Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
File:                     iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json)
Hash identifier:          nSXMnOH1B4mF71cFm33psWdG+JDKQ/gdRvnFF6xcigg=
Subject key identifier:   CC:28:51:52:7F:66:2A:E5:1F:CD:C5:F8:EB:06:81:F9:15:06:EB:99
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Certificate issuer:       /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial:       0196711D277DDA6C1146E20E6D6756904C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
Manifest number:          151B
Signing time:             Sat 26 Apr 2025 08:00:58 +0000
Manifest this update:     Sat 26 Apr 2025 08:00:58 +0000
Manifest next update:     Sun 27 Apr 2025 08:00:58 +0000
Files and hashes:         1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=)
                          2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=)
                          3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=)
                          4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=)
                          5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=)
                          6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=)
                          7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: My7t1h62HfMoa+EvUkcRdE9rUyvNxEZ1aA2hVtV0z/o=)
                          8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=)
                          9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=)
                          10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=)
                          11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:1d:27:7d:da:6c:11:46:e2:0e:6d:67:56:90:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
        Validity
            Not Before: Apr 26 08:00:58 2025 GMT
            Not After : Apr 27 08:00:58 2025 GMT
        Subject: CN=cc2851527f662ae51fcdc5f8eb0681f91506eb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:40:de:cc:81:a6:39:a8:73:39:64:11:81:
                    79:a0:62:7c:04:33:01:a0:e2:26:fa:81:91:17:bd:
                    59:82:7c:81:59:3c:82:c2:af:4a:b5:fc:dc:ff:ba:
                    fa:0a:84:37:30:28:74:a7:de:25:50:dc:f7:d1:c6:
                    f9:78:44:fb:0a:a5:56:66:e5:fa:23:09:03:b3:8e:
                    1e:07:9c:7f:f6:d9:07:91:c4:3d:c8:99:b6:26:e8:
                    49:02:98:7f:f7:1a:1e:62:17:91:14:6e:67:0f:dc:
                    aa:cc:6c:98:64:dc:97:d8:c4:16:14:e6:6f:c4:67:
                    e8:48:1a:af:26:67:29:95:75:77:9b:20:54:f1:bd:
                    9b:cf:eb:d1:d6:71:8d:88:46:05:0f:97:18:8e:0f:
                    d4:e5:fa:44:13:ba:6d:46:d7:31:48:46:5a:2c:87:
                    5e:b0:c2:63:3c:15:f6:47:4e:cd:b0:d5:1c:72:b1:
                    b4:5f:49:45:fa:b6:9d:9b:11:49:c4:de:f7:0e:69:
                    b1:31:43:cd:4f:84:2f:95:b6:54:b6:8c:0e:2c:0f:
                    f2:5f:3e:c6:e6:5f:56:d3:fa:6b:23:72:03:2e:8e:
                    33:80:03:a7:60:a3:14:70:69:c1:f8:85:ef:ff:b7:
                    b5:af:a0:32:eb:45:15:31:12:fe:4e:a2:4e:a9:8e:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:28:51:52:7F:66:2A:E5:1F:CD:C5:F8:EB:06:81:F9:15:06:EB:99
            X509v3 Authority Key Identifier:
                keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:56:e7:53:45:c2:2c:e4:e3:18:ce:55:ed:93:4d:0f:16:
         bd:a2:ed:bf:a6:64:a0:73:39:44:2b:d7:ae:69:29:2c:2a:42:
         8e:e0:c1:56:75:78:b7:8b:2e:8f:4f:36:11:f7:48:93:c1:3b:
         92:48:e0:eb:2d:58:ae:bb:45:98:ac:f3:52:5a:99:7e:9b:ed:
         e4:02:d5:13:34:14:5d:fb:34:0a:71:c1:11:cb:e1:c1:95:a7:
         11:25:b3:9a:01:16:39:c9:71:bc:a4:f8:89:10:82:c8:85:32:
         7f:ba:c8:30:d1:6b:08:55:4e:ab:b1:ae:e3:aa:e4:44:5e:e8:
         63:7e:56:13:ef:c5:59:49:c9:d5:74:2e:32:d4:c9:fd:a8:d4:
         03:54:4f:3d:01:3e:10:85:41:0e:79:41:25:c4:47:87:93:a4:
         4e:72:90:53:9a:12:47:43:b1:3f:d9:0e:93:45:9b:b8:f5:17:
         95:03:f0:d7:8f:bc:85:6f:8a:6f:15:39:b8:15:42:1d:2a:64:
         eb:22:a3:e7:b9:cf:f7:41:ae:26:9b:55:69:e8:f2:ad:69:2f:
         c9:3e:ac:8f:d0:9f:51:86:a9:e5:6b:6d:88:bc:d3:e4:39:37:
         7b:74:12:87:0e:b7:0f:6c:fc:1c:3f:20:9e:29:fc:86:59:ad:
         52:d7:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:02:08 2025 by rpki-client