b3:01:67:ca:7d:66:cf:80:ae:
         9a:f5:c9:96:53:09:65:a6:8e:59:1e:40:6f:d9:ad:8e:85:f4:
         b4:3d:9e:85:c7:15:c4:bd:91:73:2e:a0:79:6c:4d:77:a9:27:
         70:e1:9e:8e:0d:5c:a1:5d:dd:bf:d3:5d:25:2e:62:c6:48:6b:
         7e:41:48:93:53:36:0f:ed:6d:91:d2:ed:21:75:e6:5f:9a:e5:
         24:c0:8f:c6:f1:61:ed:06:33:d1:51:d2:ee:6f:18:21:84:a0:
         3b:a5:91:c2:40:ba:b9:ea:66:26:c7:d3:12:a3:a4:44:4b:60:
         64:fa:b9:2a:78:71:07:35:46:9b:ae:91:46:d4:0a:0e:1a:26:
         23:51:2a:66:07:13:e9:93:f7:62:ef:77:0a:ce:e1:4c:de:54:
         02:9a:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:21:37 2025 by rpki-client