Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File:                     IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier:          SOstA8OW1ZDlWChOf7JoI0dUTm8kJ6kkEuy+fagsm5o=
Subject key identifier:   00:10:A2:4C:FE:3D:16:B1:D2:70:F6:A8:36:AC:77:B3:6C:7E:74:94
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer:       /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial:       019771885F4AFB316B90D4BD74885D44F344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number:          1232
Signing time:             Sun 15 Jun 2025 03:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:51 +0000
Files and hashes:         1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: StClDZW+0TjiHHAYBkDMoOuAaOC40iIQWMwUckckxRg=)
                          2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:5f:4a:fb:31:6b:90:d4:bd:74:88:5d:44:f3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
        Validity
            Not Before: Jun 15 03:00:51 2025 GMT
            Not After : Jun 16 03:00:51 2025 GMT
        Subject: CN=0010a24cfe3d16b1d270f6a836ac77b36c7e7494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:99:85:ad:33:3a:1a:20:9e:89:b9:1d:ea:
                    e7:da:9d:7f:77:b2:13:d1:fd:e4:9e:78:d1:6a:cf:
                    26:47:61:d7:26:8d:ec:fc:1c:39:ad:cc:4f:c5:5d:
                    6a:58:22:53:bc:c1:71:03:70:7a:53:68:f9:c3:fe:
                    b2:86:36:da:5b:29:15:95:b9:53:2c:1d:f6:94:27:
                    df:eb:66:56:55:68:53:55:77:95:5c:e5:87:ba:fc:
                    b0:87:38:10:4f:65:d7:6c:f8:0c:ee:58:b5:33:db:
                    41:7d:d9:c9:ca:d7:3b:94:1c:fb:f9:88:9b:fd:12:
                    35:f9:b5:26:0c:cf:b0:e0:90:7f:f5:6b:bb:2b:8c:
                    29:69:b8:88:74:95:5f:58:e8:93:c7:98:0b:dc:2c:
                    e7:f8:5d:f4:2d:29:21:ea:6d:31:07:79:09:73:77:
                    ae:2f:08:77:34:5d:8e:0e:23:c1:f5:f5:f3:d7:22:
                    93:54:30:f8:90:f2:0a:4c:08:af:dc:0e:10:3a:53:
                    be:ce:b3:27:e6:a6:51:fb:9e:51:41:f1:0e:64:2c:
                    7e:01:72:77:61:35:39:28:41:4b:98:8e:8f:b4:60:
                    2e:73:72:be:88:90:43:d6:86:14:84:80:1c:1f:4b:
                    a2:46:3e:04:36:04:05:e0:2b:bb:c3:81:4e:b6:8c:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:A2:4C:FE:3D:16:B1:D2:70:F6:A8:36:AC:77:B3:6C:7E:74:94
            X509v3 Authority Key Identifier:
                keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:11:4b:3d:0f:16:ab:94:cd:da:4e:ed:d3:fd:6c:bd:6c:3d:
         2d:70:ef:05:85:6e:34:b9:44:9f:84:32:d4:57:1c:e3:2c:27:
         9c:05:77:3a:18:7f:5b:99:55:c0:d7:3e:56:18:15:36:a5:c1:
         34:6e:1c:b9:8c:83:0b:83:49:32:9e:69:84:24:be:c6:7f:e3:
         45:e2:30:d3:54:a9:72:fe:64:90:b7:f8:6d:f7:9e:67:02:e5:
         05:6c:47:d6:56:ac:88:df:9b:c4:de:0a:8d:28:5a:64:3d:ec:
         9e:ea:14:da:87:11:0d:3f:f8:fb:c0:8f:37:de:02:98:a9:5f:
         d4:6f:43:22:db:f6:75:d2:63:f5:93:d1:a9:21:0b:91:ee:ce:
         1b:ac:32:d5:b3:87:8b:cc:a7:68:45:a9:9d:62:69:14:4e:7a:
         d3:be:78:36:df:5c:ea:ea:04:c6:8e:16:f1:30:02:8b:d7:4a:
         6f:f1:54:7b:5e:5a:f9:ad:9d:3f:4a:ca:9c:d1:0d:11:4c:59:
         56:c4:bb:4c:97:11:7d:4a:d2:c5:16:a4:30:2e:ec:9d:8e:be:
         f9:ce:63:d6:06:a7:57:94:59:89:85:19:56:b4:6d:88:be:c5:
         8c:ae:31:c1:e7:4b:a4:54:06:4e:40:94:a7:38:86:6d:72:db:
         4a:93:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:31 2025 by rpki-client