Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File:                     i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier:          PIkeH9H8p1wcAPXm2rnw1U2knlBTYqbebeVwtRPVd1A=
Subject key identifier:   DD:12:AF:97:36:40:6C:3A:95:A9:AF:2F:8B:A7:E5:48:79:BD:4D:23
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer:       /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial:       0196741E0AE196C221E705BDEF0D4ECEA750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number:          1513
Signing time:             Sat 26 Apr 2025 22:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:47 +0000
Files and hashes:         1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=)
                          2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=)
                          3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=)
                          4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: 5Np8gjMkqBknhA84HIkRvrqve4fQg1ZAKCgQ39qE2J4=)
                          5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1e:0a:e1:96:c2:21:e7:05:bd:ef:0d:4e:ce:a7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
        Validity
            Not Before: Apr 26 22:00:47 2025 GMT
            Not After : Apr 27 22:00:47 2025 GMT
        Subject: CN=dd12af9736406c3a95a9af2f8ba7e54879bd4d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:c5:bb:07:51:9f:70:e3:94:3e:d0:d6:84:
                    05:ba:3e:73:c4:7c:28:79:ba:55:f4:d9:7f:dd:3c:
                    cb:26:fb:4c:93:5a:76:92:8d:c8:2c:16:9c:78:3d:
                    8b:d1:a8:8f:ef:42:be:9c:5a:eb:3d:e6:59:28:6e:
                    0f:41:fa:91:7a:e4:73:8a:89:6e:07:18:9c:f5:b0:
                    60:2a:be:cf:76:c6:5a:29:92:33:1d:14:31:e1:1e:
                    bf:2f:41:71:a4:78:e4:3b:ae:d5:f6:3a:b6:1f:f8:
                    89:d8:96:aa:cb:15:dc:fd:81:bd:a3:60:50:a6:59:
                    ea:8e:b9:9b:50:a9:84:02:12:07:3d:09:6c:a1:08:
                    ed:df:98:72:b3:8b:1d:37:92:cb:0e:01:04:4e:15:
                    25:ca:6f:10:13:ca:6d:99:dc:ce:87:83:77:0c:aa:
                    1e:32:32:ff:62:30:bc:ec:98:4c:06:37:75:c8:19:
                    bb:c3:0f:87:c4:4f:1c:6b:01:49:ad:21:25:3b:8f:
                    69:71:6b:26:35:bf:d0:f9:3b:bd:da:df:d3:3d:fd:
                    72:38:0d:36:eb:1a:37:4f:a7:ae:99:53:91:cb:dd:
                    4a:0c:1c:fe:42:bd:ee:1e:62:17:8d:0f:13:79:2d:
                    3c:72:ef:1e:84:02:3b:8d:6b:fe:ad:d7:15:34:c1:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:AF:97:36:40:6C:3A:95:A9:AF:2F:8B:A7:E5:48:79:BD:4D:23
            X509v3 Authority Key Identifier:
                keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:15:a7:11:f2:4d:13:36:6c:60:81:d3:82:49:e7:4b:08:
         6b:14:64:18:8f:62:a1:a0:27:c4:37:13:89:12:fd:b8:c0:bf:
         ee:d7:75:99:4b:21:63:3b:49:7e:ba:e6:e0:2e:01:81:ff:c4:
         c0:00:07:f0:f8:ec:2f:bb:ab:f2:82:0b:6a:3c:bf:c6:74:23:
         5d:37:0f:39:b3:07:23:8f:18:8f:83:1d:3c:db:cf:6d:3a:a4:
         fc:b9:85:e5:dd:dc:7e:b7:fe:6a:b3:37:1b:de:6a:f2:e9:18:
         44:d4:90:41:09:63:97:0c:85:73:e7:43:86:18:b0:9d:c1:3f:
         c2:4e:ad:0b:19:d3:b3:d2:78:04:77:1c:9e:3d:d4:04:2e:8c:
         37:2e:4e:c0:eb:8d:22:12:7e:ff:13:80:eb:66:7a:7f:dc:38:
         b2:b9:e7:c1:b0:38:e4:4f:25:3c:fe:d8:bf:b8:a4:a2:dc:29:
         e7:3b:cc:b4:c3:8f:fa:fe:c6:1e:c3:2e:77:8b:60:c7:c2:fb:
         f2:8d:44:54:9e:01:23:66:c4:f7:36:5e:5e:9f:fd:71:66:0d:
         42:be:ef:4f:31:d3:24:43:2b:87:05:a1:c0:c9:c6:e9:83:8c:
         71:a1:17:f3:e5:1d:14:75:b3:51:68:bf:62:e8:5d:da:d4:42:
         77:d4:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:27 2025 by rpki-client