Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File:                     iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier:          yflLvjBUBkb1msdApJRxh+SjcalPfsIWwN/wVB4hbsg=
Subject key identifier:   50:15:88:09:D1:F3:56:FC:71:A5:EA:14:22:C7:FB:75:CC:C6:AA:08
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer:       /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial:       0197711A417E1F32FC2E608C8D0391A5DBD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number:          0BFE
Signing time:             Sun 15 Jun 2025 01:00:35 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:35 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:35 +0000
Files and hashes:         1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
                          2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
                          3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
                          4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: QZGJA/5b3sx1mldO05iiLp4KLoy9qtN63MdWG6IDOGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:41:7e:1f:32:fc:2e:60:8c:8d:03:91:a5:db:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
        Validity
            Not Before: Jun 15 01:00:35 2025 GMT
            Not After : Jun 16 01:00:35 2025 GMT
        Subject: CN=50158809d1f356fc71a5ea1422c7fb75ccc6aa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:ac:82:eb:f6:dd:05:d4:d7:e1:b5:fc:a1:
                    98:0c:19:00:09:ab:fd:78:9f:ba:e6:a8:5c:e9:1a:
                    d0:fb:3d:cf:da:68:99:2f:fe:8c:53:97:20:77:ee:
                    3b:af:e1:a6:6d:e0:6d:dc:02:03:e4:7c:d9:ab:84:
                    55:1c:31:c6:ca:5d:8e:a4:7e:4a:ff:6f:55:4e:2c:
                    9d:e4:ea:5e:c4:99:75:17:3f:3d:db:15:66:2d:12:
                    f0:08:ac:6b:0c:ac:b6:61:1f:2e:6d:ec:78:39:a0:
                    d9:69:8f:4c:7d:19:b6:d4:6c:52:24:09:ba:97:e0:
                    8b:67:b2:4c:b0:bd:a8:dd:27:85:38:54:5d:ae:d3:
                    1a:cc:d8:40:d8:68:2f:da:9e:c7:f4:4e:cc:8e:8f:
                    93:48:6b:bf:99:38:d6:83:ba:5f:a7:0b:9f:26:d2:
                    ac:db:1a:d3:7e:7d:d8:32:08:72:28:2e:1a:40:61:
                    f8:82:9d:ed:6d:d6:6c:d0:ae:c2:a3:7d:ea:56:c5:
                    b1:96:9c:6c:7e:86:10:49:bc:df:a9:f7:ab:f5:c1:
                    37:03:db:2d:c8:3a:3a:c7:e9:95:31:b2:c5:3b:f3:
                    22:6f:09:89:39:98:de:3b:f5:78:17:64:66:18:00:
                    88:30:a9:62:a0:25:09:f9:0e:94:22:e1:2f:12:a1:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:15:88:09:D1:F3:56:FC:71:A5:EA:14:22:C7:FB:75:CC:C6:AA:08
            X509v3 Authority Key Identifier:
                keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:a9:e4:42:b7:ee:5c:6b:d8:15:c9:88:f2:0f:63:e4:78:
         65:ef:8e:07:1e:aa:37:ac:97:a7:d7:59:f6:40:18:85:77:1a:
         0c:06:fb:99:d4:77:d6:02:b0:c7:71:76:67:aa:8c:5e:89:8b:
         78:3c:1b:03:6e:5d:96:74:21:16:07:33:f6:32:00:ce:d9:82:
         2b:41:4e:e7:6c:9d:93:56:f1:e9:a1:9a:1c:c7:e4:03:b9:6b:
         66:2a:4a:da:b9:e1:d6:40:0c:fe:00:fc:ad:00:a6:c4:26:bf:
         58:29:3b:c7:65:19:04:0a:a8:06:a3:b6:04:50:7b:77:7d:ff:
         05:3d:1f:34:92:b8:f7:8a:0e:5f:0d:51:48:b5:55:09:f4:c4:
         4a:47:18:e3:f9:13:9d:00:a1:2d:d4:c1:2a:04:3f:19:51:ff:
         69:f1:42:5d:90:40:dd:50:42:f8:b7:52:3b:8e:c5:94:04:0d:
         38:f4:5b:98:a2:2c:85:3b:0d:28:6a:18:e1:07:62:83:c3:83:
         27:ef:e2:d4:2d:a0:1d:8a:41:f9:04:38:14:4e:b0:73:f2:c4:
         8f:bc:1c:bd:a4:f5:e6:5f:37:7a:99:ea:4b:a1:0a:cd:94:6d:
         cc:7f:4a:25:9b:68:07:d4:2a:cf:41:59:1f:61:34:f8:e1:0c:
         8f:8b:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:37:05 2025 by rpki-client