Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          96ZKraUQE1lh2lFfNNvSejKHcYcuEp2UG404USIvUic=
Subject key identifier:   6C:E5:59:25:7E:A1:74:2F:16:14:4E:85:EE:38:99:25:42:58:F1:C4
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       019873E26EBC92324E060129C73E6039579E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          0504
Signing time:             Mon 04 Aug 2025 07:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:15 +0000
Files and hashes:         1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
                          2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: HeQ3V4kIRnoYtbAIsPNvKpEdYAxe9TDYdR45NHqpNFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:6e:bc:92:32:4e:06:01:29:c7:3e:60:39:57:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: Aug  4 07:01:15 2025 GMT
            Not After : Aug  5 07:01:15 2025 GMT
        Subject: CN=6ce559257ea1742f16144e85ee3899254258f1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:87:c0:b6:8d:8b:96:e2:78:55:6f:07:2e:
                    80:be:92:38:9d:21:19:fc:78:12:a4:e7:40:13:26:
                    b9:ab:70:55:c6:c9:00:82:ed:49:15:2d:60:9d:62:
                    4a:4c:1c:39:eb:90:26:0b:2c:e9:0f:18:b3:35:2f:
                    5b:8f:f3:40:5b:a4:a9:4d:c0:53:22:b9:30:1e:7a:
                    5e:93:e9:08:94:f0:ed:0a:3e:03:98:57:5a:fa:7b:
                    7c:7d:af:99:95:10:41:8b:33:73:92:a8:ac:32:94:
                    a8:c9:4e:3b:e6:46:00:12:8b:db:e9:28:98:6b:32:
                    31:a9:de:ea:72:a9:6b:ec:8f:3d:fe:6c:3d:73:ae:
                    e1:8d:0c:19:53:23:f5:44:4c:23:58:b7:e8:87:ed:
                    91:73:aa:65:6b:a9:d8:cc:c7:67:ef:a7:1c:1b:2e:
                    11:29:95:ad:af:87:40:11:22:32:ac:b1:d4:65:1f:
                    88:02:33:cc:a4:b2:99:1a:a8:1a:9b:ff:f3:51:fb:
                    b1:34:30:af:e1:0e:fe:fb:87:13:a2:5d:ef:a9:21:
                    98:d3:0b:c0:0d:b4:05:17:5e:80:e5:01:fc:d8:d8:
                    a6:98:4f:0d:7f:c9:bd:7e:a6:25:c9:a7:3f:5e:f1:
                    3f:2c:0b:55:db:ce:41:34:29:09:89:e9:83:88:15:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:59:25:7E:A1:74:2F:16:14:4E:85:EE:38:99:25:42:58:F1:C4
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:1c:1e:51:a9:a5:ff:90:31:a0:56:5e:14:7b:e3:05:6f:
         1c:64:f2:ac:78:5b:2b:8c:87:2f:08:13:de:a8:c5:b2:13:b5:
         14:d9:a0:be:1d:38:f9:13:a7:c1:de:6e:ac:0e:d3:66:3f:ad:
         01:2c:30:f9:3e:8b:a2:51:54:aa:d1:78:f5:16:a6:69:2f:2e:
         f6:90:1f:3f:f7:f8:41:1a:cc:6a:91:cd:15:70:38:29:84:10:
         ac:47:b9:41:96:6c:8f:be:fb:6a:b1:17:5a:d4:10:35:99:db:
         59:80:71:bf:f9:be:96:d6:54:4b:75:50:a4:54:c6:6e:77:f3:
         50:d8:bf:47:18:57:df:9b:db:5e:cd:5b:5e:fb:ea:f9:b5:a4:
         57:c7:36:23:25:18:4a:eb:6c:5e:1a:d0:75:31:6e:a9:a3:30:
         60:b9:d3:b6:02:22:01:cb:ca:8e:4a:c1:89:54:72:ee:49:c4:
         78:d8:6f:4a:0a:71:46:d5:9a:9c:a8:d4:dc:e6:b2:2d:2e:c4:
         63:77:be:56:f0:cc:4a:af:22:32:74:a7:42:1c:ce:55:df:1b:
         14:03:f1:1c:5e:1c:d1:1a:67:96:73:24:64:f0:1e:9b:24:f5:
         a0:90:a7:5f:d0:54:de:45:83:94:ea:74:f2:80:b2:c0:64:4f:
         cd:5a:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:44 2025 by rpki-client